1. Purpose
This policy sets out the principles governing the processing, retention, sharing and protection of personal data obtained by En Baba Organizasyon (the “Company”). In all its activities, the Company acts in accordance with Turkish Law No. 6698, the Personal Data Protection Law (KVKK) .
2. Scope
This policy covers the personal data of customers, employees, suppliers, business partners, event personnel and all natural persons who establish a relationship with the Company.
3. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Data Processing: Any operation performed on personal data, including recording, storing, altering, disclosing or deleting it.
- Data Controller: The natural or legal person that determines the purposes and means of processing personal data (En Baba Organizasyon).
4. Principles for Processing Personal Data
- Compliance with law and good-faith principles;
- Being accurate and up to date;
- Processing for specified, explicit and legitimate purposes;
- Being relevant, limited and proportionate to the processing purpose;
- Retention for the period prescribed by applicable law or required for the processing purpose.
5. Purposes of Processing Personal Data
- Managing application, contract and service processes;
- Supporting customer and employee satisfaction;
- Providing organization and event services;
- Managing finance, accounting, human-resources and operational processes;
- Fulfilling legal obligations;
- Managing occupational health and safety processes;
- Conducting audit, reporting and internal-control activities.
6. Transfer of Personal Data
The Company may transfer personal data to authorized public bodies, business partners and service providers only under the conditions prescribed by the KVKK and applicable legislation. International transfers take place only with the data subject’s explicit consent or where the specific conditions stated in the KVKK are met.
7. Retention Period for Personal Data
Personal data is retained for as long as required for its processing purposes. Data whose retention period has expired is securely deleted, anonymized or destroyed.
8. Data Security
The Company takes the necessary technical and administrative measures to protect personal data against unauthorized access, loss, alteration or disclosure. These measures include access controls, encryption, firewalls and employee-awareness training.
9. Rights of the Data Subject
- To learn whether personal data is being processed;
- To request information if it has been processed;
- To learn the purpose of processing and whether the data is used accordingly;
- To learn the recipients of domestic or international transfers;
- To request correction if data has been processed incompletely or incorrectly;
- To request deletion or destruction;
- To request notification of the relevant action to third parties receiving the data;
- To object where an automated analysis produces a result against the data subject;
- To claim compensation for damage.
10. Application Procedure
Data subjects may submit their requests by email to info@enbabaorganizasyon.com or in writing to the Company address. Applications are concluded within 30 days .
11. Updates
This policy may be updated to reflect legal changes and Company practices. The latest version is always published on our official website .