1. Definitions

As used in this Clarification Text;

• Personal Data: Any information relating to an identified or identifiable natural person,
• Personal Data Protection Law (“PDPL”): the Law on the Protection of Personal Data No. 6698, which entered into force upon publication in the Official Gazette dated April 7, 2016,
• TOHUM Autism: TOHUM Türkiye Otizm Erken Tanı ve Eğitim Vakfı ve TOHUM Otizm Vakfı İktisadi İşletmesi’ni,
• Data Processor: the natural or legal person who processes Personal Data on behalf of the data controller based on the authority given by the data controller,
• Data Controller: It refers to the natural or legal person who determines the purposes and means of processing personal data, and who is responsible for the establishment and management of the data recording system.

2. Data Controller

Your personal data may be processed by TOHUM Autism in the capacity of Data Controller, within the scope explained below in accordance with the PDP Law.

3. Purpose of Processing Personal Data

Your Personal Data, pursuant to Articles 4, 5 and 6 of the KVKK;

• Compliance with the law and the rules of honesty
• Accurate and up-to-date when necessary
• Processing for specified, explicit, and legitimate purposes
• Being connected, limited, and proportionate to the purpose for which they are processed
• Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed

can be processed in accordance with its principles within the scope of the purposes listed below.

Your Personal Data may be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, in connection with the following activities of TOHUM Autism:

• TOHUM Planning and implementation of Autism's human resources policies and processes,
• Providing information to relevant individuals about the services, activities, projects, and works offered by TOHUM Autism,
• TOHUM Planning and execution of activities necessary for the presentation, recommendation, and promotion of Autism programs and services to interested individuals,
• Carrying out the necessary work by our relevant business units for the execution of activities carried out by TOHUM Autism and the execution of related business processes,
• TOHUM Planning and implementation of Autism's commercial and/or business strategies,
• Ensuring the legal, technical, and commercial-business security of TOHUM Autism and the relevant individuals with whom TOHUM Autism has a business relationship.

The purpose of TOHUM Autism in processing the Data Owner's Personal Data consists solely of the above purposes, and TOHUM Autism shall not go beyond this purpose and basis with regard to the processing of Personal Data.

6. Data Subject to Processing

TOHUM Otizm may collect and process the following Personal Data regarding e-newsletter recipients, website visitors who contact us, customers, employees, dealers, and their authorized representatives, limited to the purposes stated above:

• Name and surname information;
• contact information such as home address, work address, phone number, and e-mail address;
• Gender information;
• Education and occupation information;
• Special categories of personal data include biometric and genetic data such as photographs, videos, and fingerprints.

7. Transfer of Personal Data

Your collected Personal Data may be transferred to our business partners, suppliers, legally authorized public institutions, and legally authorized private institutions within the scope of the purposes of TOHUM Autism listed above and in order to sustain its activities, within the scope of the conditions for the domestic and international transfer of Personal Data specified in Articles 8 and 9 of the Law.

8. Personal Data Collection Method and Legal Basis

Your Personal Data may be collected by TOHUM Autism in physical and electronic environments for the purposes listed above, in accordance with Articles 5 and 6 of the KVKK.

9. Your Rights Under the KVKK

As a Personal Data owner, you have the following rights:

• a. Learning whether personal data is processed or not;
• b. Requesting information regarding personal data if it has been processed;
• c. learning the purpose of the processing of your personal data and whether they are used in accordance with their purpose;
• d. To know the third parties to whom your personal data is transferred, either domestically or abroad;
• e. requesting the correction of personal data in case it is processed incompletely or incorrectly;
• f. Requesting the deletion or destruction of personal data within the framework of Article 7 of the Law;
• g. to request the notification of the operations carried out pursuant to sections 4.e and 4.f to third parties to whom the Personal Data has been transferred;
• h. the right to object to the occurrence of a consequence against oneself by means of the analysis of processed Personal Data exclusively through automated systems, and
• i. The right to claim compensation for damages in the event of suffering loss due to the unlawful processing of personal data.