This clarification text has been prepared by Uluslararası Nesillere Emanet Ve Yardım Derneği (International Generations Trust and Aid Association) as the data controller in accordance with the Personal Data Protection Law No. 6698 (KVKK) to inform you in line with the principles of the confidentiality of private life and the protection of fundamental rights and freedoms.

IDENTITY OF THE DATA CONTROLLER

Our association, registered with the T.C. Directorate of Civil Society Relations – Istanbul Provincial Directorate of Civil Society Relations under registry number 34-279-120, located at “Akşemsettin Mahallesi Albay Cemil Sakarya Sokak No:16/2 Fatih/ISTANBUL,” is the “DATA CONTROLLER.”

PURPOSE OF PROCESSING YOUR PERSONAL DATA

NEED, which supports humanitarian aid activities in all regions in need of material and moral humanitarian assistance nationally and internationally, will process your personal data in accordance with the fundamental principles envisaged by the KVKK, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, verbally, in writing, and electronically.

Your personal data may be processed by NEED for the following purposes:

• Execution of domestic and international humanitarian aid activities by NEED,
• Conducting necessary studies for the promotion and all other purposes specified in the association statute and for the execution of related transactions,
• Preparation and sending of informational SMS, email, and WhatsApp messages to donors, including thank you letters, videos, and photos prepared and sent depending on the donation amount,
• Preparation and distribution of social media posts, magazine brochures, banners, and similar publications,
• Conducting necessary studies by our relevant business units for the realization of the conducted activities and the execution of related business processes,
• Ensuring the correct information of the public through the use of media,
• Business and transactions for domestic and international activities,
• Planning and implementing human resources policies and processes of NEED Association within the determined legal framework,
  Unless otherwise notified in writing by the individual, it is accepted that the existing practice regarding the collection, processing of personal data, and reaching out to the individual by NEED Association through all means of communication will continue.

RECIPIENTS TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

Your collected personal data may be used by us in accordance with the basic principles envisaged by the KVKK and within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK, to perform activities supporting the given purposes, to carry out promotional and informative communications regarding NEED Association, to collect and compile statistical information, to improve donation campaigns, and to share with other NGOs, legally authorized public institutions, Turkish embassies, and legally authorized private institutions for the promotion and information of NEED Association’s business and transactions.

NEED Association does not record or store your personal data such as credit card, debit card, etc. It ensures the security of donation payments with SSL-based 256-bit encryption.

METHOD OF COLLECTION AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your personal data may be collected, processed verbally, in writing, or electronically in line with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK and the purposes stated in this enlightenment text, in compliance with the legislation and NEED Association policies. We will keep your personal data for as long as necessary to fulfill the purposes stated in this notice, unless a shorter or longer retention period is required or permitted by applicable law. Accordingly, we consider the legal limitation periods, as well as the periods required for processing the data, unless otherwise required.

RIGHTS OF THE DATA SUBJECT AS PER ARTICLE 11 OF THE LAW

As per Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is processed,
• If your personal data is processed, to request information regarding this,
• To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom your personal data is transferred, whether domestically or abroad,
• To request correction if your personal data is incomplete or incorrectly processed, and to request that this correction be notified to the third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data in accordance with the law and other relevant provisions, and to request that this deletion or destruction be notified to the third parties to whom your personal data has been transferred, in case the reasons requiring the processing of personal data cease to exist,
• To object to the occurrence of a result against you by the analysis of your processed data solely through automated systems,
• To demand compensation for damages in case you incur damages due to the unlawful processing of your personal data.

As per the second paragraph of Article 28 of the Law, the situations where data subjects do not have the right to request are listed, and in this context;

• In case the processing of personal data is necessary for the prevention of crime or for the investigation of crimes,
• In the case of processing of personal data that has been made public by the data subject himself/herself,
• In the case of processing of personal data by official statistics in a manner that renders the data anonymous for research, planning, and statistical purposes,
• In the case of processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized by law for the purpose of supervision or regulation and disciplinary investigation or prosecution,
• In the case of processing of personal data by judicial authorities or enforcement authorities regarding investigation, prosecution, trial, or execution proceedings.

As per the first paragraph of Article 28 of the Law, in the following cases, since the data will be outside the scope of the Law, requests of the data subjects will not be processed for these data:

• Processing of personal data by real persons or by family members living in the same residence as part of activities concerning himself/herself only, provided that personal data are not transferred to third parties and the obligations regarding data security are complied with.
• Processing of personal data for art, history, literature, or scientific purposes, or within the scope of freedom of expression, without violating the national defense, national security, public security, public order, economic security, privacy, or personal rights, provided that personal data are processed.
• Processing of personal data by public institutions and organizations authorized by law for the protection of the State’s economic and financial interests in relation to budget, taxation, and financial matters.

In accordance with Article 13 paragraph 1 of the KVKK, to exercise your rights mentioned above, you must submit your request to NEED Association in writing, in accordance with the KVKK. In this context, the channels and procedures for making applications for NEED Association under Article 11 of the Law are explained below:

If you make a written request; You can personally submit a signed copy of the Data Subject Application Form, which is a wet signature, to the Association Headquarters with an identity document and either deliver it in person or by proxy with a notarized power of attorney indicating that you are authorized to apply for the rights specified in Article 11, or send it to the address “Akşemsettin Mahallesi Albay Cemil Sakarya Sokak No:16/2 Fatih/Istanbul” via notary. If you make an electronic request; You can sign the

Data Subject Application Form with an electronic or mobile signature having a “secure electronic signature” certificate defined in the Electronic Signature Law No. 5070 and send it to the email address of our Association, which is registered as [email protected].

Your requests submitted to our Association will be answered in writing or electronically within the shortest time possible and within thirty days at the latest, depending on the nature of the requests you have made, in accordance with the Transaction Fees and Charges determined in Article 7 of the Regulation on the Procedures and Principles Regarding Application to the Data Controller.