Interim publication. The KVKK information notice is being prepared by our Legal team. Until it is published, the sections below of the Personal Data Processing and Protection Policy apply.
10.4. Informing the Data Subject
The Company informs data subjects in accordance with Article 10 of the Law and secondary legislation. Within this scope, the Company informs data subjects of who processes the personal data as data controller, for which purposes it is processed, with whom and for which purposes it is shared, by which methods it is collected, its legal basis, and the rights of data subjects.
12. Rights of Data Subjects and Exercise of These Rights
12.1. Rights of the Data Subject
The data subject has the following rights regarding their personal data:
- To learn whether their personal data is being processed
- To request information if their personal data has been processed
- To learn the purpose of processing their personal data and whether it is used in accordance with that purpose
- To know the third parties, in Turkey or abroad, to whom their personal data is transferred
- To request the correction of personal data if it has been processed incompletely or inaccurately
- To request the deletion or destruction of personal data if the reasons requiring its processing no longer exist
- To request that the correction, deletion or destruction operations be notified to third parties to whom the personal data has been transferred
- To object to a result to their detriment arising from the analysis of the processed data exclusively by automated systems
- To claim compensation for damages if they suffer damage due to unlawful processing of their personal data
12.2. Exercising Rights
Data subjects may exercise the rights listed above by submitting the data subject application form available at www.rglabs.io.
12.3. Our Company’s Response to Applications
If the data subject duly submits a request regarding their rights to our Company, our Company will conclude the request free of charge as soon as possible, depending on the nature of the request, and within 30 (thirty) days at the latest. However, if the transaction requires an additional cost, a fee may be charged in accordance with the tariff set by the Board.
12.4. Cases in Which the Data Subject Cannot Assert Their Rights
Pursuant to Article 28/2 of the KVKK, data subjects cannot exercise their rights in the following cases, except for the right to claim compensation for damages:
- Personal data processing is necessary for the prevention of a crime or for a criminal investigation
- Processing of personal data made public by the data subject themselves
- Personal data processing is necessary for the performance of supervisory or regulatory duties by authorized public institutions and organizations based on the authority granted by law
- Personal data processing is necessary for the protection of the State’s economic and financial interests regarding budget, tax and financial matters