Data Subject Request Form
1. General Information
The Turkish Personal Data Protection Law No. 6698 (“Law”) grants data subjects a number of rights including the right to be informed about their personal data, to access such data, to learn whether it is being used in accordance with its purpose, and to request rectification or deletion of such data. In accordance with Article 13(1) of the Law, applications relating to these rights must be submitted in writing to the Data Controller companies within Runibex Technology Group (RTG) — namely Redibex Bilgi Teknolojileri A.Ş., Runibex Yazılım Teknoloji A.Ş., NGI Bilgi Teknolojileri A.Ş. and Runibex Technology Ltd — using this Data Subject Request Form or through other methods determined by the Personal Data Protection Board (“Board”). In this context, written applications to RTG may be submitted by printing and fully completing this Application Form together with a document verifying your identity, through the following channels:- In person by the applicant;
- Through a notary; or
- By signing with a “qualified electronic signature” as defined in the Turkish Electronic Signature Law No. 5070 and sending it to RTG’s registered electronic mail address.
| Application Method | Address for Application | Information to be Included |
|---|---|---|
| In-person application (applicant applies in person with an identity document) | Altayçeşme Mah. Zühal Sk. Niyazi Bey İş Merkezi No: 22 İç Kapı No: 5 Maltepe, İstanbul, Türkiye | Write on the envelope: “Information Request under the Personal Data Protection Law” |
| Notification via notary | Altayçeşme Mah. Zühal Sk. Niyazi Bey İş Merkezi No: 22 İç Kapı No: 5 Maltepe, İstanbul, Türkiye | Write on the notification envelope: “Information Request under the Personal Data Protection Law” |
| By email | info@runibex.com | Write in the subject line: “Information Request under the Personal Data Protection Law” |
2. Applicant Information
| Full Name | |
| Turkish ID Number | |
| Nationality | |
| Passport No. / Foreign ID No. | |
| Residential or Workplace Address | |
| Email Address | |
| Telephone | |
| Fax |
Your relationship with RTG
|
Customer / Rights Holder
Contract details: _______________ |
Service Provider Representative / Employee
Please state your company, position and period of employment: _______________ |
|
Visitor
Please state the date you visited our premises: ___/___/______ |
Job Applicant
Application date: ___/___/______ |
|
Employee
Please state your job title: _______________ |
Other
Please provide details: _______________ |
3. Requests Available to the Applicant
| No. | Subject of Request | Selection |
|---|---|---|
| 1 | I wish to learn whether my personal data has been processed by your company. [KVKK Art. 11/1(a)] | |
| 2 | If my personal data has been processed by your company, I request information relating to such processing. [KVKK Art. 11/1(b)] | |
| 3 | I wish to learn the purpose of processing my personal data and whether it is being used in accordance with that purpose. [KVKK Art. 11/1(c)] | |
| 4 | If my personal data is transferred to third parties domestically or abroad, I wish to know who those third parties are. [KVKK Art. 11/1(ç)] | |
| 5 | I believe my personal data has been processed incompletely or inaccurately and I request its rectification. Please submit a petition specifying the personal data to be rectified, together with supporting documents showing the correct and supplementary information (e.g. photocopy of ID card, proof of residence, etc.). [KVKK Art. 11/1(d)] | a) b) |
| 6 | I believe the reasons requiring the processing of my personal data no longer apply, and in this context I request that my personal data be: a) Deleted b) Anonymised [KVKK Art. 11/1(e)] | |
| 7 | I request that the operations carried out pursuant to my rectification request (No. 5) be notified to the third parties to whom my personal data has been transferred. [KVKK Art. 11/1(f)] | |
| 8 | I request that the operations carried out pursuant to my deletion or destruction request (No. 6) be notified to the third parties to whom my personal data has been transferred. [KVKK Art. 11/1(f)] | |
| 9 | I believe that the analysis of my personal data processed by your company exclusively through automated systems has produced a result to my detriment. I object to this result. Please submit a petition relating to the analysis result you believe is to your detriment, together with supporting documents. [KVKK Art. 11/1(g)] | |
| 10 | I have suffered damage due to the unlawful processing of my personal data. I request that this damage be remedied. Please submit supporting documents relating to the matter of unlawfulness (e.g. court decision, Board decision, documents showing the amount of material damage, etc.). [KVKK Art. 11/1(ğ)] |
4. Response Time
In accordance with Article 13 of the Law, our company will conclude the requests made by data subjects free of charge within a maximum of 30 (thirty) days, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. Our company may accept the application or may reject it by stating its reasons, and may notify the data subject of its response in writing or electronically. A data subject’s application may be rejected in the following circumstances:- It would obstruct the rights and freedoms of others;
- It would require disproportionate effort;
- The information is publicly available;
- It would jeopardise the privacy of others; or
- One of the exclusions under Article 28 of the Law applies.
Preferred method of receiving the response
| I wish to collect the response in person. (If collecting by proxy, a notarised power of attorney or authorisation document must be presented.) | |
| I wish to receive the response at my email address. |
| Full Name | |
| Application Date | |
| Signature |