Last updated:
1. Data controller
Destek Ol acts as the data controller for personal data processing through destekol.org and its associated digital channels. Contact: info@destekol.org. Address: Taşdelen Mah. Buket Sokak, Dış Kapı No: 1-3, İç Kapı No: 38, Çekmeköy / İstanbul, Türkiye.
2. Personal data processed
| Data group | Content |
|---|---|
| Identity/contact | Full name, email, telephone and application contact details. |
| Applications/transactions | Communication, volunteering, cooperation, project, complaint, feedback and donation transaction information. |
| Finance/payments | Donation amount, currency, transaction reference and limited transaction data provided by the payment institution. |
| Technical | IP address, date and time, session, device/browser and security records. |
| Preferences | Cookie and communication preferences. |
| Special categories of data | Special categories of personal data submitted by users without being required are processed only where the necessary conditions are met and appropriate measures are in place. |
3. Purposes of processing
Operating the website and ensuring security and accessibility.
Assessing communication, volunteering, cooperation, project and other applications.
When donation channels are active, managing donations, accounting, reconciliation, refunds and transaction security.
Managing complaints, ethics reports, safeguarding/PSEA and child protection reports.
Preventing forgery, misuse, AML/CFT, sanctions and fraud risks.
Meeting statutory obligations and protecting legal rights.
Sending newsletters, announcements and informational communications where permitted.
4. Legal bases
Personal data are processed on the legal bases set out in Article 5 of the KVKK and, for special categories of data, Article 6, depending on the specific processing activity. These include processing expressly provided for by law, processing directly related to entering into or performing a contract, compliance with the data controller’s legal obligations, establishing, exercising or defending a right, legitimate interests provided that the data subject’s fundamental rights and freedoms are not harmed, and explicit consent where required.
5. Collection methods
Data are obtained by automated or partly automated means through web forms, email, direct communication, logging and security systems, cookies and similar technologies and, when donation channels are active, payment service providers.
6. Transfers
Personal data may be transferred only as necessary to competent public authorities, banks and payment service providers, IT, hosting and security service providers, legal and financial advisers, auditors and contracted parties who need the information for their duties.
7. Transfers abroad
Where service providers abroad are used, personal data transfers are carried out under the conditions and appropriate safeguard mechanisms set out in Article 9 of the KVKK and current regulations.
8. Retention period
Personal data are retained for the period required by the processing purpose and relevant legislation, contracts, audits or dispute procedures; once the applicable conditions cease, they are deleted, destroyed or anonymized.
9. Your rights under Article 11 of the KVKK
To learn whether your personal data are processed and, if so, request information.
To learn the purpose of processing and whether the data are used in accordance with that purpose.
To know the third parties to whom data are transferred within Türkiye or abroad.
To request correction of incomplete or inaccurate data.
To request deletion or destruction of data where the statutory conditions are met.
To request notification of corrections or deletion/destruction to third parties to whom the data have been transferred.
To object to an adverse result arising from analysis of processed data exclusively through automated systems.
To claim compensation for damage resulting from unlawful processing.
10. How to submit a request
You may submit requests under the KVKK to info@destekol.org, clearly stating your request, or in writing to the address above. Necessary and proportionate additional information may be requested to verify that the request is yours. Requests are concluded in accordance with statutory time limits and procedures.