Privacy Policy of the Association for Information Technologies and Internet Security

Introduction

As the Association for Information Technologies and Internet Security
(“BTİDER” or the “Association”), we attach great importance to the
protection of personal data and the safeguarding of privacy.

This Privacy Policy explains how personal data collected within the scope
of our Association’s activities is processed, for what purposes it is used,
and the rights of data subjects.

This document has been prepared within the framework of the Experience AI
Privacy Policy Guide and is updated periodically to ensure that it fully
reflects our legal obligations.

1. Time and Method of Data Collection

As BTİDER, we may collect personal data through various methods and at
different times. For example:

Website forms:

When you fill in online forms provided through
www.btider.org.tr, such as event registration, membership
application, contact or information request forms.

Email:

When you contact us by email, your contact information and the personal
data you share may be collected.

Account creation:

When you create an account to access certain services or resources offered
on our website.

Other communication channels:

Personal information you share through phone calls, postal correspondence
or face-to-face meetings may also be collected.

2. Types of Data Collected

The personal data we collect may vary depending on the nature of your
interaction with us. Such data may include:

• Name, surname and title
• Contact information such as email address, phone number and postal address
• Organisation or business information
• Information regarding event participation or membership status
• Technical data such as IP address and browser information

3. Purpose of Data Collection

BTİDER collects personal data for the following purposes:

• Evaluating membership applications and carrying out membership processes
• Providing information about events or training programmes and managing registration processes
• Improving the services on our website and enhancing user experience
• Responding to your requests, questions or complaints
• Carrying out institutional reporting, statistical analysis and development activities
• Complying with legal or regulatory obligations

We undertake to obtain explicit consent from the relevant person and to
provide the necessary information before carrying out any personal data
processing activity outside these purposes.

4. Use of Personal Data and Sharing with Third Parties

Personal data collected is not used for purposes other than those specified
in this policy. We may share your personal data in the following cases:

Service providers and business partners:

With suppliers and technical support providers who process data on our
behalf for the provision of certain services, such as server services,
software support and email services.

Legal obligations:

With official institutions and organisations where sharing is required by
law or relevant regulations.

Explicit consent:

Where the data subject has expressly given consent.

In this context, we ensure that the parties to whom data is transferred
have taken sufficient technical and administrative measures to protect the
confidentiality and security of personal data.

5. Data Retention Period

Personal data is retained for the period required by the purposes of
processing. When this period expires, the data is deleted, destroyed or
anonymised in accordance with the legislation and our Association’s data
retention policies.

The following matters are taken into consideration when determining data
retention periods:

• Retention periods specified in relevant legal regulations
• Cases where the purpose of data processing has ended, the data subject has made a request, or the processing of the data is no longer necessary
• Limitation periods prescribed by the legislation

6. Compliance with Local Regulations

BTİDER operates in compliance with all legal regulations regarding the
protection of personal data, particularly the Law on the Protection of
Personal Data No. 6698 (“KVKK”) in Türkiye.

In line with regulations applicable to different jurisdictions, additional
or revised provisions may be added to this policy where necessary, and the
required measures will be taken.

7. Rights of Data Subjects

Pursuant to the KVKK and other relevant legislation, data subjects have the
following rights:

• To learn whether their personal data has been processed
• To request information if their personal data has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties to whom personal data has been transferred, domestically or abroad
• To request correction if personal data has been processed incompletely or inaccurately
• To request deletion or destruction of personal data within the framework of the conditions set out in the relevant legislation
• To request that these transactions be notified to third parties to whom the data has been transferred
• To object to any result arising against the person through the analysis of processed data exclusively by automated systems
• To request compensation for damages in the event that personal data is processed unlawfully

You may contact us through the communication channels below to exercise
these rights or to submit your questions.

8. Contact Information

If you would like to submit any questions regarding your personal data or
this Privacy Policy, please contact us using the information below:

9. Last Updated

This Privacy Policy was last updated on 03/01/2025.
Necessary revisions will be made to our policy depending on changes in
legislation or our business processes, and the current version will be
published on our website.

As the Association for Information Technologies and Internet Security, we
are aware of our responsibility regarding the protection of your personal
data and take care to implement all necessary technical and administrative
measures in this regard.

For detailed information about this Privacy Policy, you may contact us or
visit our website.