Privacy & Cookie Policy

4. Purposes of Processing Personal Data

Personal data is processed in accordance with the principles of proportionality and purpose limitation for the following purposes:

• Conducting communication activities
• Evaluating contact forms, requests, and partnership applications
• Providing information requested by users
• Sending newsletters and event announcements where explicit consent has been given
• Coordinating volunteer activities
• Managing membership and community processes
• Planning and implementing events
• Fulfilling legal obligations
• Using essential technical cookies to ensure website security and performance
• Conducting anonymous statistical analyses to improve website content
• Establishing evidence in the event of potential disputes

4.1 Processing of Personal Data for Membership and Application Processes

Personal data shared through membership applications, volunteer applications, and community participation forms submitted to İhtimam Association is processed for the purposes of evaluating applications, conducting communication processes, carrying out reference checks, and fulfilling legal obligations arising from applicable legislation.

Within this scope, identity information, contact information, professional information, reference information, and payment/receipt information are processed only to the extent necessary for the management of application processes and are protected through appropriate administrative and technical safeguards.

5. Legal Grounds for Processing Personal Data

Personal data is processed in accordance with Article 5 of the Turkish Personal Data Protection Law No. 6698 (KVKK) based on the following legal grounds:

• Explicit consent of the data subject
• Cases explicitly provided for by law
• Fulfillment of legal obligations
• Necessity for the establishment or performance of a contract
• Necessity for the establishment, exercise, or protection of a legal right
• Necessity for the legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed

6. Methods of Collecting Personal Data

Personal data may be collected through the following channels:

• Website
• Contact forms
• Email and other electronic communication channels
• Event and meeting participation processes
• Application and registration forms
• Cookies and similar technical tools

7. Transfer of Personal Data

Personal data is not sold, rented, or used for commercial purposes.

Personal data may be transferred to:

• Authorized public institutions and authorities where required by law
• Technical infrastructure and information technology service providers engaged by İhtimam

Google Analytics is used for website analytics purposes. Within this scope, certain technical data (including anonymized IP information) may be transferred to servers located outside Türkiye. IP anonymization features are enabled within Google Analytics, and such transfers are carried out solely for improving website performance and content, in compliance with applicable legislation.

8. Measures for the Protection of Personal Data

Technical Measures

• SSL security certificates are used
• Access permissions to systems are restricted
• Up-to-date security software is used
• Log records are maintained regularly

Administrative Measures

• Confidentiality obligations have been defined
• Personnel are informed about data security
• Access rights are removed when duties change or end

9. Retention Periods

Contact forms: 2 years
Email correspondence: 3 years
Cookies: Depending on browser settings and cookie type
Data subject to legal obligations: For the period required by applicable legislation

Personal data is deleted, destroyed, or anonymized once the purpose of processing ceases to exist or the relevant retention period expires.

10. User Rights

Under KVKK, users have the right to:

• Learn whether their personal data is being processed
• Request access to and information about their personal data
• Request correction, deletion, or destruction of personal data
• Object to processing activities
• Learn whether their personal data has been transferred
• Request compensation for damages arising from unlawful processing

11. Application Procedure

Users may submit requests regarding their rights under KVKK through the following methods:

• In writing:
  Karaman Associations Campus, Nilüfer, Bursa, Türkiye
• By email:
  info@ihtimam.org

To verify identity, additional information and documentation may be requested as necessary.

Applications will be responded to within a maximum of 30 days, depending on the nature of the request.

12. Cookie Policy

Essential cookies: Used for website security and core functionality; no explicit consent is required.

Analytics cookies: Used to improve website content and are activated only with the user’s explicit consent.

Analytics cookies are disabled by default and become active only after user approval.

Advertising or marketing cookies are not used.

Analytics cookies are not used to identify or profile users, but to make content more accessible and care-centered.

13. Data Security and Breach Notification

İhtimam Association takes the necessary technical and administrative measures to protect personal data.

In the event of a personal data breach, affected individuals and the Personal Data Protection Authority will be informed in accordance with applicable legislation.

14. Policy Changes

This policy becomes effective from the date it is published on the website following any update.

15. Entry into Force

This policy is implemented by İhtimam Association in accordance with applicable legislation.