1. INTRODUCTION
Purpose and Scope

This Privacy Policy has been prepared and enacted to ensure compliance with the Personal Data Protection Law No. 6698 (“Law”) and to establish the principles to be followed by the Sound Studios Union (“Union” or “SSU”) regarding the protection and processing of personal data.

The purpose of this Privacy Policy is to inform you about what types of data we collect, how we store and use them, and to reflect any updates to the policy on this page. Our Privacy Policy is available on the homepage, and detailed information is provided on every page where personal data is requested. In addition to this general policy, we recommend reviewing the separate information/clarification texts prepared for each specific process where your personal data is processed.

2. PRINCIPLES AND CONDITIONS OF PERSONAL DATA PROCESSING
2.1. Principles of Personal Data Processing

“Personal Data” refers to any information that identifies or can identify you. SSU processes personal data in accordance with the principles set forth in Article 4 of the Law. These principles must be adhered to for each personal data processing activity:

Lawfulness and fairness: SSU processes personal data only for specified purposes and in compliance with relevant legislation, secondary regulations, and general legal principles.

Accuracy and up-to-dateness: SSU ensures that personal data is accurate and current. Individuals have the right to request correction or deletion of their data.

Specific and legitimate purposes: Before processing any personal data, SSU lawfully determines the purposes for which the data will be used.

Relevance and proportionality: Personal data is processed only to the extent necessary and directly related to the purpose. Unrelated data is not processed.

Lawfulness and fairness: SSU processes personal data only for specified purposes and in compliance with relevant legislation, secondary regulations, and general legal principles.

Accuracy and up-to-dateness: SSU ensures that personal data is accurate and current. Individuals have the right to request correction or deletion of their data.

Specific and legitimate purposes: Before processing any personal data, SSU lawfully determines the purposes for which the data will be used.

Relevance and proportionality: Personal data is processed only to the extent necessary and directly related to the purpose. Unrelated data is not processed.

Retention for the required period: Personal data is deleted, destroyed, or anonymized when the legal retention period ends or the processing purpose no longer exists, considering sector practices. Personal data is deleted, destroyed, or anonymized when the legal retention period ends or the processing purpose no longer exists, considering sector practices.

2.1. Conditions for Processing Personal Data

SSD processes personal data only when at least one of the conditions in Article 5 of the Law is met:

Explicit consent: Data is processed only with the individual’s informed and free consent, limited to the specified purpose.

Legal obligation: SSU may process data without consent if explicitly required by law.

Vital interests: Data may be processed without consent to protect the life or physical integrity of the individual or a third party.

Contractual necessity: Processing is required for establishing or performing a contract between SSU and the individual.

Legal rights: Processing may occur to establish, exercise, or defend a legal right.

Publicly available data: Data made publicly available by the individual can be processed for disclosure purposes.

Legitimate interests: SSU may process data for legitimate interests without harming the individual’s fundamental rights and freedoms, ensuring proportionality.

3. TRANSFER OF PERSONAL DATA

During data processing, SSU may transfer personal data to third parties in Turkey or abroad in compliance with Articles 8 and 9 of the Law and any additional regulations set by the Personal Data Protection Board (“Board”).

Domestic transfers: Allowed if one of the processing conditions in Articles 5 or 6 is met and principles are followed.

International transfers: Allowed if the country is deemed adequate by the Board and the processing conditions and principles are respected. If the country is not listed as secure, additional safeguards such as explicit consent or written guarantees from the data recipient are required.

Data is transferred only when legally necessary and in line with the principles of processing. Each process specifies who the data is shared with and for what purpose in the corresponding clarification texts.

4. INFORMATION AND RIGHTS OF THE DATA SUBJECT

In accordance with Article 10 of the Law, SSU informs individuals about personal data processing before or at the time of processing. SSU has established internal procedures to ensure transparency.

Under Article 11 of the Law, data subjects have the following rights regarding personal data processed by SSU:

• Learn whether their personal data is processed
• Request information if data has been processed
• Learn the purpose of data processing and whether it is used in accordance with that purpose
• Know domestic or international recipients of personal data
• Request correction of incomplete or inaccurate data and notification to third parties
• Request deletion or destruction of data when legal reasons for processing no longer exist
• Object to automated decision-making that may negatively affect them
• Claim compensation for damage caused by unlawful processing

Requests can be submitted in writing, via registered electronic mail (KEP), secure electronic signature, mobile signature, or previously registered email address. SSU evaluates requests within 30 days.

Name: Sound Studios Union
E-mail: kvkk@sesstuder.org
KEP: ssd@hs01.kep.tr
Mersis No: 0609143669400001
Address: Türkali Mahallesi Şehit Kerem Ali Mergen Sokak. No: 9, 34357 Beşiktaş / İstanbul

SSU ensures that individuals are informed if personal data is not obtained directly from them, during reasonable periods, first communication, or at the first data transfer.

5. DELETION, DESTRUCTION, AND ANONYMIZATION

Even if data is processed lawfully, SSU deletes, destroys, or anonymizes personal data if processing reasons no longer exist, following sector practices, published guidelines, and individual requests. Maximum retention periods are set for each data category and documented in SSU’s Personal Data Retention and Destruction Policy.

6. SECURITY AND CONFIDENTIALITY

SSU uses secure networks, firewalls, and industry-standard data protection practices to safeguard personal data. Reasonable measures are taken to prevent loss, misuse, unauthorized access, disclosure, alteration, or destruction. While SSU follows these procedures and updates them according to technological developments, it cannot guarantee absolute security against potential internet threats.

7. LINKS TO OTHER WEBSITES

This Privacy Policy applies only to this website. SSU is not responsible for external websites, even if linked. Users are advised to review the privacy policies of other websites before sharing personal information.

8. CHILDREN’S PRIVACY

This site and SSU’s services are not intended for individuals under 18. SSU does not collect or use information from minors without explicit parental consent. Parents may request to review or delete their child’s data. Parents are encouraged to discuss online use and data sharing with their children.

9. CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated as needed to reflect changes in services, legal requirements, or new offerings.