GDPR

PRIVACY NOTICE

a. Data Controller

Within the scope of the DTSS 2024 Conference organized within the scope of METU-DTX, we inform natural persons who use or intend to use our products and services about our data processing activities with this Clarification Text. In regard to the mentioned activities, we act as the Data Controller within the scope of Turkish Data Protection Law No. 6698 (Hereinafter referred to as “KVKK”), European Union General Data Protection Regulation No. (EU) 2016/679 (Hereinafter referred to as “GDPR”) and other applicable legislation.

b. Purposes of Data Processing

We process personal data of real persons to manage contractual relations, fulfill the obligations of the project’s terms of reference, organize events during the project process, invite real persons who use our products and services, record the events, and apply surveys for market research.

While attending the events, we may record images and may use these records on our social media accounts. You have the right not to appear in these images. In this case, you will be informed verbally about the image recording. Please contact the photographer or the moderator of the online meeting.

c. Data Recipients and Purposes of Transfers

Ensuring that personal data is not transferred to third parties is our priority. We prefer not to transfer any data to a third party other than our subcontractors who provide technical support and the group companies of METU-DTX that share the common infrastructure.

In project contracts, contracting authorities and beneficiaries are government institutions. We are required to prove that we fulfill the commitments we offer to contracting authorities and beneficiaries. Therefore, processes related to project contracts and activity records are transferred to relevant and authorized institutions.

d. Transferring Abroad

METU-DTX provides products and services on international projects as well. If the project you participate in is an international project, your personal data will likely be transferred to the relevant country’s project coordinator, relevant governmental, or non-governmental organizations. For this reason, we process the data in and from Turkey.

If you participate in our events and surveys, please note that the information technology infrastructure we utilize is located outside Turkey, and your personal data will be transferred abroad due to your participation. If you do not consent, please refrain from participating in the event and/or survey or inform us of your situation.

e. Methods of Collection and Legal Basis

We collect personal data directly from data subjects or our customers via email, digital platforms, and survey software.

While processing your personal data, we rely on the purposes defined in topic b. of this Notice and the legal basis mentioned below:

  • Purposes of Processing Legal Basis
  • Managing contractual relations, fulfilling the obligations of the project’s terms of reference
  • Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract
  • Inviting real persons to events, Recording of events, Applying surveys
  • Data processing is necessary for the establishment, exercise, or protection of any right
  • Recording images, using these records on social media accounts
  • Explicit consent from you


f. Retention Period

We process personal data for a limited period as provided by legal legislation.

Only parties and target groups of the projects are invited to the events we organize. For this purpose, the processing period is limited to six months after the end of the project contract period.

g. Your Rights on Your Personal Data

METU-DTX would like to ensure that if you are the data subject, you are fully aware of all your data protection rights. Every data subject is entitled to the following at least:

  • The right to withdraw your consent – You can request the deletion of image records and social media content that feature you.
  • The right to access – You have the right to request copies of your personal data from METU-DTX. We may charge a small fee for this service.
  • The right to rectification – You have the right to request that METU-DTX correct any information you believe is inaccurate.
  • You also have the right to request the completion of information you believe is incomplete.
  • The right to erasure – You have the right to request that METU-DTX erase your personal data under certain conditions.
  • The right to restrict processing – You have the right to request that METU-DTX restrict the processing of your personal data under certain conditions.
  • The right to object to processing – You have the right to object to METU-DTX’s processing of your personal data under certain conditions.
  • The right to data portability – You have the right to request that METU-DTX transfer the data that we have collected to another organization, or directly to you, under certain conditions.


To exercise your rights, please contact metu.dtx.events@sistemglobal.com.tr.