The Board of Protection of Personal Data Has Published New Decision Summaries 01 March 2019
Pursuant to the articles 15 and 22 of the Law on Protection of Personal Data no. 6698 (“Law”), the Board of Protection of Personal Data (“Board”) is entitled to conduct necessary inspection within the scope of its remit either ex officio in case it learns the allegation of a violation or upon complaint, and to impose administrative fines in case of breach. The Board publishes decision summaries of its investigations which are considered to be important and to establish precedent on its website.

You can find the most recent three decision summaries as following:
1. Sharing of Personal Data of Special Nature with A Third Party by the Data Controller Without Subjecting to Any Processing Condition
In the application for complaint subject to the Board’s Decision dated 05.12.2018 and numbered 2018/143 as a summary; health data of a natural person who uses medication under the control of a doctor has been shared with a third party by the pharmacy he/she procures his/her medicines from without subjecting to any condition where it is possible to process the personal data of special nature without explicit consent regulated in the Article 6 Sub-Article (3) of the Law numbered 6698.
As a result of its examination, the Board decided to impose administrative fine pursuant to the Article 18 of the Law on the Data Controller Pharmacy which violates the obligation of not to make the personal data public and not to use personal data outside of its processing purpose contrary to the provisions of Law and which shared the personal data of special nature of a natural person with a third party without subjecting to any condition regulated in the Article 8 Sub-Article 2 of the Law where it is possible to transmits the personal data without explicit consent of the related person.
2. A Natural person’s Personal Data which has been shared via the Web Site of A Company in order to shop Becoming Accessible to the Third Parties and the Request for Deletion of These Data
In the application for complaint subject to the Board’s Decision dated 26.07.2018 and numbered 2018/91 as a summary; the complainant’s a number of personal data such as his/her membership information, delivery address, name, surname, phone number shared to do shopping from a ready-made clothing company from its web site have become accessible to third parties and due to this reason, the complainant has requested from the firm his/her personal data to be deleted, annihilated, rendered unachievable, also deleted and annihilated before the other institutions where personal data have been shared with at home and abroad.
The defense and justifications of the Data Controller concerning the personal data became accessible to third parties such as they were not aware of the situation until the incident and the incident has arisen from a systematic error are found insufficient by the Board and as a consequence, the Board has decided to impose administrative fine pursuant to the Article 18 of the Law on the Data Controller Company which did not fulfill his/her obligation to take any kind of necessary technical and administrative measures towards providing the proper safety level in order to provide the conservation of personal data and prevent unlawful access to personal data.
In terms of the request for annihilation of the personal data which has become accessible to third parties; due to the fact that the Board has detected that the reasons for processing of the data disappeared in the present case and that the complainant have the right to demand the annihilation of his/her personal data in this context according to the Article 11 of the Law; the Board decided to accept the complainant’s requests and they decided that the company shall announce the transactions to be made in this matter and transmit to the complainant within 30 days from the notification of the decision together with the supporting documents.
3. Request for Annihilation of Documents in regard to the Investigation-Prosecution Files of Public Officers During Their Incumbency
In the application for complaintsubject to the decision of the Board dated 28.06.2018 and numbered 2018/69 concerning the request for annihilation of documents in regard to the investigation-prosecution files opened about public officers during their incumbency, as a summary; the Board has decided that it is appropriate to refuse the requests of the public officers by reason of the fact that the documents requested to be annulated are partake of the documents required to be preserved in the personal file pursuant to the Article 109 which titled “Public Officer Information System, Personal File” of the Law numbered 657.
According to the Article 7 Sub-Article 1 of the Law numbered 6698; in case the reasons that require processing are disappeared, the related person may request the deletion, annulation or anonymization of his/her personal data.
However said documents are kind of documents that have to be preserved in the personal files of the public officers as it is regulated in the Law numbered 657 and the personal files of the officers whose duties have been terminated for any reason should be preserved according to the Public Servant General Communique (Serial No: 2). Furthermore, said personal files shall be found in the context of the officialdom registration files until one hundred one years passed over the last transaction date. Under the circumstances, processing reason has not disappeared yet pursuant to the Article 7 of the Law numbered 6698 and the refusal of the request by the said public institutions has been found appropriate by the Board
Other News
-
14.11.2019
Egemenoğlu Law Firm has been once again recognized as a top-tier law firm on the 2020 IFLR 1000 rankings.
We are proud to announce that Egemenoğlu Law Firm has been once again recognized as a top-tier law firm on the 2020 IFLR 1000‘s ranking of leading legal practices in several core practice areas. The IFLR 1000 is an international legal directory focused on ranking law firms and lawyers on the basis financial and corporate transactional work, it has been researching legal markets for 29 years.
-
11.11.2019
The Board Of Protection Of Personal Data Has Published New Decisions
Pursuant to the articles 15 and 22 of the Law on Protection of Personal Data no. 6698 (“Law”), the Board of Protection of Personal Data (“Board”) is entitled to conduct necessary inspection within the scope of its remit either ex officio in case it learns the allegation of a violation or upon complaint, and to impose administrative fines in case of breach. The Board publishes decision summaries of its investigations which are considered to be important and to establish precedent on its website.
-
22.10.2019
Obligation to Submit a Declaration of the Employee as a result of the Job Change within the Same Year
As known, pursuant to the Income Tax Law, each natural person listed under Article 3 is a tax payer. Everyone under this obligation, is obliged both to submit the income tax return and then to pay the relevant tax levied on incomes and revenues obtained in Turkey and abroad. The Income Tax Law includes an exception for certain types of income; the income tax levied on the tax payer is also regulated for a person who makes payment that is liable to income tax.
-
10.10.2019
The Board of Protection of Personal Data Has Published New Decisions
Pursuant to the articles 15 and 22 of the Law on Protection of Personal Data no. 6698 (“the Law”), the Board of Protection of Personal Data (“the Board”) is entitled to conduct necessary inspection within the scope of its remit either ex officio in case that it learns the allegation of a violation or upon complaint, and to impose administrative fines in case of breach. The Board publishes decision summaries of its investigations which are considered to be important and to establish precedent on its website.
-
20.9.2019
The Board of Protection of Personal Data Has Published a New Decision
Pursuant to the articles 15 and 22 of the Law on Protection of Personal Data no. 6698 (“Law”), the Board of Protection of Personal Data (“Board”) is entitled to conduct necessary inspection within the scope of its remit either ex officio in case it learns the allegation of a violation or upon complaint, and to impose administrative fines in case of breach. The Board publishes decision summaries of its investigations which are considered to be important and to establish precedent on its website.
-
16.9.2019
Amendment On The Regulation On Restructuring Of Debts Owed To Financial Sector
The Regulation Amending the Regulation on Restructuring of Debts Owed to Financial Sector (“Regulation”) which aims to amend the Regulation on Restructuring of Debts Owed to Financial Sector which was published on the Official Gazette dated August 15th, 2018, numbered 30510, and which of purpose was to provide debtors, who are in loan agreement with banks, leasing companies, factoring companies and financing companies operating in Turkey, an opportunity to fulfill of their repayment obligations and to make sure that they continue to contribute employment, concerning credit debts owed by institutions above mentioned and with the measures to be taken within framework agreements and contracts, has been entered into force by being published on the Official Gazette numbered 30886 dated September 12th, 2019.
-
6.9.2019
VERBİS Registrations Have Been Extended
By the resolution of the Board of Protection of Personal Data dated 3 September 2019 and 2019/265;
-
9.8.2019
New Decisions Of Board Of Protection Of Personal Data Published On 17th Of July
New Decisions Of Board Of Protection Of Personal Data Published On 17th Of July
-
23.7.2019
The Omnibus Bill Regulating The Financial Restructuring Agreement Has Been Approved By The Grand National Assambly of Turkey
The Omnibus Bill (“Law”) aims to make amendments on certain laws but primarily on Income Tax Law No. 7186 and the Banking Law No. 5411.
-
5.7.2019
New Decisions Of The Personal Data Protection Board Were Published
The Personal Data Protection Board (“Board”) announced its decisions on personal data breaches by Mariott International Inc, Clickbus Travel Services Inc. and Cathay Pasific Airway Limited on its website, on 25 June 2019.
-
26.6.2019
Personal Health Data Regulation Has Been Published
According to the Law on Protection of Personal Data (“Law”), The Regulation on Personal Health Data (“Regulation”), concerning activities of private real and legal persons and public legal persons that process personal health data, which is related to the processes and practices carried out by the Ministry of Health (“the Ministry”) has been published in the Official Gazette dated 21 June 2019 and numbered 30808.
-
13.6.2019
Egemenoglu Advise DRD Fleet Leasing On The Consolidated And Syndicated Loan Restructuring With Significant Number Of Financial Institutions
We proudly announce that Egemenoglu has advised Derindere Fleet Leasing Company ("DRD Filo Kiralama") on its loan restructuring with significant number of national and international financial institutions. The parties of the loan restructuring agreement consisted over 45 financial institutions which agreed with our client on a basis of an extended restructured syndicated loan.
-
12.6.2019
Egemenoglu Advise Alke On The Sale Of Its Shares
We are pleased to share that our law firm has advised Alke Saglik on the sale of its shares to Besifarma Ilac A.S. controlled by Taxim Capital, a leading Private Equity in Turkey.
-
12.6.2019
New Decisions Of The Personal Data Protection Board
Pursuant to Articles 15 and 22 of the Law on the Protection of Personal Data (referred to as the ‘Law’), the Personal Data Protection Board (referred to as the ‘Board’) has the authority to examine complaints lodged by applicants or on matters that are ex officio and issue administrative fines for violations.
-
20.5.2019
Should The Defense Of The Employee Be Taken for The Reporting Period Of Him/Her Due To The Health Reason?
As is known, in accordance with the provision 25/1-b of Labour Law No. 4857, the employer's right to terminate the contract of employee arises after the reporting period, due to the health reasons, exceeds notice period six weeks. As a result of the termination in this way, the employer's obligation to pay severance payment arose, however, when the issue is examined in terms of job security provisions; it was long debated whether the obtaining defense was necessary or not before the termination and different decisions of the different departments of the Supreme Court of Appeals has caused uncertainty in the application