Data Controllers' Handbook to Inform Data Subjects About Their Rights

Under the Turkish data protection law ("DPL"), data subjects have the right to learn who processes their personal data, the purposes and legal bases of these processing activities, and to whom and for what purposes such personal data are transferred. These rights arise from the data controllers' obligation to inform data subjects about their processing activities. During the collection of personal data, the data controller or any other person authorized by the data controller is obliged to provide data subjects with certain information, such as the identity of the data controller and of his representative (if any), the purposes of the processing, to whom and with what purpose the processed personal data can be transferred, and the method and legal reason/basis of collection. The same article of the DPL further requires data controllers to provide information to data subjects about certain other rights, as discussed below.