Privacy and Personal Data Protection Policy
At the Hürrem Sultan Foundation (hereinafter referred to as "the Foundation"), acting as the Data Controller, we attach the utmost importance to the protection of your privacy and personal data. Your personal data is collected, used, recorded, stored, updated, and transferred in accordance with international data protection standards and applicable laws. In order to protect your fundamental rights and freedoms, the Foundation takes all necessary technical and administrative measures to ensure the appropriate level of security to prevent unlawful processing of, or unauthorized access to, your personal data.
The target audience of this text includes all real persons (such as donors, beneficiaries, visitors, and partners) whose personal data is processed by our Foundation, excluding Foundation employees or job applicants.
Processed Personal Data
The personal data processed by us as the data controller includes, but is not limited to:
Name, surname, National ID or Passport number, address, telephone number, email address, signature, physical space/security camera recordings, call center voice recordings, bank account/payment details, and website cookie records.
Purposes and Legal Grounds for Processing Personal Data
Your personal data shared with us will be processed for the following purposes:
- To enable you and/or the institutions you represent to benefit from the services and humanitarian projects provided by the Foundation.
- To carry out administrative operations, process donations, and maintain effective communication.
- To establish and manage relations with partners, donors, volunteers, and suppliers.
- To fulfill contractual requirements and financial reconciliations concerning donations and joint relief efforts.
- To ensure the physical security and control of the locations operated by the Foundation.
- To facilitate your participation in training programs, seminars, or events organized by the Foundation.
Method of Collection and Storage of Personal Data
Your personal data may be collected verbally, in writing, or electronically through automatic or non-automatic methods via our offices, branches, call center, website, social media channels, mobile applications, and similar platforms. Your data is stored in secure electronic and physical environments. The Foundation implements strict technical security infrastructures and business process designs to ensure that your stored data is not subject to unauthorized access, manipulation, loss, or damage.
Your personal data will be processed taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you. It will be stored for the legal retention period or as long as required by the processing purpose. Once this period expires, your data will be securely deleted, destroyed, or anonymized from our data flows.
Transfer of Personal Data
Within the scope of applicable laws and for the purposes explained above, your personal data may be transferred to:
- Authorized companies, representatives, and field partners acting on behalf of the Foundation.
- Regulatory and supervisory institutions, and public authorities legally authorized to request your personal data.
- Banks and financial institutions (specifically to process your donations securely).
- Tax advisors, legal follow-up entities, auditors, and other third-party service providers and consultants from whom we receive services, both domestically and internationally.
Your Rights Regarding Your Personal Data
By applying to our Foundation, you have the right to:
- Learn whether your personal data is being processed.
- Request information if your personal data has been processed.
- Learn the purpose of the processing and whether the data is used in accordance with its purpose.
- Know the third parties to whom your data has been transferred domestically or internationally.
- Request correction if your data has been processed incompletely or inaccurately.
- Request the deletion or destruction of your personal data under conditions stipulated by law.
- Object to any negative consequence arising solely from the automated analysis of your data.
- Claim compensation if you suffer any damage due to the unlawful processing of your personal data.
Contact Us
To exercise your rights mentioned above, or for any privacy-related inquiries, you can submit your written request containing your identification details by hand, via a notary, or by sending a secure electronically signed email to: [email protected].