Website Privacy Notice Regarding the Processing of Personal Data

Pursuant to Article 10 of the Personal Data Protection Law No. 6698 ("KVKK" or the "Law"), published in the Official Gazette dated 7 April 2016 and numbered 29677, which aims to protect the fundamental rights and freedoms of individuals, particularly the right to privacy, in the processing of personal data, and in accordance with the Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform, published in the Official Gazette dated 10 March 2018 and numbered 30356, this Privacy Notice aims to inform you about the processing of your personal data by Bursa Chamber of Commerce and Industry ("BTSO" or the "Chamber").

1. Data Controller and Representative

Pursuant to the Personal Data Protection Law No. 6698 (the "Law"), Bursa Chamber of Commerce and Industry (BTSO) acts as the "Data Controller." You may contact us through the communication channels provided below.

Address Fethiye OSB Neighborhood, Mavi Street No:13, Nilüfer/Bursa, Türkiye
Telephone +90 (224) 275 16 00
Fax +90 (224) 275 17 69
Website www.btso.org.tr
Email Address btso@btso.org.tr

2. Personal Data Processed

The following categories of your personal data may be processed within the scope of your relationship with BTSO:
• Identity Information: Full name, mother's and father's name, place of birth, date of birth, age, gender, photograph, identity card information and identification number, driver's license information, and signature information.
• Contact Information: Business address, residential address, e-mail address, telephone number, mobile phone number, residence records, and address registration system records.
• Visual and Audio Information: Photographs and CCTV recordings.
• Education, Employment, and Professional Life Information: Employment history, employer name, graduated school, professional qualifications, CV information, and military service status.
• Bank Account Information: Bank account number, IBAN number, and similar banking information.
• Vehicle Information: Vehicle license plate information and vehicle fuel type.
• Physical Premises Security Information: Building entry and exit records and CCTV recordings.
• Cyber Security Information: Usernames, passwords, audit logs, IP addresses, website access logs, and other cyber security-related data.

3. Purpose of Processing Personal Data

Depending on your relationship with Bursa Chamber of Commerce and Industry, all personal data obtained within this scope are processed in accordance with the fundamental principles set out in the Law and within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Such data are securely stored in physical and/or electronic environments for periods appropriate to the purposes of processing.

• Fulfilling our contractual and legal obligations completely and properly,
• Developing and diversifying our services,
• Conducting quality and standards audits,
• Responding to information requests from public institutions and organizations,
• Ensuring legal and commercial security,
• Maintaining and storing litigation files, notices, and legal records, and managing enforcement proceedings,
• Issuing powers of attorney,
• Maintaining records of contracted attorneys and issuing powers of attorney on their behalf,
• Monitoring finance and/or accounting processes,
• Contract management, establishment of legal transactions, and monitoring legal processes,
• Event and organization management,
• Organizing participation in domestic and international events,
• Sending invitations for meetings and events,
• Determining and implementing commercial and business strategies,
• Maintaining records of official, commercial, and social affiliates,
• Archiving internal and external Chamber correspondence created before the Electronic Document Management System (EBYS),
• Monitoring incoming and outgoing correspondence,
• Maintaining archives,
• Managing communication activities (telephone, internet, television lines, and switchboard systems),
• Providing transportation, lunch, and security services,
• Conducting procedures related to the Turkish Trade Registry Gazette,
• Processing the return of guarantee letters,
• Preparing expense vouchers and freelance service receipts,
• Maintaining and storing documents related to BTSO subsidiaries,
• Taking photographs and recording videos during meetings held within BTSO,
• Sharing photographs and news content on BTSO websites and social media accounts,
• Managing processes related to contractor and supplier company employees,
• Conducting real estate leasing activities,
• Managing tender processes,
• Procuring external consultancy services,
• Processing ministry-related payments,
• Identifying trainee students and monitoring internship procedures,
• Managing TIR Carnet procedures,
• Implementing projects and conducting surveys and announcements for project beneficiaries,
• Evaluating capacity report applications,
• Evaluating Domestic Goods Certificate applications,
• Maintaining trainer lists,
• Maintaining meeting attendance records,
• Conducting disciplinary investigations,
• Establishing the membership structure of the Women and Young Entrepreneurs Councils,
• Managing social media activities,
• Publishing news and announcements on the website,
• Evaluating requests and complaints,
• Sending condolence messages and messages for official and religious holidays,
• Recording visitor entries,
• Maintaining BTSO CCTV recordings and evaluating requests for reviewing such recordings,
• Carrying out the necessary work by relevant business units to enable individuals to benefit from services and content provided by the Chamber and conducting related business processes,
• Carrying out the necessary work by relevant business units for the execution of activities conducted by the Chamber and managing related business processes.

4. Transfer of Processed Personal Data

Your personal data may be shared, within the scope of the provisions of the Law regarding the transfer of personal data and for the purposes specified in Article 3 of this Privacy Notice, with legally authorized public institutions and organizations in Türkiye and abroad, law enforcement authorities, courts and enforcement offices, third-party natural and legal persons with whom we have business relationships, service provider companies and their authorized representatives, business partners, banks, our affiliates, suppliers, and support service providers.

5. Methods and Legal Grounds for Collecting Personal Data

BTSO collects your personal data when you contact the Chamber and/or during the establishment and continuation of your legal relationship with the Chamber. Such data may be obtained directly from you, from third parties including partners, affiliates, solution partners with whom we cooperate or maintain contractual relationships, and from legal authorities. Personal data may be collected through call centers, websites, mobile applications, social media platforms, and other publicly available channels, as well as through training programs, organizations, and similar events, for the purpose of providing the services and fulfilling the objectives specified above in accordance with Articles 5, 6, and 8 of the Law.

6. Rights of the Data Subject

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:
• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred domestically or abroad,
• To request the correction of incomplete or inaccurate personal data,
• To request the deletion or destruction of personal data,
• To request that correction, deletion, or destruction operations be notified to third parties to whom personal data has been transferred,
• To object to the emergence of a result against you through the exclusive analysis of processed data by automated systems,
• To request compensation for damages incurred due to the unlawful processing of personal data.

7. Contact Us Regarding Your Rights and Requests

You may submit your requests regarding the rights specified above by:
• Sending a written petition,
• Applying through a notary public,
• Using your Registered Electronic Mail (KEP) address and sending your request to [btso@hs02.kep.tr](mailto:btso@hs02.kep.tr),
• Using the e-mail address previously notified to the Chamber and registered in our systems,
• Completing and submitting the "Application Form Regarding Personal Data" available at: https://www.btso.org.tr/iletisim/kvkk-ve-gizlilik/kvkk-dokumanlari or obtainable from the Administrative Affairs Directorate and Human Resources Directorate. Applications submitted in person will be accepted following identity verification by BTSO. Requests will be concluded as soon as possible and no later than thirty (30) days, depending on their nature. If a written response is provided, no fee will be charged for up to ten (10) pages. For each page exceeding ten pages, a processing fee may be charged in accordance with Article 7 of the Communiqué on the Principles and Procedures for Application to the Data Controller. If the response is provided on a recording medium such as a CD or flash drive, a fee equivalent to the cost of the recording medium may be requested.

DATA CONTROLLER
BURSA CHAMBER OF COMMERCE AND INDUSTRY