A Fitness Center Processing Data Subject’s Blood Type
The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of blood type information - which falls under the scope of the special categories of personal data -…
VERBIS'e Kayıt Şartlarında Değişiklik
Bugün Resmi Gazete’de yayımlanan Kişisel Verileri Koruma Kurulu’nun (“Kurul”) 06 Temmuz 2023 tarihli ve 2023/1154 sayılı kararıyla Veri Sorumluları Sicili’ne (“VERBİS”) kayıt yükümlülüğüne istisna…
Changes to the Requirements for Registration to VERBIS
Turkish Personal Data Protection Board’s (“Board”) decision dated 06 July 2023 and numbered 2023/1154, that was published on the Official Gazette today, reevaluated “annual financial balance sheet…
Sending Invoices Issued to Third Parties to a Data Subject’s E-Mail Address
The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of personal data through sending e-invoices to the e-mail address of a data subject in the decision dated…
Sending SMS for Marketing Purposes Without Explicit Consent
The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of personal data by sending text messages for marketing purposes without explicit consent in its decision…
Sending Commercial Electronic Message Without Obtaining Consent
The Personal Data Protection Board (“Board”) evaluated a complaint regarding a data controller sending commercial electronic message to a data subject's work e-mail address, which was found as a…
Sharing Statements Received from a Data Subject During a Job Interview
The Personal Data Protection Board (“Board”) evaluated a complaint regarding a company sharing the information about a data subject's current employer received in a job interview with the data…
Transferring the Health Data of a Data Subject to the Public Institution
The Personal Data Protection Board (“Board”) evaluated a complaint application regarding the transfer of a data subject's health data to a public institution for an administrative lawsuit in its…
Processing of Personal Data of the Child without the Explicit Consent of the Parent
The Personal Data Protection Board (“Board”) evaluated the complaint application regarding the processing of the child's personal data by a data controller marketing company by sending promotional…
Transferring Personal Data Abroad Without Obtaining Explicit Consent
The Personal Data Protection Board (“the Board”) evaluated the complaint application regarding the transferring of personal data without explicit consent by a bank to an insurance company in its…