EN

2021 KVKK & GDPR December Newsletter Headings

2021 KVKK & GDPR December Newsletter Decision Summaries of The Month and News

You can read our KVKK & GDPR Newsletter to access the decisions, released data breach notifications made by the Turkish Personal Data Protection Authority (KVKK) about natural and legal persons, and decisions, announcements issued by the European Data Protection Board (EDPB) and all the other countries in the past month and have further information about the news relating to personal data protection from Türkiye and the world.

  • Summary of the Decision Numbered 2021/548 Regarding the "Obtaining and Processing of Data Subject's Phone Number and Calling Without Their Consent by a Digital Platform Dealer within the scope of the Campaign"
  • Summary of the Decision Numbered 2021/584 Regarding the "Unlawful Processing of Personal Data of the Data Subject by a Company Operating in the Field of Insurance and Personal Pensions"
  • Summary of the Decision Numbered 2021/242 Regarding the "Sharing the Data Subject's Personal Data with the Third Parties by a Tour Company"
  • Summary of the Decision Numbered 2021/241 Regarding the "Rejection of the Deceased's Legal Heir's Request for Access to the Insurance Policy by the Insurance Company"
  • Summary of the Decision Numbered 2021/230 Regarding the "Obtaining the Personal Data of the Data Subject by Inquiring the Ex-Spouse Who Works as a Public Institution Personnel and Sharing it with the Judicial Authorities"
  • Summary of the Decision Numbered 2021/572 Regarding the "Use of the Data Subject's Photograph by the School of which Data Subject is a Student"
  • Summary of the Decision Numbered 2021/228 Regarding the "The Unlawful Processing of the Personal Data of the Data Subject in the Proceedings of the Enforcement Proceedings and Sending Messages Regarding the Enforcement File to the Phone Number of Data Subject by the Law Office"
  • Summary of the Decision Numbered 2021/545 Regarding the "Sending Messages to Mobile Phone of the Data Subject for Advertising Purposes by the Data Controller"
  • Summary of the Decision Numbered 2021/217 Regarding the "Processing the Mobile Phone Number Information of the Data Subject by an Educational Institution without any Data Processing Conditions and Sending an SMS with Advertisement Content"
  • Summary of the Decision Numbered 2021/424 Regarding the "The Allegation on a Bank, Asset Management Company and Three Lawyers Has Processed Personal Data of a Non-Borrower Data Subject and Began Enforcement Proceedings"
  • Summary of the Decision Numbered 2021/205 Regarding the "Unlawful Processing of Personal Data of the Data Subject by the Data Controller Employer in the Dismissal Process"
  • Summary of the Decision Numbered 2021/85 Regarding the "Response Given by the Data Controller to the Application of the Data Subject within the Scope of Article 11 of the Law"
  • Summary of the Decision Numbered 2021/79 Regarding the "Sharing the Data of the Data Subject with Relatives by the Data Controller Bank"
  • Summary of the Decision Numbered 2021/422 Regarding the "Personal Data Processing Activity by Sharing the Photographs of the Data Subject in Social Media Account of the Data Controller"
  • Summary of the Decision Numbered 2021/361 Regarding the "A Bank's Sending Promotional Messages to the Data Subject Via Mobile Applications Without Consent"
  • Summary of the Decision Numbered 2021/78 Regarding the "Storing Passport Photographs of Customers During Product Sale by a Data Controller Providing Telecommunication Services"
  • Summary of the Decision Numbered 2021/32 Regarding the "Inquiring of Data Subject's Personal Data in the Data Controller Bank Without Data Subject's Knowledge"
  • Summary of the Decision Numbered 2021/358 Regarding the "Sending SMS to the Data Subject by a bank and Failure to Fulfill the Application of the Data Subject to Destroy the Personal Data"
  • Summary of the Decision Numbered 2021/333 Regarding the "Transferring Personel Data of Data Subject to Third Parties and not Fulfilling Obligation of Clarification by Insurance Company"
  • Summary of the Decision Numbered 2021/603 Regarding the "Sending the Orders Given by the Data Subject on the Internet Shopping Page with a Request for Delivery to the Workplace Address Even Not Specified by the data Controller Shipping Company"
  • Summary of the Decision Numbered 2021/664 Regarding the "Personal Data Including Bank Information of Data Subject in the Invoice Issued by a Company Distributing Natural Gas"
  • Summary of the Decision Numbered 2021/666 Regarding the "The Unlawful Seizure of Personal Data in the Birth Certificate of the Complainant's Newborn Baby from a Data Controller Operating as a Private Hospital by Third Parties"
  • Summary of the Decision Numbered 2021/670 Regarding the "Continuation of the Processing of Personal Data by Data Controller Bank After the Negative Finalization of the Job Application of Data Subject"
  • Summary of the Decision Numbered 2021/761 Regarding the "Sharing Personal Health Data with Non-custodial Parent by Unauthorized Employees in the Hospital"
  • Summary of the Decision Numbered 2021/799 Regarding the "Unlawful Processing of Personal Data of Data Subject within the Scope of Internationally Valid Language Exam by the Accredited Institution in Turkey"
  • Summary of the Decision Numbered 2021/847 Regarding the "Not Deleting Personal Data of Data Subject on a Website Despite the Request"
  • Summary of the Decision Numbered 2021/850 Regarding the "About Use of Identity Information by Photographing"
  • Summary of the Decision Numbered 2021/859 Regarding the "Processing Personal Data of the Data Subject by Taking a Photograph of the Data Subject's ID via a Mobile Phone to Create the Internet Service Subscription by a Company Offical Who Comes to the Data Subject's House to Provide Internet Service Subscription"
  • Summary of the Decision Numbered 2021/889 Regarding the "Recording and Publishing the Competitions in which the Data Subject Involved Without Consent by a Sports Facility"
  • Summary of the Decision Numbered 2021/909 Regarding the "Submitting the Data of the Data Subject to the Enforcement Directorate by the Data Controller Lawyer within the Scope of the Enforcement Proceedings Regarding the Debt of the Data Subject's Sibling"
  • Summary of the Decision Numbered 2021/925 Regarding the "Unlawful Obtaining and Sharing the Union Membership Information of the Data Subject"
  • Summary of the Decision Numbered 2021/989 Regarding the "Using the Image of Data Subject in the Content of the News on an Internet Site Without Explicit Consent"
  • Summary of the Decision Numbered 2021/993 Regarding the "Inadvertent Invoice Issuing by the Data Controller Cargo Company on behalf of the Data Subject"
  • Concept of Data Protection Officer
  • Public Announcement on Personal Data Breaches within the Scope of the Turkish Penal Code on Promise of Job dated December 7, 2021
  • Public Announcement on Data Protection Officer Concept dated December 10, 2022
  • Public Announcement on the Processing of Personal Data by Sending Verification Codes via SMS to Data Subjects During Shopping in Stores dated December 17, 2021
  • GoDaddy.com, LLC Data Breach Notification
  • T.C. İstanbul Kültür Üniversitesi Data Breach Notification
  • Eureko Sigorta AŞ Data Breach Notification
  • Norwegian Data Protection Authority Has Decided to Impose an Administrative Fine on Grindr