2023 KVKK & GDPR April - May Newsletter Headings

2023 KVKK & GDPR April - May Newsletter Decision Summaries of The Month and News

You can read our KVKK & GDPR Newsletter to access the decisions, released data breach notifications made by the Turkish Personal Data Protection Authority (KVKK) about natural and legal persons, and decisions, announcements issued by the European Data Protection Board (EDPB) and all the other countries in the past month and have further information about the news relating to personal data protection from Türkiye and the world.

• Summary of Decision No. 2022/107 of the Personal Data Protection Board on the Notification of the Data Subject Regarding the Processing of the Mobile Phone Number of the Data Subject by a Savings Finance Company without Any Data Processing Conditions and the Sending of SMS with Advertising Content to the Relevant Number
• Summary of Decision No. 2022/249 of the Personal Data Protection Board on the Notification of the Data Subject Regarding the Transfer of Data by the Technology Company Abroad
• Summary of the Decision No. 2022/277 of the Personal Data Protection Board Regarding the Receipt of the Cargo Package of the Relevant Person by the Third Party
• Summary of the Decision No. 2022/325 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sending of E-Invoices Issued on Behalf of an Entity Unrelated to the Data Subject to the E-Mail Address of the Data Subject
• Summary of the Decision No. 2022/328 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sending of the Notice Containing the Personal Data of the Data Subject to Other Employees by the Data Controller Providing Payroll Services
• Summary of the Decision No. 2022/489 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of the Documents Containing the Personal Data of the Data Subject with the Lawyer of the Association and the Transfer of the Lawyer to the Bar Association
• Summary of the Decision No. 2022/491 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Publication of the Photographs of the Data Subject Working as a Model for a Clothing Shop by the Data Controller without the Explicit Consent in After the Termination of the Employment Relationship
• Summary of the Decision No. 2022/545 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the Personal Data of the Data Subject by the Data Controller Bank Where the Personal Data of the Data Subject Does Not Have an Account without Fulfilling the Disclosure Obligation and Without Obtaining His/Her Explicit Consent
• Summary of the Decision No. 2022/630 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of Photographs of the Data Subject Taken During the Surgery on the Social Media Account of a Doctor Working in the Hospital of the Data Controller
• Summary of the Decision No. 2022/594 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the Personal Data of the Data Subject by the Data Controller, Where the Personal Data Subject Does Not Have an Account, Without Fulfilling the Obligation to Inform and Without Obtaining His/her Explicit Consent
• Summary of the Decision No. 2022/653 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Request for the Notification of the Credit Card and Mobile Phone Information of the Data Subject from the Data Controller Providing Online Shopping Service
• Summary of Decision No. 2022/655 of the Personal Data Protection Board on the Complaint of the Person Concerned about the Unlawful Processing of the Personal Data of the Data Subject who are the Members of the Board of Directors of the liquidated Company by the Lawyer Responsible for the Data by Sending and Calling Text Messages within the scope of the Company Deb
• Summary of the Decision No. 2022/774 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sending of the Order Information of the Third Party Who Purchases from an E-Commerce Site to the E-Mail Address of the Data Controller
• Summary of Decision No. 2022/776 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the Personal Data of the Child by a Marketing Company Responsible for the Processing of the Child’s Personal Data by Sending a Promotional Brochure without the Explicit Consent of the Parent
• Summary of the Decision No. 2022/787 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the Telephone Number of the Data Subject by the Data Controller Selling Household Goods by Contacting for the Debt of a Third Person
• Summary of Decision No. 2022/790 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Transfer of the Health Data of the Person Concerned by a University Hospital to the Respondent Public Institution Based on His Request to Constitute the Basis for an Administrative Case
• Summary of the Decision No. 2022/798 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of the Information That the Data Subject Has Made an Employment Interview with a Company and the Content of the Interview with the Current Workplace by the Company
• Summary of Decision No. 2022/853 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the E-mail Address of the Data Subject by a Legal Betting Platform and the Sending of the Personal Data of a Member to the E-Mail Address of the Data Subject in the Third-Party Position
• Summary Of Decision No. 2022/861 Of the Personal Data Protection Board On The Complaint Of The Data Subject Regarding The Processing Of The Workplace E-Mail Obtained From The Searches Made On The Internet Search Engines Of The Data Subject By Sending Commercial Electronic Messages Without The Explicit Consent Of A Marketing Company That Is The Data Controller
• Summary Of Decision No. 2022/863 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of Personal Data By Calling the Data Subject By Phone Without Fulfilling the Clarification Obligation of a Bank’s Customer Service And Without Obtaining His Explicit Consent
• Summary of the Decision No. 2022/896 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of the Judicial Correspondence Information Containing the Personal Data of the Data Subject with the Brother by the Former Data Controller Former Employer
• Summary of Decision No. 2022/902 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding The Processing of Personal Data By Sending a Short Message for Marketing Purposes Without The Explicit Consent of the Data Subject
• Summary of the Decision No. 2022/923 of the Personal Data Protection Board on the Complaint of the Person Concerned Regarding the Complaint of the Person Concerned Regarding the Processing of the Telephone Number of the Data Subject by the Doctor Leaving the Hospital Where the Patient Is Treated by Sending SMS
• Summary of the Decision No. 2022/925 of the Personal Data Protection Board Regarding the Complaint of the Data Subject Regarding the Sending of E-Invoices of Other Subscribers to the E-Mail Address of the Data Subject
• Summary of the Decision No. 2022/1072 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Complaint Regarding the Processing of the E-Mail Address of the Data Subject’s Personal Data by Sending Messages for Advertising Purposes
• Summary of the Decision No. 2022/1147 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Complaint Regarding the Continuation of the Processing of the Personal Data of the Data Subject by the Employer after the Termination of the Employment Contract
• Summary of the Decision No. 2022/1201 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Complaint of the Data Subject Request to Remove from the Index the Results Obtained in the Search Engine with the Name and Surname an Advertisement Accessible from the Official Gazette
• Summary of the Decision No. 2022/1249 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of the Images Recorded by the Security Camera at the Exchange Office with the News Agencies
• Summary of the Decision No. 2022/1281 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of the Debtor’s Debt Information with the Son of the Debtor by the Data Controller Lawyer Due to the Enforcement Proceedings and the Unlawful Processing of the Debtor’s Son’s Telephone Number with whom the Debt Information Is Shared with Him
• Summary of the Decision No. 2023/67 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sending of the Money Transfers and Account Information of the Data Subject to the Third Party’s E-Mail by a Bank
• Summary of the Decision No. 2022/1357 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of the Blood Group Data of Special Quality Personal Data by the Data Controller, who is the Gym Operator, without the Explicit Consent of the Data Subject
• Summary of the Decision No. 2022/1358 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Failure to Submit Clarification and Explicit Consent Texts Regarding the Cookies on a Website
• Summary of the Decision No. 2023/4 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Unlawful Sharing of Personal Data by a Cargo Company Due to a Cross-Barcoding Error
• Summary of Decision No. 2023/78 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sending of the Debt Information of the Data Subject as a Text Message to the Corporate Numbers of the Company in which the Data Subject is a Partner
• Summary of Decision No. 2023/86 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of Personal Data by Monitoring, Accessing and Storing the Content in the Corporate E-mail Address Allocated by the Data Controller to Its Employees
• Summary of Decision No. 2023/224 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Sharing of Personal Data by Sharing the Video of the Assembly Meeting from the Social Media Account of a Municipality
• Summary of Decision No. 2023/437 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Processing of Personal Data by Sending a Text Message to the Debtor Subject by an Attorney Partnership
• Summary of the Decision No. 2023/426 of the Personal Data Protection Board on the Complaint of the Data Subject Regarding the Request of e-Government Passwords from the Data Subjects by the Company Offering the Opportunity to Shop with Consumer Financing Credit
• Berlin Data Protection Authority Has Decided to Impose an Administrative Fine on a Bank
• French Data Protection Authority Has Decided to Impose an Administrative Fine on Doctissimo
• Croatian Data Protection Authority Has Decided to Impose an Administrative Fine on B2 Kapital
• French Data Protection Authority Has Decided to Impose an Administrative Fine on on CLEARVIEW AI
• Beytıp Sağlık Hizmetleri Ltd. Şti Data Breach Notification
• Boyner Büyük Mağazacılık Anonim Şirketi Data Breach Notification
• Trabzonspor Sportif Yatırım ve Futbol İşletmeciliği Ticaret A.Ş. Data Breach Notification