Article 3 - Definitions
(1) For the purposes of this Law the following definitions shall apply:
- a) Explicit consent: freely given, specific and informed consent,
- b) Anonymizing: rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data,
- c) President: President of the Personal Data Protection Authority,
- ç) Data subject: the natural person, whose personal data is processed,
- d) Personal data: all the information relating to an identified or identifiable natural person,
- e) Processing of personal data: any operation performed upon personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means,
- f) Board: the Personal Data Protection Board,
- g) Authority: the Personal Data Protection Authority,
- ğ) Processor: the natural or legal person who processes personal data on behalf of the controller upon his authorization,
- h) Data registry system: the registry system which the personal data is registered into through being structured according to certain criteria,
- ı) Controller: the natural or legal person who determines the purpose and means of processing personal data and is responsible for establishing and managing the data registry system.