Article 3 - Definitions

(1) For the purposes of this Law the following definitions shall apply:

• a) Explicit consent: freely given, specific and informed consent,
• b) Anonymizing: rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data,
• c) President: President of the Personal Data Protection Authority,
• ç) Data subject: the natural person, whose personal data is processed,
• d) Personal data: all the information relating to an identified or identifiable natural person,
• e) Processing of personal data: any operation performed upon personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means,
• f) Board: the Personal Data Protection Board,
• g) Authority: the Personal Data Protection Authority,
• ğ) Processor: the natural or legal person who processes personal data on behalf of the controller upon his authorization,
• h) Data registry system: the registry system which the personal data is registered into through being structured according to certain criteria,
• ı) Controller: the natural or legal person who determines the purpose and means of processing personal data and is responsible for establishing and managing the data registry system.