Polatlı Municipality PERSONAL DATA PROCESSING INFORMATION NOTICE

Dear Citizens; We would like to inform you about the Law No. 6698 on the Protection of Personal Data (“PDPL”), which was enacted to protect fundamental rights and freedoms of individuals, particularly the right to privacy, in the processing of personal data, and to regulate the obligations of real and legal persons who process personal data. As Polatlı Municipality, we attach utmost importance to the security of your personal data. With this awareness, we place great importance on processing and storing all kinds of personal data belonging to all individuals associated with Polatlı Municipality, including our citizens who benefit from our services, in accordance with the Law No. 6698 on the Protection of Personal Data (“PDPL”). With full awareness of this responsibility, as the “Data Controller” as defined under the PDPL, we process your personal data within the limits set by the legislation and in the manner explained below. For detailed information about the PDPL, you may visit the website of the Personal Data Protection Authority.

1. What methods does Polatlı Municipality use to collect personal data?

The data provided by our citizens who carry out transactions through http://www.polatli.bel.tr and our other corporate websites, e-municipality services, and the Polatlı Municipality e-Government section are processed by Polatlı Municipality in accordance with the consent of our citizens and the provisions of the relevant legislation.

2. Purpose of Processing and Transfer of Personal Data Related to Records:

Your personal data are used for the following purposes: Verifying the identity information of the person performing / requesting transactions through our corporate website and mobile applications, • Recording address and other necessary information for communication regarding notifications made through the Public Desk, • Preparing all records and documents that will serve as a basis for transactions in electronic environments and platforms (internet/mobile, etc.) or in physical form, • Providing information to public officials in matters related to public security upon request and as required by legislation, • Increasing citizen satisfaction, recognizing citizens who carry out transactions through the website and/or mobile applications, using this information for citizen environment analysis, utilizing it in various public activities, and conducting surveys electronically and/or physically through contracted organizations within this scope, • Offering suggestions to our citizens and informing them about our services, • Evaluating complaints, requests, and suggestions regarding our services, • Fulfilling our legal obligations and exercising our rights arising from the applicable legislation,

3. Under what conditions does Polatlı Municipality protect personal data?

Personal data shared with Polatlı Municipality are under the supervision and control of Polatlı Municipality. As the data controller, Polatlı Municipality assumes responsibility for establishing the necessary organization and implementing and adapting technical measures to protect the confidentiality and integrity of information in accordance with the provisions of the applicable legislation. Being aware of this obligation, we inform you that penetration tests are conducted periodically in accordance with technical standards related to data privacy, and that our data processing policies are kept up to date at all times.

4. What are your rights arising from the Law on the Protection of Personal Data?

By applying to our Municipality, pursuant to the PDPL, you have the right to: a) Learn whether your personal data are processed, b) Request information if your personal data have been processed, c) Learn the purpose of processing personal data and whether they are used in accordance with their purpose, d) Know the third parties to whom personal data are transferred domestically or abroad, e) Request the correction of personal data if they are incomplete or incorrectly processed and request notification of this process to third parties to whom personal data have been transferred, f) Request the deletion or destruction of personal data if the reasons requiring processing no longer exist, even though they have been processed in accordance with the PDPL and other relevant laws, and request notification of this process to third parties to whom personal data have been transferred, g) Object to the occurrence of a result against the individual arising from the analysis of processed data exclusively through automated systems, h) Request compensation for damages in case personal data are processed unlawfully. If your application requires an additional cost, you may be required to pay the fee determined by the Personal Data Protection Board. Your requests included in your application will be concluded as soon as possible and no later than 30 (thirty) days, depending on the nature of the request.

Data Controller to whom you may apply within the scope of the Law: Polatlı Municipality