In accordance with the Law No. 6698 on the Protection of Personal Data (“PDPL”), which was published in the Official Gazette dated April 7, 2016 and numbered 29677, and which aims to protect the fundamental rights and freedoms of individuals—primarily the right to privacy—and to regulate the obligations of real and legal persons processing personal data, we, as Polatlı Municipality, acting in the capacity of Data Controller, would like to inform you pursuant to Article 10 of the Law titled “Obligation of the Data Controller to Inform”.
Personal data belonging to our citizens are processed in accordance with Articles 4, 5, and 6 of the PDPL for the purposes stated below, including but not limited to carrying out service activities, managing and maintaining citizen relations, and responding to citizen requests: ›› For the purpose of carrying out e-municipality activities through our corporate website, ›› Recording addresses and other necessary information for communication regarding notifications made via the call center, ›› Preparing all records and documents that will serve as a basis for processing in electronic environments and platforms (internet/e-municipality, etc.) or in physical form, ›› Providing information to public officials in matters related to public security upon request and as required by legislation, ›› Increasing citizen satisfaction, using data in various public activities, and conducting surveys electronically and/or physically through contracted organizations within this scope, ›› Offering suggestions to our citizens and informing them about our services, ›› Evaluating complaints, requests, and suggestions regarding our services, ›› Carrying out municipal activities such as marriage services, social assistance, events, funeral services, etc., ›› Fulfilling our legal obligations and exercising rights arising from the applicable legislation, ›› Ensuring better interaction with our citizens in the digital environment
Personal data belonging to our citizens may be shared, provided that public interest is observed, in accordance with the fundamental principles stipulated in the PDPL and within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL; ›› Due to our legal obligations, ›› With related banks and companies awarded tenders, due to the legal basis of performance of a contract, ›› With subcontractors, third parties to whom we provide or receive services, and affiliated subsidiaries, based on the legal basis of legitimate interest, ›› With hospitals and healthcare institutions for the purposes of emergency medical interventions and fulfilling occupational health and safety obligations, ›› With official institutions as required by relevant legislation and our legal obligations. Methods and Legal Grounds for the Collection of Personal Data Polatlı Municipality may collect, process, and transfer personal data obtained from citizens, suppliers, and personnel through written, verbal, and electronic means, from third parties and legal authorities, in line with the principles set forth in Article 4(2) of the PDPL, either by obtaining explicit consent or without obtaining explicit consent in cases stipulated under Articles 5(2) and 6(3) of the PDPL. The legal grounds for processing personal data include, but are not limited to, obligations arising from the legislation to which Polatlı Municipality is subject, such as the Municipal Law No. 5393, Municipal Revenues Law No. 2464, Property Tax Law No. 1319, Tax Procedure Law No. 213, State Tender Law No. 2886, Public Procurement Law No. 4734, Labor Law No. 4857, Civil Servants Law No. 657, Law on the Exercise of the Right to Petition No. 3071, Right to Information Act No. 4982, Zoning Law No. 3194, Social Assistance and Solidarity Promotion Law No. 3294, Law No. 4109 on Assistance to Needy Families of Soldiers, and Misdemeanors Law No. 5326. Within this scope, personal data may be used for all kinds of products and services; recording identity, address, and other necessary information to identify the transaction owner; preparing all records and documents serving as a basis for transactions; complying with information retention, reporting, and notification obligations stipulated by legislation and official authorities; and providing requested products and services and fulfilling the requirements of contracts entered into. Rights of the Data Subject Whose Personal Data Are Processed You may exercise the following rights regarding the processing of your personal data by submitting a request to Polatlı Municipality. Requests submitted within this scope will be finalized by our Municipality free of charge within a maximum of thirty days. However, if a fee is stipulated by the Personal Data Protection Board, the fee specified in the tariff determined by the Board will be charged. In this context, as a personal data owner, you have the right to: ›› Learn whether your personal data are processed, ›› Request information if your personal data have been processed, ›› Learn the purpose of processing your personal data and whether they are used in accordance with such purpose, ›› Know the third parties to whom your personal data are transferred domestically or abroad, ›› Request correction of your personal data if they are incomplete or incorrectly processed, ›› Request deletion or destruction of your personal data, ›› Request notification of the correction, deletion, or destruction of your personal data to third parties to whom your personal data have been transferred, ›› Object to the occurrence of a result against you arising from the analysis of your processed data exclusively through automated systems, ›› Request compensation for damages in case your personal data are processed unlawfully. Within the scope of Law No. 6698, you may submit your requests regarding your personal data to Polatlı Municipality in person, via a notary public, or by using the electronic mail address previously notified to and registered in our system, by sending an email to bilgiedinme@belediye.bel.tr. Applications submitted within this scope will be accepted following identity verification and will be responded to in writing or electronically within the legal time limits.