Who is the Data Subject According to KVKK?
According to KVKK, the data of every natural or legal person is protected within the scope of the Law on the Protection of Personal Data. The natural person specified in the law is referred to by the name "data subject". The person protected by this law is a natural person. If any data belonging to a legal entity mentioned in the Law on the Protection of Personal Data can be identified as a natural person, this legal entity's data is also protected by law. However, the interest of the data protected here is not specific to the legal entity. It belongs to the natural person determined by the priority given by the regulation. Data belonging to legal entities does not require protection in any way under the law regulated by KVKK.
Rights of the Data Subject Within the Scope of KVKK
The data subject has certain rights under KVKK. According to these rights:
- The data subject can learn whether their personal data is being processed or not.
- They can request information about their processed personal data.
- They can learn for what purpose their data is being processed and whether it is being used in accordance with this purpose or contrary to it.
- If the person's data is transferred domestically or internationally, they may want to know the third parties to whom it is transferred.
- If the person notices that their data has been processed incompletely or incorrectly, they can request that this data be corrected and reprocessed.
- They can request the deletion or complete destruction of their personal data.
- If a situation arises that is unfavorable to them as a result of the processing of their data, they can object to it.
- If the data subject's data has been processed and there is a violation of the law during the processing of this data, and if they have suffered damage as a result, they can demand compensation for their damages.
Right to Apply and Complain
The data subject must first convey their requests within the framework of the Law on the Protection of Personal Data to the data controller. According to the law, which adopts a phased application system, an application cannot be made by skipping a step. If the data subject has a complaint, the data controller must have rejected the data subject's application or not responded within 30 days. You can visit online websites for accurate information and legal support.
