school.hpb.org.tr website is owned by the Turkish HPB Surgical Association, and the protection of personal data belonging to our esteemed members is our top priority. This is ensured with regard to the privacy of personal life, considering the Constitution of the Republic of Turkey, international agreements on human rights that our country is a party to, and the relevant regulations, primarily the Personal Data Protection Law No. 6698 ("KVKK"). Our aim is to process the personal data in compliance with the relevant legislation and ensure that individuals can effectively exercise their rights regarding their data.

The protection of personal data and the consideration of the fundamental rights and freedoms of individuals whose data is collected is the basic principle of our policy on the processing of personal data.

The personal data we collect from our esteemed members is processed by the Turkish HPB Surgical Association, as the data controller, in the scope outlined below.


1. PROCESSING OF PERSONAL DATA

According to the KVKK, any operation performed on personal data such as collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, reception, making available, classification, or restriction of use is considered as the "processing of personal data".


1.1. OUR PRINCIPLES FOR PROCESSING PERSONAL DATA

- Processing personal data in compliance with the law and fairness principles
- Ensuring the accuracy and, if necessary, the up-to-date status of personal data
- Processing personal data for specific, clear, and legitimate purposes
- Ensuring that personal data is relevant, limited, and proportionate to the purpose for which it is processed
- Storing personal data for the duration required by legal regulations or legitimate interests
- Complying with the relevant regulations and the Personal Data Protection Board's regulations when transferring personal data to third parties


1.2. PURPOSE OF PROCESSING PERSONAL DATA

- Managing and providing services through the website, school.hpb.org.tr
- Managing and informing about programs, live broadcasts, congresses, and meetings on the website
- Processing your personal data, preferences, transactions, and navigation time on the website using your registered email address and password
- Fulfilling our legal obligations as required by legal regulations
- For legal affairs, public safety matters, and legal disputes, to provide information to prosecutors, courts, and relevant public authorities upon request and as required by law
- In necessary cases, sharing information with authorized institutions
- Providing our members with a wide range of opportunities or sharing such opportunities with authorized individuals or institutions within the legal framework
- Communicating with you through various channels such as phone, SMS, email, social media, and digital channels for informational purposes

1.3. PROCESSING PERSONAL DATA WITH EXPLICIT CONSENT

According to the regulations, personal data cannot be processed without the explicit consent of the data subject. Explicit consent is defined in the KVKK as "consent expressed freely, based on being informed about a specific issue."

1.4. CASES WHERE EXPLICIT CONSENT IS NOT REQUIRED FOR PROCESSING PERSONAL DATA

- Where explicitly provided by law
- If it is impossible to obtain the data subject’s explicit consent due to practical impossibility
- If processing is necessary for the performance of a contract
- If processing is mandatory for fulfilling a legal obligation
- If the data subject has made the data public
- If processing is necessary for the establishment, exercise, or protection of a legal claim
- If processing is necessary for legitimate interests

1.5. TYPES OF PERSONAL DATA WE PROCESS

When you use the website, school.hpb.org.tr, we process your personal data, including identifiable information, that you voluntarily provide while accessing our website. The collected data is securely stored in our database. The personal data processed includes:
- First Name - Last Name
- Email Address
- Turkish National ID Number
- Phone Number
- Title
- Specialization
- Institution you work for
- Department you work in
- City you work in

1.6. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the following categories of recipients, in accordance with the rules stated in this policy and legal regulations:
- Authorized public institutions and organizations
- Real persons or private legal entities sponsoring the online meetings held on the website, travel agencies and organizations arranging these meetings
- Domestic or international data service providers hosting online programs, live broadcasts, congresses, and meetings conducted via the website (e.g., Zoom, Webex, YouTube)

1.7. MEASURES TAKEN TO ENSURE THE LEGAL TRANSFER OF PERSONAL DATA
1.7.1. TECHNICAL MEASURES

- We take necessary precautions to ensure that personal data is processed and stored in compliance with the regulations
- We establish the necessary technical infrastructure to ensure the security of the databases where personal data will be stored
- We monitor and update the created technical infrastructure
- We use antivirus systems, firewalls, and other security products to ensure data protection, and we stay updated on technological advancements.

1.7.2. ADMINISTRATIVE MEASURES

- We publish our personal data protection and processing policy on the school.hpb.org.tr website
- We ensure that members registering on the site review and approve our policy on personal data protection and processing during the registration process

1.8. STORAGE AND PROTECTION OF PERSONAL DATA
1.8.1. STORAGE OF PERSONAL DATA

Personal data is stored for as long as required by the legal regulations, or for the duration necessary for the purpose of processing.

When personal data is processed for multiple purposes, the data will be deleted, destroyed, or anonymized when the purposes of processing are no longer relevant, or upon the data subject’s request, unless there is a legal obstacle.

Personal data will be deleted, destroyed, or anonymized when:
- The purposes of processing have completely ended, or
- Upon the data subject’s request, as long as there is no legal barrier.

The process of deletion, destruction, or anonymization will be performed in accordance with the legal provisions and decisions by the KVK Board.

Personal data will be deleted, destroyed, or anonymized with appropriate security measures as outlined in this policy.

Unless stated otherwise by the KVK Board, school.hpb.org.tr will select the most appropriate method for deletion, destruction, or anonymization. If the data subject requests a specific method, it will be chosen with an explanation of the reason.


1.8.2. PROTECTION OF PERSONAL DATA

school.hpb.org.tr is responsible for preventing unlawful processing of personal data and unauthorized access, and for ensuring data security through measures like encryption, access management, and physical security.
If personal data is obtained unlawfully by others, it will be reported to the Personal Data Protection Board as soon as possible, in accordance with legal regulations.

1.9. RIGHTS OF THE PERSONAL DATA SUBJECT

As a data subject, you have the right to:
- Learn whether your personal data is being processed,
- Request information regarding your processed personal data,
- Learn the purpose of processing and whether your data is being used in accordance with its intended purpose,
- Be informed of third parties, both domestic and foreign, to whom your personal data has been transferred,
- Request correction of incomplete or incorrect data and have this communicated to third parties,
- Request deletion or destruction of personal data when the reasons for processing no longer apply and have this communicated to third parties,
- Object to automated processing of your data that leads to negative consequences for you,
- Request compensation for any damage caused by the unlawful processing of your personal data.

1.10. EXERCISING YOUR RIGHTS REGARDING PERSONAL DATA

You may submit requests regarding the processing of your personal data by sending them in writing with your signature to the address: Hilal Mah. Cezayir Cad. No:36/2 Çankaya ANKARA, or via the "RELEVANT PERSON APPLICATION FORM".

In accordance with the Regulation on the Procedures and Principles for Data Subject Applications, the application must include the applicant’s full name, signature (if written), T.C. identity number (or passport number for foreigners), address, and contact information, as well as details of the request.

Applications made by unauthorized third parties will not be considered.

Data subjects’ requests will be evaluated free of charge, except when the procedure incurs additional costs, in which case a fee may be charged as determined by the KVK Board.

For any updates or changes to your personal data, please feel free to email us at hpb@hpb.org.tr.

1.10.1. RESPONSE TO APPLICATION

Your requests related to personal data will be answered no later than 30 days from the date they are received.

If your application is rejected, you will be informed of the reasons for rejection via email or postal mail.

Owner of the website school.hpb.org.tr
Turkish HPB Surgical Association

I acknowledge, declare, and undertake that I have read the Personal Data Protection and Processing Disclosure Statement of the Turkish HPB Surgical Association, the owner of the website school.hpb.org.tr, and that I consent to the collection, recording, processing, storage, and transfer of all my personal data, including special categories of personal data, as well as data that can identify me or be used to identify me, provided by me verbally, in writing, electronically, and in cloud environments, in accordance with the principles and requirements of the law.

- Personal data that is clearly related to an identified or identifiable natural person, processed fully or partially automatically, or as part of a data recording system in a non-automatic manner, which includes information related to the person's identity (such as name-surname, Turkish ID number, nationality, parent's names, place and date of birth, gender, title, specialization, etc.)
- Personal data that is clearly related to an identified or identifiable natural person, processed fully or partially automatically, or as part of a data recording system in a non-automatic manner, which includes contact information (such as phone number, email address, address, fax number), institution worked at, city of employment, department worked in, etc.

I have read and accept this "Explicit Consent Statement of the Data Subject" prepared by the Turkish HPB Surgical Association, the owner of the website school.hpb.org.tr.