With advancing technology, all kinds of public institutions, private organizations, companies and mobile applications request certain data from individuals when carrying out any transaction or creating a record/membership, and they store, process or transfer this data.
While these operations are carried out, it is especially important that this data be kept securely and in compliance with legislation. Indeed, the unlawful acquisition of such data, or its seizure by malicious actors, will create harm for data subjects; and the institution, organization or company that holds the data but fails to secure it will be subject to sanctions.
What we offer
- KVKK Compliance Project: Current-state analysis, mapping of data-processing activities, and creation of data inventories and processing lists
- Disclosure and Explicit-Consent Documents: Disclosure texts and explicit-consent statements, with dedicated versions for employees/candidates, customers, visitors and suppliers
- Policies and Procedures: Personal Data Protection and Processing Policy, Retention–Destruction Policy, Access Authorization, Breach Response, and Log–Audit procedures
- Data Controller & Data Processor Agreements: Confidentiality/framework agreements, data-processing clauses for subcontractor and cloud services; third-party risk management
- Employee and Manager Training: Awareness programs, onboarding training, and scenario-based workshops for managers
- VERBİS Registration and Management: Registration, updates, and alignment of data categories / recipient groups / retention periods
- Data-Subject Requests: Responding to requests within 30 days, objection/complaint processes, and establishment of internal correspondence templates