According to Article 20 of the Constitution of the Republic of Turkey, all real persons has the right to the protection of personal data. Protection of personal data, which is a constitutional right on the subject, “Size & Me Incorporated ”, business governed by this Policy; our website takes the necessary care to protect the personal data of its users and visitors, and makes this a company policy.
In this context, "Size & me Necessary administrative and technical measures are taken by the Joint Stock Company.
In this Policy, in the processing of personal data, “Size & Me Joint Stock Company" adopted and Detailed explanations will be made regarding the basic principles listed below:
Personal processing the data in accordance with the law and honesty rules,
Personal keeping data accurate and up-to-date when necessary,
Personal processing data for specific, explicit and legitimate purposes,
Personal Linked, limited and measured processing of data for the purpose for which they are processed,
Personal data required by the relevant legislation or for the purpose for which they are processed. storage for a period of time,
Personal data owners lighting and information,
Personal Establishing the necessary system for data owners to exercise their rights,
Personal Taking the necessary measures in the protection of data,
To third parties in line with the requirements of the purpose of processing personal data To act in accordance with the relevant legislation and KVKK Board regulations,
Custom Show the necessary sensitivity to the processing and protection of qualified personal data
The main purpose of this Policy is to be carried out by the "Company" in accordance with the law. Personal data processing activity and systems adopted for the protection of personal data To make explanations about the issue, in this context, the users and visitors of our website transparency and transparency by informing the persons whose personal data are processed by our company. to provide transparency.
This Policy; users and visitors of our website, automatically or in any way. All personal data processed by non-automatic means, provided that they are part of the data recording system. data.
Regarding the personal data owners groups in the above-mentioned categories, The scope of application of the Policy may be the whole of the Policy; only some provisions It can also happen.
Based on the current relevant laws and regulations regarding the processing and protection of personal data. will be valid. If current regulations are inconsistent with this policy, the company agrees that current regulations will apply.
The policy states that the rules set forth by the KVKKK No. 6698 “Size & Me Joint Stock Company” It was formed by concretizing and arranging within the scope of its applications. Our company, KVKK Necessary system and system to act in accordance with the effective periods stipulated in the Law carries out its preparations.
In case the whole or certain articles of the Policy are renewed, the Policy will become effective. The date and version will be updated. The policy is published on the official website of our Company (https://sizeandme.com/) or the company consultation It is made available to the relevant persons upon the request of the personal data owners.
Our “Company” means that the personal data processed in accordance with Article 12 of the KVKK Law is unlawful. processing, preventing unlawful access to data, ensuring an appropriate level of security and has taken the necessary technical and administrative measures to implement the measures. Necessary controls in this context
Our company provides the necessary legal, technical and takes administrative measures and shows the highest level of attention and care in this regard. Our company pursuant to Article 12 of the KVKK Law to ensure "data security" actions and measures are listed below.
Our company provides technical means and facilities to ensure the legal processing of personal data. will take technical and administrative measures according to implementation costs. Employees learn cannot disclose personal data to others in violation of the provisions of the KVKK Law, and cannot use it other than for the purpose of processing and this obligation after leaving the task are informed that it will continue in commitments are made. Open Consent Approval Form with wet signature from all employees
Our company does not prevent the unconscious or unauthorized disclosure, access, shall be protected to prevent transmission or any other form of unlawful access. technical and administrative according to the nature of the data, technological possibilities and the cost of implementation. takes precautions.
Our company prevents the unlawful processing of personal data, preventing unlawful access and keeping data in accordance with the law such as business partners and suppliers to whom personal data has been transferred raises awareness among data processing institutions; business partners and for suppliers to carry out personal data processing activities in accordance with KVKK law. takes the necessary precautions.
As a data controller, our company has to comply when processing personal data. obligations and complying with the legal, administrative and technical measures it has developed in this regard Obligation Our company is in relation with various titles such as supplier, business partner. data
with the nature of the activity they carry out in terms of data processing to the processing institutions. It is legally loaded with the updates made in the contracts in a compatible way.
Our company is responsible for storing personal data in secure environments and for illegal purposes. technological possibilities to prevent its destruction, loss or alteration; and takes the necessary technical and administrative measures according to the implementation cost.
Our company, in accordance with Article 12 of the KVKK Law, conducts or makes inspections. These audit results are the internal functioning of the company. It is reported to the relevant department within the scope of the subject and the improvement of the measures taken. Necessary activities are carried out.
Our company is legally responsible for the personal data processed in accordance with Article 12 of the KVKK Law. If it is obtained by others by unauthorized means, the system that ensures that the relevant personal data owner and the KVKK Board are notified.
Our company, to evaluate the rights of personal data owners and to the necessary channels in accordance with Article 13 of the KVKK Law in order to provide the necessary information, It implements internal processes, administrative and technical regulations.
If the personal data owner makes a written request to the company regarding his rights, the company will conclude the request free of charge within 30 days at the latest, depending on the nature of the request. However, If a fee is foreseen by the KVKK Board, The fee in the tariff determined by the Board will be charged. Personal data owners;
Learning whether personal data is processed,
If personal data has been processed, requesting information about it,
The purpose of processing personal data and whether they are used in accordance with the purpose learning,
Yurt Knowing the third parties to whom personal data is transferred in or abroad,
Correction of personal data in case of incomplete or incorrect processing request and the process carried out in this context to third parties to whom personal data is transferred request notification,
KVKK Although it has been processed in accordance with the provisions of the Law and other relevant laws, deletion of personal data in the event that the reasons for its processing disappear requesting the destruction or destruction of personal data requesting notification to third parties,
By analyzing the processed data exclusively through automated systems Objecting to the emergence of a result against the person himself,
In case of loss due to unlawful processing of personal data to demand the removal of the damage,
In accordance with paragraph 1 of Article 13 of the Law on the Protection of Personal Data, personal data the requests of the owners regarding the exercise of the above-mentioned rights in "written" or Personal Transmission to our Company by other methods determined by the Data Protection Board required. The Personal Data Protection Board does not use any method at this stage
submission of the applications to our Company in writing as per the mandatory provision of the Law.
In order for personal data owners to exercise their above-mentioned rights, compelling need together with the necessary information and explanations about the rights they want to use. regarding the use of the rights specified in Article 11 of the Law. and to forward them to our Company by stating that; applications more quickly and effectively. will get it answered.
In this context, based on Article 13 of the Law on the Protection of Personal Data, within the scope of exercising the rights in Article 11 of the same Law, The channels and procedures through which the applications will be submitted in writing are described below.
The personal data owner who is requested to use the rights specified in Article 11 of the KVKK Law requests containing explanations about the right; By filling out the form at https://sizeandme.com/ or Make a signed copy of the form Size & Me Anonim Şirketi's Esentepe Mahallesi Talatpaşa Caddesi No.5/1 Levent, Şişli, IstanbulTo the address of Turkey personally, together with the documents identifying the data owner. It can be forwarded, sent through a notary public or other methods specified in the KVKK Law.
In order for third parties to request applications on behalf of personal data owners, the data owner special power of attorney issued by the notary public on behalf of the applicant
With the KVKK Law, some personal data are processed unlawfully. Special attention has been given due to the risk of causing victimization or discrimination.
These data are; race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, attire, association, foundation or union membership, health, sexual life, criminal conviction and data on security measures, and biometric and genetic data.
In accordance with the law, which is determined by our company as "special quality" with the KVKK Law. We are sensitive about the protection of sensitive personal data processed. This In this context, technical and administrative services taken by our Company for the protection of personal data measures are carefully implemented in terms of special quality personal data and necessary inspections are carried out. provided.
Our company, in accordance with Article 10 of the KVKK Law, during the acquisition of personal data enlightens the personal data owners. In this context, personal data by our Company During the acquisition of personal data to the owners, the identity of our Company for what purpose it will be processed, to whom and for what purpose the processed personal data can be transferred, the method of collecting personal data and the legal reason, A clarification is made regarding the rights he/she has within the scope of Article 11.
In the 20th article of the Constitution, everyone is informed about their personal data. proved to be entitled. In this direction, 11 of the KVKK Lawpersonal in article Among the rights of the data owner, “requesting information” is also counted.
In this context, our company complies with the 20th article of the Constitution and the 11th article of the KVKK Law. In case the personal data owner requests information, it provides the necessary information.
In addition, our company adheres to the "Law and honesty" rule with all the issues in the KVKK Law. personal data owners and those concerned that they are performing appropriate personal data processing activities. By announcing it with various public documents, especially the policy document, personal data to inform the relevant parties in processing activities and to ensure accountability and provides transparency. In addition, our Company; to the "explicit consent" of individuals about his own activities and matters in the law, especially when he applied It also provides information in different ways.
Our company, in accordance with Article 20 of the Constitution and Article 4 of the KVKK Law, on processing; in accordance with the law and the rules of honesty; accurate and up-to-date where necessary; specific, clear and for legitimate purposes; Personal data processing in a limited and measured manner in connection with the purpose is operating. Our company does not comply with the laws or the purpose of personal data processing. retains personal data for as long as required.
Our company, in accordance with Article 20 of the Constitution and Article 5 of the KVKK Law, Based on one or more of the conditions in Article 5 of the KVKK Law regarding the processing of data it works.
Our company is responsible for the processing of special categories of personal data in accordance with Article 6 of the KVKK Law. acts in accordance with the regulations envisaged in terms of
Our company, in accordance with Articles 8 and 9 of the KVKK Law, regarding the transfer of personal data complies with the regulations stipulated in the law and set forth by the KVKK Board.
Personal data in business relations, establishment, implementation and termination of employment contract processed without further approval, if necessary. When starting a business relationship personal data of candidates are processed. If the candidate is rejected, the candidate's information It is kept for the appropriate data retention period for a subsequent selection stage. eventually deleted, destroyed or anonymized.
Data transactions that are made expressly stipulated in the law or due to the legal obligation of the Company
Personal data belonging to the employee, if the processing is clearly stated in the relevant legislation or in accordance with the legislation. without obtaining further approval in order to fulfill a determined legal obligation. can be processed.
Personal data belonging to the employee may also be subject to additional approval when a legitimate interest of the Company is required. can be processed without Legitimate interests are usually legal (e.g. filing, enforcing or defending) or economic (e.g. valuation of the company) are interests. In personal situations where the interests of employees need to be protected, personal data
are not processed for legitimate interest purposes. Data requiring protection before processing determines whether there are benefits. Employee data is in the legitimate interest of the Company. It is examined whether the processing is measured or not. This control of the company The legitimate interest in taking the necessary action violates a right of the employee that needs to be protected. It is controlled and applied only if it is measured.
If your personal data is part of the business relationship exclusively through automated systems is being processed (e.g. as part of staff selection or assessment of skill profiles) The Employee has the right to object to the emergence of a result against him/her.
Telephone equipment, email addresses, intranet and internet as well as intra-company networks, Company provided primarily for work-related tasks. These are work tools and Company are resources. These tools are in compliance with the legal regulations and the internal regulations of the Company. should be used. General information about telephone and email communication or intranet and internet use. there is no inspection. Company to prevent attacks against IT infrastructure or individual users network, blocking technically harmful content or analyzing the modeling of attacks protective measures are taken. Phone hardware, email addresses, intranet/internet and/or use of internal social networks for a limited time for security reasons. is stored. Personal evaluations of this data can only be made by legal regulations or to Size & If there is a concrete suspicion of a violation of Me Corporation regulations is done. These controls are carried out by the relevant departments only to protect the principle of proportionality. provided that it is fulfilled.
To the law and Integrity Processing
Our company; with the principles brought by legal regulations in the processing of personal data acts in accordance with the general rule of trust and honesty. In this context, our company takes into account the proportionality requirements in the processing of personal data, does not use the data other than the purpose required.
Personal Ensuring Data is Accurate and Up-to-Date
Our company; fundamental rights of personal data owners and their own legitimate interests. It ensures that the personal data it processes is accurate and up-to-date. This takes the necessary measures in this direction.
Processing for Specific, Explicit, and Legitimate Purposes
Our company clearly and precisely defines the purpose of processing personal data, which is legitimate and lawful. determines. Our company, in connection with the service it provides personal data and it works as much as is necessary for them. Personal data by our company The purpose for which it will be processed is revealed before the personal data processing activity begins. is placed.
Being Relevant, Limited and Moderate to the Purpose for which they are Processed
Our company collects personal data suitable for the realization of the determined purposes. functions in a way that is not relevant or needed for the achievement of the purpose. avoids the processing of personal data.
Preservation for as long as required by the relevant legislation or for the purpose for which they are processed
Our company can only process personal data for the purpose specified in the relevant legislation or for which they are processed. retains for as long as necessary. In this context, our Company primarily complies with the relevant legislation. determines whether a period is foreseen for the storage of personal data, If it is determined, it acts in accordance with this period, if a period is not determined, personal data they are stored for the time necessary for the purpose for which they are processed. expiry or processing In the event that the reasons requiring are deleted, destroyed, destruction processes are run or anonymized.
Pursuant to the third paragraph of Article 20 of the Constitution, personal data can only be provided as stipulated in the law. cases or with the explicit consent of the person. Our company is in line with this and the Constitution. appropriately; personal data only in cases stipulated by law or when the person's operates with her consent.
The express consent of the personal data owner, the processing of personal data in accordance with the law It is only one of the legal bases that make it possible. Other than express consent, Personal data may also be processed in the presence of one of the conditions. Personal data processing The basis of the activity can be only one of the conditions stated below, as well as from these conditions. more than one of them may be the basis of the same personal data processing activity. Processed data in case of special categories of personal data; The following conditions apply.
SiEven if the legal bases for the processing of personal data by our company differ In all kinds of personal data processing activities, as specified in Article 4 of the Law No. 6698, We act in accordance with the general principles.
Personal Finding the Explicit Consent of the Data Owner
One of the conditions for the processing of personal data is the explicit consent of the owner. Personal data the explicit consent of the owner on a particular subject, based on information and should be disclosed voluntarily.
Processing of personal data based on the express consent of the personal data owner express consent from customers, potential customers and visitors with relevant methods.
Clearly Provided in Laws
If the personal data of the data owner is expressly provided for by the law, in accordance with the law. can be processed.
Verb Failure to Obtain Explicit Consent of the Related Person Due to Impossibility
Those who are unable to express their consent due to actual impossibility or who the life of the person or another person whose validity cannot be recognized, or In the event that the processing of personal data is necessary to protect bodily integrity personal data of the data owner can be processed.
Directly Related to the Establishment or Performance of the Agreement
Provided that it is directly related to the conclusion or performance of a contract, In case it is necessary to process the personal data of the parties to the contract It is possible to process personal data.
Fulfilling the Company's Legal Obligation
For our company to fulfill its legal obligations as a data controller If the processing is mandatory, the personal data of the data owner may be processed.
Personal Making Personal Data Public
If the data owner has made his personal data public by himself relevant personal data may be processed.
A Mandatory Data Processing for Establishment or Protection of Right
Data processing is mandatory for the establishment, exercise or protection of a right data in casePersonal data of the owner may be processed.
Obligatory Data Processing for the Legitimate Interest of Our Company
Provided that it does not harm the fundamental rights and freedoms of the personal data owner, Personal data of the data subject if data processing is necessary for their interests can be processed.
Personal data determined by our company as "special quality" with the KVKK Law In processing, the regulations envisaged in the KVKK Law are strictly complied with.
In Article 6 of the KVKK Law, when it is processed unlawfully, the victimization or Some personal data that carries the risk of causing discrimination are classified as “special quality”. determined. These data are; race, ethnicity, political party membership, philosophical belief, religion, sect or other beliefs, dress, association, foundation or union membership, health, sexual data on life, criminal convictions and security measures, as well as biometric and genetic data.
By our Company in accordance with the KVKK Law; special categories of personal data, KVKK In the following cases, provided that adequate measures to be determined by the Board are taken: processed:
If the personal data owner has express consent or
If the personal data owner does not have explicit consent;
Special quality personal data other than the health and sexual life of the personal data owner data, in cases stipulated by law,
Special quality personal data regarding the health and sexual life of the personal data owner data on public health protection, medical diagnosis, treatment and care. planning and management of health services and financing for the purpose of keeping secrets, persons or authorized institutions and processed by organizations.
Our company requires the necessary security for the purposes of processing personal data in accordance with the law. personal data of the personal data owner and special quality personal data by taking the necessary precautions. may transfer their data to third parties. In this direction, our company is subject to the 8th and 9th of the KVKK Law. acts in accordance with the regulations stipulated in the article.
Personal Transferring Data Abroad
Our company requires the necessary security for the purposes of processing personal data in accordance with the law. by taking the necessary precautions, the personal data of the personal data owner and the special quality personal data may transfer their data to third parties abroad. by our company personal data; Foreigners declared to have adequate protection by the KVKK Board countries (“Adequately Protected Foreign Country”) or lack of adequate protection data controllers in Turkey and in the relevant foreign country, foreigner, to whom the KVKK Board has given a written commitment to protect countries (“Foreign Country of Data Controller Undertaking Adequate Protection”) is transferred. Accordingly, our company stipulated in Article 9 of the KVKK Law. acts in accordance with the regulations.
In accordance with Article 10 of the KVKK Law, our company is responsible for which personal information which personal data the data subject groups process, the personal data of the personal data owner informs the personal data owner about the purposes of processing and storage periods.
Before our company; Our company's legitimate and lawful personal data processing purposes in line with one or more of the personal data processing conditions specified in Article 5 of the KVKK Law. on a few and limited basis, in particular in Article 4 on the processing of personal data the general principles specified in the KVKK Law and the principles specified in the KVKK Law. complying with all obligations regulated and within the period covered by this Policy (our website's users and visitors) limited personal data, Article 10 of the KVKK Law It is processed by informing the relevant persons in accordance with.
The company, which is specified in the 2nd paragraph of the 5th article of the KVKK Law and the 3rd paragraph of the 6th article, limited to the purposes and conditions in the personal data processing conditions. processes data. These purposes and conditions;
Regarding the processing of personal data, You & Related to Me Incorporated clearly stipulated in the Laws
Personal data Size & Establishment of a contract of processing by Me Joint Stock Company or being directly related to and necessary for its performance
Personal the processing of the data to You & To fulfill the legal obligation of Me Anonim Şirketi it must be mandatory to bring
Personal personal data of the dataprovided that it has been made public by ibi; data limited processing of the owner by the “Company” for the purpose of publicizing
The processing of personal data by the "Company" is done by the "Company" or the data owners. or it is compulsory for the establishment, use or protection of the rights of third parties
Provided that it does not harm the fundamental rights and freedoms of the personal data owner, the “Company” obligatory to process personal data for legitimate interests
Personal data processing activities by the "Company" compulsory for the protection of the life or physical integrity of the owner or anyone else. and in this case, due to the actual or legal invalidity of the personal data owner. being unable to express his/her consent
Special categories of personal data other than the health and sexual life of the personal data owner to be stipulated in laws in terms of
Special quality personal data regarding the health and sexual life of the personal data owner in terms of public health protection, preventive medicine, medical diagnosis, execution of treatment and care services, financing of health services for the purposes of planning and management, persons under the obligation of confidentiality or It is processed by authorized institutions and organizations.
In this scope The “Company” processes your personal data for the following purposes:
Contact Execution of Activities
Mal/ Execution of After-Sales Support Services
Request / Follow-up of Complaints
Answering your questions and getting back to you
Client Execution of Relationship Management Processes
Client Execution of Activities for Satisfaction
Helping you find the appropriate clothing size for your body,
Helping you discover clothes that fit your budget
The processing activity carried out for the aforementioned purposes is subject to the KVKK Law.envisaged under If it does not meet any of the conditions, the “Company” regarding the relevant processing process The express consent of the personal data owner is provided by.
You & Me Joint Stock Company, in case it is stipulated in the relevant laws and regulations, keeps the data for the period specified in these regulations.
A period in the legislation regarding how long personal data should be kept If it is not regulated, the Personal Data is not related to the activity carried out by the “Company” while processing that data. as required to be processed in accordance with the practices of the "Company" and the customs of its commercial life. It is processed for a period of time and then deleted, destroyed or anonymized.
The purpose of processing personal data has ended; the relevant legislation and the custody determined by the “Company” if their term has come to an end; personal data is only evidence in possible legal disputes. to constitute or to assert the relevant right related to the personal data or to establish the defense. can be stored for Further right mentioned in the establishment of the periods herein Despite the expiry of the statute of limitations and statute of limitations, storage, based on the examples in the requests addressed to the "Company" on the same issues before times are determined. In this case, the personal data stored for any other purpose cannot be accessed and only when it is necessary to use it in the relevant legal dispute, the relevant personal
data is accessed. Personal data after the expiry of the period mentioned here too deleted, destroyed or anonymized. During this period, the relevant Personal Data Access permission is only granted by the Data Controller to the Data Processor in Information Technologies. It is in the persons who regulate the user authorizations, who act as such.
“Company” means the groups of persons to whom personal data are transferred in accordance with Article 10 of the KVKK Law. notifies the personal data owner.
“Company” means data owners managed by the Policy in accordance with Articles 8 and 9 of the KVKK Law. may transfer their personal data to the following categories of persons:
Real persons or private law legal entities
Shareholders
Suppliers
Community Companies
Authorized Public Institutions and Organizations
On the websites owned by our company; people who visit these sites to ensure that they carry out their visits in a manner appropriate for the purpose of their visit; themselves to display customized content and engage in online advertising activities. Internet movements within the site by technical means (eg cookies-cookie) is recorded. Approval information regarding the use of Cookies at the entrance of our company's website received from users. Personal data related to these activities carried out by our company detailed explanations on the protection and processing of the "Privacy and Security" texts of our website It is located in.
PERSONAL CONDITIONS FOR DELETING, DESTROYING AND ANONIZING THE DATA
Size & Me Anonim Şirketi Article 138 of the Turkish Penal Code and Article 7 of the KVKK Law Although it has been processed in accordance with the provisions of the relevant law, as regulated In case of disappearance of the reasons requiring the "Company" based on its own decision or personal data Personal data is deleted, destroyed or anonymized at the request of the owner.
As regulated in Article 138 of the Turkish Penal Code and Article 7 of the KVKK Law, the relevant Although it has been processed in accordance with the provisions of the law, the reasons requiring its processing in case of disappearance, “Size & Pursuant to the decision of Me Incorporated or personally Personal data is deleted, destroyed or anonymized at the request of the data owner. This Within this scope, our Company requires the necessary technical and taking administrative measures; necessary operating mechanisms in this regard
has developed; trains the relevant business units to act in accordance with these obligations, It provides assignment and awareness.
TECHNIQUES FOR DELETING, DESTROYING AND ANONIZING PERSONAL DATA
Personal Data Deletion and Destruction Techniques
You & Me Anonim Şirketi has been processed in accordance with the provisions of the relevant law. despite the disappearance of the reasons requiring its processing, may delete or destroy personal data on the basis of or at the request of the personal data owner. can. You & The most used deletion or destruction by Me Incorporated techniques are listed below:
Physically Destroy
Provided that personal data is part of any data recording system can also be processed by non-automatic means. While such data is deleted/disappeared the personal data is physically destroyed so that it cannot be used later. system is implemented.
Safely Delete from Software
processed in fully or partially automated means and in digital media while retained data is being deleted/destroyed; can't be saved again Methods for deleting data from the relevant software are used.
Safe Deletion by Expert
In some cases, the “Company” hires an expert to delete personal data on its behalf. can agree. In this case, the personal data will be repeated by the person who is an expert on this subject. securely deleted/destroyed beyond recovery.
Techniques to Anonymize Personal Data
Anonymization of personal data, matching personal data with other data even with an identified or identifiable natural person in any way. means to be unrelated. You & Me Joint Stock Company The reasons requiring the processing of personal data processed in accordance with the law are eliminated. can anonymize personal data.
In accordance with Article 28 of the KVKK Law; anonymized personal data can be processed for purposes such as research, planning and statistics. This type of processing It is outside the scope of the Law and the explicit consent of the personal data owner will not be sought. Anonymous Since the personal data processed by The rights set out in Section 2 of the Policy will not apply to these data. To you & Below are the most used anonymization techniques by Me Incorporated. are listed.
Masking
Data set with data masking and basic identifier information of personal data It is a method of anonymizing personal data by removing it.
Aggregation
With the data aggregation method, many data are collected and personal data is collected.
Data Derivation
With the method of data derivation, a more general content than the content of personal data are created and personal data cannot be associated with any person.
Data Hash
By mixing the values in the personal data set with the data mixing method. It is ensured that the bond between values and people is broken.
If the personal data cannot be traced by anyone or the personal identity is unreasonable, Data is considered anonymized if it can be recreated with expense and labor.
Data breaches, illegal capture, collection, alteration, copying of personal data, are events where there is justified suspicion of its distribution or use. with these third parties and It can be about people.
Contact person, personal is the real person whose data is processed.
Sensitive data is a person's race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, dress, association, foundation or union membership, health, sexual life, criminal conviction and data on security measures, as well as biometric and genetic data.
Personal data is a Any information that identifies or renders the identity of a natural person identifiable. A person for example, using a combination of information, even if the personal relationship is possible with additional information. If it can be determined, it is identifiable.
The processing of personal data is fully or partially automated or by any data recording system. obtaining, recording, storing, preserving by non-automatic means, provided that change, reorganize, disclose, transfer, take over, make available carried out on data such as bringing, classifying or preventing its use. It covers all kinds of transactions.