Notice on Protection of Personal Data

TÜBİTAK may process personal data to maintain its activities in accordance with the principles and procedures prescribed by KVKK and other relevant laws and regulations. Personal data regarding our stakeholders can be collected directly or indirectly through TÜBİTAK units, website, social media, and other tools, in written, verbal, or electronic form. The personal data obtained under KVKK can be processed for the following purposes:

• Timely responding to information and other requests from public institutions, organizations, and related stakeholders.
• Proper and complete fulfillment of contractual and legal obligations.
• Monitoring finance and/or accounting operations.
• Execution of legal processes and follow-up of legal proceedings.
• Planning and executing human resources processes and activities.
• Planning, auditing, and executing IT and information security processes.
• Conducting quality and standard inspections and improvements.
• Ensuring the security of the institution and personnel.
• Coordinating processes related to visitors and meeting participants.
• Developing and diversifying the provided support and services.
• Evaluating, responding to, and conducting improvement studies based on suggestions/complaints/requests conveyed by stakeholders and visitors through all kinds of channels.
• Method and Legal Basis of Collecting Personal Data

• Explicit provisions in the law,
• Necessity for the establishment or execution of a contract, provided that it is directly related to the contract parties' personal data processing,
• Mandatory processing for the data controller to fulfill its legal obligations,
• Mandatory processing for the establishment, exercise, or protection of a right,
• Mandatory processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Based on the duties and authority granted by Article 234 (t) of the Presidential Decree No. 4, personal data may be collected via TÜBİTAK units, call centers, cameras and audio recordings, application forms, websites, membership and communication forms, internet, mobile applications, newsletters, cookies, social media, and other public platforms or through organized trainings, meetings, events, and similar activities. These collected personal data can be processed and transferred for the purposes specified in Article 2 of this notice and within the framework of the conditions for processing personal data and special categories of personal data stated in Articles 5, 6, and 8 of the Law.

TÜBİTAK acts in compliance with the provisions defined in Articles 8 and 9 of the Law regarding the transfer of collected personal data domestically and abroad. These data may be shared with authorized public institutions and organizations, law enforcement agencies, courts, and execution offices, legally authorized private law persons, related third-party real and legal persons, service provider companies and their officials, project partners, suppliers, and support service providers when necessary to carry out TÜBİTAK's services more effectively and to fulfill legal requirements.

Individuals who contact TÜBİTAK within the scope of Article 11 of the Law have the following rights:

• To learn whether their personal data are processed,
• To request information if their personal data have been processed,
• To learn the purpose of processing their personal data and whether they are used in accordance with the intended purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request the correction of personal data if they are incomplete or incorrectly processed and to request the notification of the transaction made within this scope to third parties to whom personal data are transferred,
• To request the deletion, destruction, or anonymization of personal data in case the reasons requiring processing are eliminated and to request the notification of the transaction made within this scope to third parties to whom personal data are transferred,
• To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• To request compensation for damages in case of suffering damages due to unlawful processing of personal data.

If you wish to contact us regarding your rights under Article 11 of KVKK, you can deliver your requests in person to TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara by providing identification documents or send them toztubitak.baskanlik@tubitak.hs03.kep.tr with a secure electronic signature. The relevant person must specify their request clearly and understandably in the application to exercise the above-mentioned rights. The necessary information and documents related to the application must be attached to the application.

Such applications will be accepted following identity verification and your requests regarding your rights will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. In case of a written response to the application or a response via CD, flash memory, or similar recording mediums, a fee may be charged as per Article 7 of the "Communiqué on the Procedures and Principles of Application to the Data Controller". You can reach TÜBİTAK regarding KVKK through the contact information provided below.

Presidency Address: TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara
Phone: 0312 468 5300
Fax: 0 312 427 6817
Email: kvkk@tubitak.gov.tr
Website: www.tubitak.gov.tr