Data Processing and Collection Clauses

• Transparency and Legitimacy:
  The data subject must be informed about the method and legitimate, specified purposes for collecting their data, and their consent must be obtained.
• Purpose Limitation:
  Data may not be used for purposes other than those stated at the time of collection.
• Data Minimization:
  Only the necessary data required for the specified purpose should be collected.

Data Retention and Storage Clauses

• Retention Period:
  Personal data must not be retained longer than necessary to achieve the purpose for which it was collected. Afterward, it must be destroyed or anonymized.
• Data Accuracy:
  Continuous verification must be carried out to ensure that stored personal data is accurate and up to date.

Information Security and Confidentiality Clauses

• Security Measures:
  Organizations must implement all organizational and technical measures necessary to protect data from damage, leakage, loss, theft, or unauthorized access.
• Breach Notification:
  In the event of any data breach or leakage, organizations must promptly notify regulatory authorities and affected individuals within the timeframe specified by law.

Data Subject Rights Clauses

• Right of Access:
  Individuals have the right to request access to their personal data held by an organization and to know how it is being used.
• Right to Rectification:
  Data subjects have the right to request correction or completion of inaccurate or incomplete personal data.
• Right to Erasure or Restriction:
  Individuals have the right to request deletion of their data or restriction of its processing in specific cases.
• Right to Object:
  Data subjects have the right to object to the processing of their data or to decisions affecting them based on automated processing (profiling).

Data Sharing and Transfer Clauses

• Limitation on Sharing:
  Personal data must not be shared or disclosed to third parties without the explicit consent of the data subject, except in legally specified exceptional cases (such as court orders).
• Cross-Border Data Transfer:
  When transferring data outside the country, it must be ensured that the receiving party provides adequate levels of protection in compliance with national laws.