Article 3 - Definitions

(1) For the purposes of this Law the following definitions shall apply:

  • a) Explicit consent: freely given, specific and informed consent,
  • b) Anonymizing: rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data,
  • c) President: President of the Personal Data Protection Authority,
  • ç) Data subject: the natural person, whose personal data is processed,
  • d) Personal data: all the information relating to an identified or identifiable natural person,
  • e) Processing of personal data: any operation performed upon personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means,
  • f) Board: the Personal Data Protection Board,
  • g) Authority: the Personal Data Protection Authority,
  • ğ) Processor: the natural or legal person who processes personal data on behalf of the controller upon his authorization,
  • h) Data registry system: the registry system which the personal data is registered into through being structured according to certain criteria,
  • ı) Controller: the natural or legal person who determines the purpose and means of processing personal data and is responsible for establishing and managing the data registry system.