This is an English translation provided for information purposes; in case of any discrepancy, the Turkish text prevails.

Our Municipality attaches importance to the lawful processing and protection of personal data under the Personal Data Protection Law No. 6698 (the “Law”) and acts in accordance with the Law in its planning and services.

The most important aspect of this matter is the processing and protection of the personal data of our Citizens, Employees, Employee Candidates, Visitors, the Institutions we cooperate with and Third Parties.

Within this scope, the necessary administrative and technical measures are taken by our Municipality to protect personal data processed in accordance with the relevant legislation.

We would like to remind you that, on all websites and mobile applications through which our Municipality provides services, primarily www.izmir.bel.tr, you will be subject to this policy and to our Municipality's Personal Data Processing and Protection Policy with regard to the confidentiality, protection, processing, use and modification of Data Subject information, communications and other matters.

Your Consent

By using our Municipality's websites and mobile applications or by submitting your personal data, you CONSENT to the collection, use and processing of your personal data in accordance with this Policy and all applicable laws.

Data Processed

The data processed by our Municipality that qualify as personal data under the Personal Data Protection Law are listed below. Unless expressly stated otherwise, the term “personal data” within the terms and conditions set out in this Policy covers the information below.

• a) Identity Information (Name, Surname, Turkish ID No, Place/Date of Birth, Education, Photograph, Gender, Occupation, Marital Status, Social Security Information, Citizen (Hemşehri) Number, Eşrefpaşa Hospital Patient No.)
• b) Contact Information (E-mail, Mobile Phone, Address, Fax No)
• c) Citizen Connection Information (IP Address)
• ç) Information on Candidates Applying for Jobs or Internships

Purposes and Legal Grounds for Processing Your Personal Data

Your Personal Data may be processed by our Municipality for the following purposes:

• a) To be used in the services to be provided to you under the law we are subject to and the related legislation,
• b) To improve our municipal services,
• c) To prepare the information and documents that will form the basis of transactions carried out electronically,
• ç) To identify the owner and the counterparty of the transactions carried out on websites and mobile applications and to comply with the information retention, reporting and notification obligations towards all competent judicial and administrative authorities under the relevant legislation,

Sharing of Personal Data

Personal data held by our Municipality may be transferred, within legal limits, to persons, institutions and/or organisations as required/permitted by the law we are subject to, other laws and other legislation; to district municipalities for the purpose of carrying out the services provided to citizens; and, under the laws we are subject to or with the approval of the İzmir Metropolitan Municipality Council, to universities, public institutions and third parties from whom services are procured to carry out our municipal activities.

Data Subject Request Management

If data subjects submit their requests regarding their rights using the application methods under the “Protection of Personal Data” heading on the corporate website www.izmir.bel.tr, the requests are concluded by our Municipality free of charge within thirty days at the latest.

To exercise your rights, you may submit your request, containing the information necessary to identify you and your explanations, by filling in the form at www.izmir.bel.tr and delivering a signed copy of the form, together with documents identifying you, in person to İzmir Büyükşehir Belediyesi Yazı İşleri Şube Müdürlüğü, Cumhuriyet Bulvarı No:1 Kat:3 Konak İZMİR, by sending it through a notary public, or by sending the form with a secure electronic signature to izmirbuyuksehirbelediye@hs01.kep.tr.

The Data Subject accepts that, if they make a request that results in any of their personal data not being usable by the Municipality, they will not be able to fully benefit from the operation of the website or mobile applications, and declares that any liability arising in this respect shall rest with them.

Retention Periods of Personal Data

Our Municipality retains personal data for the periods specified in the laws and legislation it is subject to.

Where the purpose of processing personal data has ended and the retention periods set by the relevant legislation have also expired, personal data may be retained to serve as evidence in possible legal disputes, to assert the related right connected to the personal data, or to establish a defence.

Technical and Administrative Measures Taken to Protect Personal Data

In accordance with the Law, our Municipality takes the necessary technical and administrative measures to prevent the unlawful processing of the Personal Data it processes, to prevent unlawful access to the data and to ensure the safekeeping of the data. These measures are listed below:

Technical Measures

• a) Technical measures in line with technological developments are taken, and these measures are periodically updated and renewed.
• b) Access rights are restricted and regularly reviewed.
• c) The technical measures taken are periodically reported to the relevant parties as required by the internal audit mechanism; matters posing a risk are re-evaluated and the necessary technological solutions are developed.
• ç) Software and hardware including virus protection systems and firewalls are installed.
• d) Personnel with expertise in technical matters are employed.
• e) Applications in which Personal Data are collected are regularly subjected to security scans to detect vulnerabilities, and the vulnerabilities found are remediated.
• f) Systems in line with technological developments are used to store Personal Data in secure environments.
• g) Backup programs are used lawfully to ensure that Personal Data are stored securely.
• ğ) Access to the environments where Personal Data are kept is restricted so that only authorised persons may access these data, limited to the purpose for which the personal data are retained; audit logs of access to the data storage areas containing Personal Data are kept, and inappropriate access or access attempts are reported to the relevant parties.

Administrative Measures

• a) Employees are informed and trained on personal data protection law and the lawful processing of Personal Data.
• b) All activities carried out by the Municipality are analysed in detail for each unit, and as a result of this analysis, the Personal Data processing activities specific to the activities of the relevant units are identified.
• c) Employees are trained on the technical measures to be taken to prevent unlawful access to Personal Data.
• ç) In addition to the contracts concluded with persons to whom Personal Data are lawfully transferred by the Municipality, confidentiality agreements are signed stating that the persons to whom Personal Data are transferred will take the necessary security measures to protect Personal Data and will ensure compliance with these measures within their own organisations.