Pursuant to Law No. 6698 on the Protection of Personal Data (the “PDP Law”), your personal data — including any information that makes your identity determined or determinable, as well as your special categories of personal data — may be processed by Bursa İnegöl Municipality (the “Institution”) acting as the data controller. Processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, classifying, or preventing the use of the data. Protecting your personal data is of vital importance to us; we would like to state that we will take all necessary measures in this regard and will continue to act with full transparency.
Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
- To carry out our services,
- To keep voice and call records for the purpose of identifying the communication and determining its content when contact is made through our call centers,
- To provide information to public officials upon request and as required by legislation on matters relating to public security,
- To ensure the security of our employees, visitors, and the Municipality’s buildings through camera recordings and other security measures,
- To protect the legitimate interests of our Municipality, provided that no harm is caused to the fundamental rights and freedoms of the data subject,
- To ensure the conduct of human resources policies,
- To fulfill our obligations arising from Municipality Law No. 5393 and other relevant legislation,
- To conduct internal audit processes,
- To carry out occupational health and safety activities,
- To protect public health and to carry out preventive medicine, medical diagnosis, treatment, and care services,
- To fulfill notification obligations to the relevant/authorized public institutions (courts, the Ministry of Environment and Urbanization, the Ministry of Finance, the Social Security Institution, the Ministry of Interior, etc.),
- To carry out information and physical security processes,
- To ensure the legal and commercial security of our Municipality and of persons in a business relationship with us,
- To respond to your requests and to inform you about the status and outcome of your request,
- To identify the person and record the necessary information regarding requests made through the call center,
- To evaluate complaints, requests, and suggestions related to our services,
- To fulfill our legal obligations and exercise our rights arising from the applicable legislation.
Transfer of Your Personal Data
- To authorized public institutions on the legal ground of fulfilling our statutory obligations,
- On a limited basis, to our suppliers, subcontractors, affiliates, and the institutions and organizations we cooperate with, for the purpose of providing products and services,
- To hospitals and healthcare institutions for the purpose of emergency medical interventions and fulfilling occupational health and safety obligations,
- To official authorities as required by the relevant legislation and our legal obligations.
Method of Collecting Your Personal Data
Your personal data is collected through documents, forms, and verbal and automated means requested from you.
Your Rights Under Article 11 of the PDP Law
As a data subject, if you submit your requests regarding your rights to our Institution using the methods set out in this Notice, your request will be concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature. However, should the Personal Data Protection Board stipulate a fee, the fee in the applicable tariff will be charged. In this context, regarding your personal data you have the right to:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether the data is used in accordance with that purpose,
- Know the third parties to whom your personal data is transferred, domestically or abroad,
- Request the correction of your personal data if it is incomplete or incorrectly processed, and request that this be notified to third parties to whom the data has been transferred,
- Request the erasure or destruction of your personal data if the reasons requiring its processing cease to exist, even though it was processed lawfully, and request that this be notified to third parties to whom the data has been transferred,
- Object to a result against you arising from the analysis of the processed data exclusively through automated systems,
- Claim compensation for damages you suffer due to the unlawful processing of your personal data.
About the Security Cameras Within İnegöl Municipality
Video recording is carried out via cameras in the buildings, parks, and other areas belonging to our Institution, and the recording process is supervised by the Information Technology Directorate. Such personal data is processed by automated means on the legal grounds set out in Article 5 of the Law — namely, “it being mandatory for the data controller to fulfill its legal obligation” and “data processing being mandatory for the legitimate interests of the data controller, provided that no harm is caused to the fundamental rights and freedoms of the data subject” — and is retained for approximately 45 days.
About the Voice Recording on İnegöl Municipality Telephones
Voice recording is carried out on the telephones belonging to our Institution, and the recording process is supervised by the Information Technology Directorate. Such personal data is processed by automated means on the legal grounds set out in Article 5 of the Law — namely, “it being mandatory for the data controller to fulfill its legal obligation” and “data processing being mandatory for the legitimate interests of the data controller, provided that no harm is caused to the fundamental rights and freedoms of the data subject” — and is retained for approximately 2 years.
Data Controller and Methods for Submitting Requests
To exercise the rights set out above under the PDP Law, you may submit your request to our Institution in writing or by other methods determined by the Personal Data Protection Board, through the channels below. As a data subject, you must submit your requests in writing — in person or by post — together with the documents necessary to verify your identity.
You may also submit your request:
- With a secure electronic signature, to inegolbelediyesi@hs01.kep.tr (registered e-mail / KEP),
- As an online user, if you have an e-mail address registered with the Institution, to kvkk@inegol.bel.tr.