For the purposes of this Law the following definitions shall apply:
a) Explicit consent: freely given, specific and informed consent,
b) Anonymizing: rendering personal data impossible to link with an identified or
identifiable natural person, even through matching them with other data,
c) President: President of the Personal Data Protection Authority,
ç) Data subject: the natural person, whose personal data is processed,
d) Personal data: all the information relating to an identified or identifiable natural
person,
e) Processing of personal data: any operation performed upon personal data such as
collection, recording, storage, retention, alteration, re-organization, disclosure, transferring,
taking over, making retrievable, classification or preventing the use thereof, fully or partially
through automatic means or provided that the process is a part of any data registry system,
through non-automatic means,
f) Board: the Personal Data Protection Board,
g) Authority: the Personal Data Protection Authority,
ğ) Processor: the natural or legal person who processes personal data on behalf of the
controller upon his authorization,
h) Data registry system: the registry system which the personal data is registered into
through being structured according to certain criteria,
2
ı) Controller: the natural or legal person who determines the purpose and means of
processing personal data and is responsible for establishing and managing the data registry
system.
« Scope