Article 3 – (1) In the implementation of this Law;
a) Explicit consent: Consent based on information regarding a specific subject and declared by free will,
b) Anonymization: Rendering personal data in such a way that the identity of the real person cannot be associated with said data, even by matching with other data,
c) President: The President of the Personal Data Protection Authority,
ç) Concerned person: The real person whose personal data is processed,
d) Personal data: Any kind of information related to an identified or identifiable real person,
e) Processing of personal data: Any operation performed on data such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, acquiring, making data available, classifying, or preventing the use of data, entirely or partially by automatic means, or through non-automatic means, provided that they are part of any data recording system,
f) Board: The Personal Data Protection Board,
g) Authority: The Personal Data Protection Authority,
ğ) Data processor: Natural or legal persons who process personal data on behalf of the data controller based on the authority granted by the data controller,
h) Data recording system: The system where personal data is processed according to specific criteria,
ı) Data controller: The real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.