A Data Supervisor, who can face serious sanctions if he does not fulfill his legal obligations as mentioned by the Law Numbered: 6698 on the Protection of Personal Data (hereinafter also the "KVKK"), means the real or artificial person that determines the means and purpose for processing personal data, and that is responsible for the establishment and management of the data registry system.
Artificial Persons represent "data supervisors" concerning the activities they conduct for processing personal data, and the legal responsibility mentioned by legal regulations shall be incumbent on the artificial personality. On this subject, the public law mentioned no difference between artificial persons and special legal artificial persons.
According to the Law, a data supervisor represents the person that determines the purpose and method of processing personal data, meaning that he is responsible for answering the questions "how" and "why" personal data processing activities are conducted.
As the units included within a company are not artificial persons, these units cannot be granted the title of data supervisor. In addition, each company that is a part of a companies group possesses an artificial personality and thus becomes a data supervisor.
The fundamental obligations of a data supervisor as per the Law Numbered: 6698 on the Protection of Personal Data can be listed under the following headings:
Obligation of Elucidation
Obligations on data safety.
Obligation to become registered in VERBİS, the registry of data supervisors.
Obligation to reply to applications that are made by relevant persons.
Obligation to fulfill the board resolutions.
Commentaires