As the International Federation of Green Crescent, we are committed to safeguarding all personal data collected, processed, stored, and archived from both internal stakeholders (such as the Board of Directors, Disciplinary Board, Supervisory Board, Scientific Committee, prospective employees, employees, their family members, prospective interns, interns, members, volunteers, donors, contracted staff, visitors to our facilities, and employees of subsidiaries) and external parties we engage with (such as government employees, clients, academics, potential and current suppliers, campaign participants, and other third parties). This commitment is in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), and is based on the following eight principles:

Personal Data:

• Collected, processed, stored, and archived in compliance with the law and principles of good faith.
• Processed for specific, legitimate, and transparent purposes.
• Processed in a manner that is relevant, limited, and proportionate proportional to the intended purpose. 
• Ensured to be accurate and kept up to date; steps are taken to collect correct data and maintain its accuracy.
• Retained for the period prescribed by law or as long as necessary for the purposes for which they are processed
• Processed with consideration of the rights and requests of data subjects, in line with Article 11 of the law. Data subjects have the right to:
• Request the deletion of data, inquire whether data is being processed, find out which third parties have received the data, and exercise the other rights outlined in Article 11.

Data subjects may submit requests concerning the enforcement of KVKK through the following methods:

• In person by visiting Sepetçiler Kasrı, Hocapaşa Mah. Kennedy Cad. No:3 Fatih/Istanbul, with a valid ID for identity verification.
• By notary submission to Sepetçiler Kasrı, Hocapaşa Mah. Kennedy Cad. No:3 Fatih/Istanbul.
• By completing the form accessible here or sending an email to info@ifgc.org.tr (For email submissions, a security question may be asked for identity verification).

Processing of Requests:

• Identity verification of the requester is conducted.
• The request is reviewed.
• It is determined whether the request falls into standard categories such as information requests, data modification, or data deletion.
• If it is a standard request, the relevant department is consulted to identify the group to which the data subject belongs (e.g., client, member, volunteer, donor, employee, or third party).

If a data subject requests the deletion or destruction of their personal data under Article 11 of KVKK, and if the conditions for data processing no longer exist, the data shall be deleted, anonymized, or destroyed.

Rights of Data Subject Under Article 11 of KVKK:

• To inquire whether their personal data is being processed.
• To request information about the processing of their personal data.
• To learn the purpose of data processing and verify whether their data is being used in accordance with that purpose.
• To request information on third parties, within or outside the country, to whom their personal data has been transferred.
• To request correction of incomplete or inaccurate data.
• To request the deletion or destruction of unlawfully processed data in accordance with KVKK or this policy.
• To request notification to third parties with whom their data has been shared regarding any corrections or deletions.
• To object to decisions made solely based on automated data processing that result in unfavorable
• To seek compensation for damages incurred due to the unlawful processing of personal data.

• Data Security: Appropriate technical and administrative measures are implemented to ensure the security of personal data during processing (including physical, environmental, and system-based safeguards).
• Data Sharing: Data is shared in compliance with legal exceptions or with explicit consent. The personal data of both internal and external parties is collected, processed, stored, and archived by our organization in accordance with these eight principles.
• Account Deletion: Requests for account deletion submitted electronically will be processed following the above procedures. If a request is canceled before completion, the process will be terminated accordingly.

Business Card Privacy Notice

At the International Federation of Green Crescent (IFGC), we prioritize the protection of your personal data in accordance with our obligations as a data controller under the Personal Data Protection Law No. 6698. We are committed to ensuring the security of your personal information and aim to keep you informed about how your data is processed.

Purpose and Legal Grounds for Processing Your Personal Data

Your personal data, including your name, surname, phone number, email address, title, and company name, are processed in compliance with Law No. 6698 and relevant regulations. This data is collected and processed for the purpose of maintaining communication with you in your professional capacity and facilitating the delivery of gifts and flowers. The legal grounds for this processing include public disclosure (Article 5/2-d) and legitimate interest (Article 5/2-f) of the law.

Transfer of Personal Data

The International Federation of Green Crescent may share your personal data, such as for the delivery of gifts or promotional items, with suppliers and third parties, in accordance with Articles 8 and 9 of the law.

Methods of Collecting Personal Data

We collect your personal data when you provide us with a business card directly or share your contact details with us through other means. Additionally, any personal data you share when contacting the International Federation of Green Crescent through various channels will also be collected.

Your Rights Regarding Personal Data

As a data subject, you have the right to contact the International Federation of Green Crescent in accordance with the Communiqué on Application Procedures and Principles to the Data Controller to request information about your personal data. We will respond to such requests within 30 days, free of charge, unless additional costs are incurred, in which case a fee may be charged in accordance with the official fee schedule set by the Personal Data Protection Board.