Zero Waste Forum Privacy Notice
Publication Date: 14.04.2026 | Revision No: 0 | Document Code: CT.GDPR.01
Dear Data Subjects, This Privacy Notice has been prepared by The Zero Waste Foundation, acting as the Data Controller, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the General Data Protection Regulation (GDPR).
1. Categories of Personal Data Processed
Within the scope of the Zero Waste Forum, particularly during the partnership application process, the following categories of personal data are processed: • Identity and Contact Data: Name, surname, email address, phone number • Professional Data: Organization name, title/position, field of activity • Transaction Security Data: IP address, log records, cookies, and technical data • Visual and Audio Data: Photos, video, and audio recordings collected during events • Content Data: Application forms, partnership requests, and supporting documents
2. Purposes of Processing Personal Data
Your personal data is processed for the following purposes: • Enabling participation in the Zero Waste Forum • Receiving and evaluating partnership applications • Managing cooperation processes and international stakeholder communication • Planning and executing forum organizational activities • Fulfilling legal obligations and providing evidence in potential legal disputes • Conducting surveys and statistical analysis related to the Forum
3. Legal Bases for Processing
Your personal data is processed in accordance with: • GDPR Article 6(1)(b) – Necessary for the performance of a contract • GDPR Article 6(1)(f) – Based on legitimate interests • KVKK Article 5/2: Necessary for contract performance, legal obligations, and legitimate interests of the data controller.
4. Transfer of Personal Data
Your personal data may be transferred to service providers (IT, hosting, transportation, accommodation), organizational partners, and authorized public authorities. International data transfers are only conducted with appropriate safeguards under KVKK Art. 9 and GDPR Chapter V.
5. Retention and Deletion Policy
Personal data will be retained for: • 2 years for application-related data • 5 years for data within the scope of cooperation agreements Upon expiry, data will be deleted, destroyed, or anonymized.
6. Data Security Measures
Technical Measures: SSL/TLS encryption, access control systems, firewalls, and regular penetration testing. Organizational Measures: Risk assessments, confidentiality agreements, and information security trainings.
7. Rights of the Data Subject
Under GDPR and KVKK Article 11, you have the right to access, rectify, erase, object to processing, and request data portability (GDPR).
8. Contact for Requests
Your requests will be responded to within 30 days. Identity verification may be required to ensure data security.
9. Data Controller Information
The Zero Waste Foundation Address: Kandilli Mah. Hıdırellez Sok. No: 3 Üsküdar/Istanbul/Türkiye Phone: +90 (216) 651 20 00 Email: info@sifiratikvakfi.org