Personal Data, Data Controller Duties, and Contact Person under KVKK
Services in this category ▼
KVKK Consultancy
What is personal data?
Personal data means any information that makes a person identified or identifiable. Name, surname, Turkish identity number, address, and telephone number all qualify because they identify someone directly or indirectly. Special categories of data, including biometric, genetic, and financial information, also fall within the personal data definition.
Data controller and its duties
The data controller is the person or organisation that decides how and why personal data are processed. Under KVKK (Turkey's Personal Data Protection Law, No. 6698), the controller has several duties: securing the personal data, using them only for the declared purpose, protecting the rights of the data subject, maintaining a data management policy that aligns with KVKK, and notifying the authority where the law requires it.
Who is the contact person?
For data controllers registered in VERBIS (the Data Controllers Registry), the contact person (irtibat kisisi) is the individual who handles communication with the authority and data subjects. The contact person is not the same as a data protection officer under GDPR, but the role is similar in that it gives the authority a named point of contact inside the organisation.
How KVKK consultancy works
Organisations that need KVKK consultancy contact Sistem Patent Kalite to start the engagement. Consultants review the processing operations and prepare a plan that covers the data inventory, privacy notices, explicit consent texts, internal policies, and technical and organisational measures the law requires.
The service covers every organisation that processes personal data, regardless of sector or size. That means data collection, storage, processing, sharing, and security all fall within scope. Fees vary with the size of the organisation, the volume of data, and the length of the engagement, so Sistem Patent Kalite scopes each engagement individually.
Why work with Sistem Patent Kalite
KVKK compliance matters for every organisation that processes personal data in Turkey. Sistem Patent Kalite helps clients translate the law into practical policies and workflows, so the data subject's rights are protected and the controller stays on the right side of the regulator.
