Answer ... (a) Data processing
Any operation which is performed on personal data, wholly or partially by automated means or non-automated means, which forms part of a data filing system, such as collection, recording, storage, protection, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorisation or restriction.
(b) Data processor
A natural or legal person that processes personal data on behalf of the data controller and with its authorisation.
(c) Data controller
A natural or legal person that determines the purposes and means of the data processing and is responsible for the establishment and management of the data filing system.
(d) Data subject
A natural person whose personal data is processed.
(e) Personal data
Any information relating to an identified or identifiable natural person.
(f) Sensitive personal data
Known as ‘special categories of personal data’ in Turkey: that is, personal data relating to an individual’s race, ethnic origin, political opinions, philosophical beliefs, religious or other beliefs, appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions or security measures; and biometric and genetic data.
Consent in Turkey is ‘explicit’ when it is freely given, specific and informed consent.