KVKK article 10: The data controller is obliged to inform the relevant person. Insufficient text = violation.
Requirements in Information
- Data controller identification
- Purpose of processing (each purpose is separate)
- Data categories
- To whom the transfer will be made
- Legal reason
- Rights of the person concerned (KVKK art. 11)
- Contact point
Common Deficiencies
- Very general statement
- No specific purpose
- Transfer not specified
- Rights of the relevant person not enumerated
- Hard to access (confidential)
KVKK Board Penalties
- Incomplete disclosure: annual current administrative fine
- Misleading lighting: additional penalty
- No lighting: highest
Good Lighting Text Features
- Visible location
- Clear language (less legal jargon)
- Including all information
- Regular update
- Suitable for age group (if there are children)
KVKK Board Approach
KVKK The Board imposes administrative fines on companies with incomplete/misleading information text and requires the information text to be presented in a visible place.
KVKK expert lawyer is recommended.