KVKK Article 13: The data controller must respond to the requests of the relevant person (data owner) within 30 days.
Types of Requests (KVKK Article 11)
- Do you process my data?
- For what purpose?
- To whom did you transfer it?
- Correct incorrect data
- My data. delete
- Have you made a domestic/international transfer?
- Is it subject to automatic decision?
Application Method
- Written (e-mail, petition, mail)
- KVKK contact address of the data controller
- Identification
Response Period
- 30 days (at most) late)
- Reasonable time if the request requires special review
- If rejected, reasoned written response
Fee
- Usually free of charge
- If the request requires great labor/cost, a reasonable fee may be requested (Board tariff)
If Remains Unanswered
- After 30 days, To the KVKK Board complaint
- The Board examines the company
- Administrative fine if no response is given
KVKK Board Decision
The KVKK Board periodically imposes penalties on companies that do not respond to the requests of relevant persons. It applies direct penalties, especially in cases of "30 days have passed, no response".
Practical Recommendations (Data Owner)
- Make the request in writing
- Record the date
- Complaint if there is no response
- Follow the time
KVKK lawyer is recommended.