Obligations of the data controller, representative of the data controller and contact person
(1) Legal persons are themselves the data controllers for the legal persons. The data controller obligations of legal persons established in Türkiye under the Law are fulfilled by capacity of competent to represent and bind the legal person or the person(s) specified in the relevant legislation pursuant to provisions of the relevant legislation. Competent representative may assign one or more persons for its obligations to be fulfilled for the implementation of the Law. This assignment does not remove the responsibilities of legal person pursuant to the provisions of the Law.
(2) Representatives of data controllers not established in Türkiye shall submit certified copy of decision for the designation of a representative to be taken its competent or person to the Authority during application.
(3) Decision of designation for representative of the data controller shall be arranged to cover at least the following points:
- a) to receive or accept notifications and correspondence made by the Authority on behalf of the data controller,
- b) to transmit the demands made by the Authority to the data controller and to submit the responses of the data controller to the Authority,
- c) to receive and transmit requests to be made by data subjects pursuant to first paragraph of the Article 13 of the Law on behalf of the data controller, in case no other principle has been determined by the Board.
- ç) to transmit the response of the data controller to the data subjects pursuant to third paragraph of Article 13 of the Law, in case no other principle has been determined by the Board,
- d) to perform operations relating to the Registry on behalf of the data controller.
4) (Amendment: OG-28/4/2019-30758), Data controllers established in Türkiye and representatives of data controllers not established in Türkiye shall enter contact person information into the Registry at the time of registration. Contact person is not authorized to represent data controllers in accordance with the provisions of the Law and the By-law.
5) (Amendment: OG-28/4/2019-30758) Contact person in the public institutions shall be head of department or higher executive to be assigned by the coordinating high level executive for the aim of communication with the Authority.