(1) For the purposes of this By-law:

• a) “Recipient group” means category of natural and legal persons to which the personal data are transferred by the data controller,
• b) “President” means the President of Personal Data Protection Authority,
• c) “Presidency” means the Presidency of Personal Data Protection Authority,
• ç) (Amended: OG (Official Gazette) – 28/4/2019-30758) “Contact person” means the natural person notified by the data controller which is natural and legal person established in Türkiye and by representative who represents the data controller which is natural and legal person not established in Türkiye during the registration with the Registry for communicating with the Authority relating to obligations within the scope of the Law and secondary legislation to be prepared in accordance with this Law,
• d) “Law” means the Personal Data Protection Law No. 6698,
• e) “Registration” means the notification made by data controllers who are obliged to register, in accordance with procedures and principles determined by this By-law.
• f) “Obligation to register” means the obligation relating to registration to be fulfilled pursuant to the By-law,
• g) “Registered e-mail address (KEP)” means the qualified form of electronic mail which provides legal evidence for the use of it, including sending and delivering of electronic messages,
• ğ) “Personal data” means any information relating to an identified or identifiable natural person,
• h) (Amended: OG-28/4/2019-30758) “Personal data processing inventory” means the inventory which are detailed by explanations of the followings; personal data processing operations performed by data controllers according to their business processes, purposes and legal basis of personal data processing, data category, recipient group, maximum storage period which is formed relating to the group of person subject to data and necessary for the purpose for which personal data are processed, personal data envisaged to be transferred to foreign countries, and measures taken relating to data security.
• ı) “Personal data storage and disposal policy” means the policy which data controllers issue as a basis for erasure, destruction and anonymization of personal data and the determination of maximum storage period for the purpose for which personal data are processed.
• i) “Processing of personal data” means any operation which is performed on personal data, wholly or partially by automated means or non-automated means which provided that form part of a data filing system, such as collection, recording, storage, protection, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, preventing the use thereof,
• j) “Board” means the Personal Data Protection Board,
• k) “Authority” means the Personal Data Protection Authority,
• l) “Registry” means Data Controllers’ Registry kept by the Presidency,
• m) “Category of Data” means group of personal data related to group(s) of persons subject to data that are classified in accordance with their common features,
• n) “Group of persons subject to the data” means category of the data subject whose personal data are processed by data controllers,
• o) “Data Controllers’ Registry Information System (VERBIS)” means information system that is accessible through the Internet, established and managed by the Presidency, that data controllers will use for the registration with the Registry and the other operations related to the Registry,
• ö) “Data controller” means the natural or legal person who determines the purpose and means of processing of personal data and is responsible for establishment and management of the data filing system,
• p) (Amended: OG-28/4/2019-30758) “Representative of the data controller” means the legal person established in Türkiye or the natural person who is citizen of Republic of Türkiye , minimum authorized to represent data controllers which are not established in Türkiye within the scope of the issues specified in the third paragraph of Article 11 of this By-law,

(2) For the definitions not included in this By-law, the definitions in the Law shall apply.