(1) For the purposes of this Law:

• a) “Explicit consent” means freely given, specific and informed consent,
• b) “Anonymization” means rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data,
• c) “President” means President of the Personal Data Protection Authority,
• ç) “Data subject” (natural person concerned) means the natural person, whose personal data are processed,
• d) “Personal data” means any information relating to an identified or identifiable natural person,
• e) “Processing of personal data” means any operation which is performed on personal data, wholly or partially by automated means or non-automated means which provided that form part of a data filing system, such as collection, recording, storage, protection, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, preventing the use thereof,
• f) “Board” means the Personal Data Protection Board,
• g) “Authority” means the Personal Data Protection Authority,
• ğ) “Data Processor” means the natural or legal person who processes personal data on behalf of the data controller upon its authorization,
• h) “Data filing system” means the system where personal data are processed by being structured according to specific criteria,
• ı) “Data Controller” means the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.