Personal Data Protection Law

AGREEMENT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA AND DISCLOSURE TEXT

1-This personal data processing agreement and information notice have been arranged between Runes of Mystery (hereinafter referred to as 'Runes of Mystery') and users who share certain personal data. This agreement and information notice, regardless of the membership date, are an integral part of the terms of use that will be arranged in the future.

2- Runes of Mystery processes personal data in accordance with the provisions of the Turkish Constitution, the Law on the Processing of Personal Data and other laws.

3-Processing of Personal Data means any operation performed on personal data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automated or non-automated means provided that it is part of any data recording system.

4-If personal data owners submit their requests regarding their rights to Runes of Mystery, the requests are concluded free of charge as soon as possible, provided that they do not exceed the maximum period required by law. However, if the transaction requires an additional cost, a fee may be charged by "Runes of Mystery".

Personal data owners;

• - Find out if their personal data is being processed
• - Requesting information if personal data has been processed
• - To learn the purpose of personal data processing and whether it is used in accordance with its purpose
• - To know the third parties to whom personal data is transferred domestically/overseas
• - Request correction if personal data is incomplete / incorrectly processed
• - To request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data disappear
• - To request notification of the transactions made to third parties to whom personal data is transferred,
• - Object to the occurrence of a result against you due to the analysis of personal data by automated systems
• - In the event that personal data is damaged due to unlawful processing of personal data, it has the right to demand compensation for the damage

5- Article 11 of the Law on the Protection of Personal Data lists "requesting information" among the rights of the personal data owner. In this context, Runes of Mystery provides the necessary information in case the personal data owner requests information in accordance with the Constitution and Article 11 of the KVK Law.

Bu baglamda, Kisisel Verilerin Korunmasi Kanunu’nun 10. maddesine uygun olarak, kisisel verilerin elde edilmesi sirasinda kisisel veri sahiplerine, kisisel verilerinin elde edilmesi sirasinda Runes of Mystery ’un kimligi, kisisel verilerin hangi amaçla islenecegi, islenen kisisel verilerin kimlere ve hangi amaçla aktarilabilecegi, kisisel veri toplamanin yöntemi ve hukuki sebebi ile kisisel veri sahibinin KVK Kanunu’nun 11. maddesi kapsaminda sahip oldugu haklarla ilgili aydinlatma yapmaktadir. Sitede bilgileri Runes of Mystery ile paylasan tüm kullanicilar aydinlatmanin kendisine yapildigini kabul ve beyan etmektedir.

6- In order to ensure "data security" in accordance with Article 12 of the Personal Data Protection Law, Runes of Mystery pays utmost attention and care to ensure data security and necessary measures are taken regarding the following issues.

• Preventing unlawful processing of personal data
• Preventing unlawful access to personal data
• It ensures that all necessary technical and administrative measures are taken to ensure the preservation of personal data and to ensure the appropriate level of security for the purpose.

7- Runes of Mystery, its employees and/or persons who learn personal information due to their duties may not disclose such information to anyone else or use it for purposes other than its intended purpose, contrary to the provisions of the Law on the Protection of Personal Data.

In the event that the processed personal data is obtained by others by means not specified in this text and / or illegally, Runes of Mystery will notify the relevant person as soon as possible.

8- Runes of Mystery acts in accordance with the principles introduced by legal regulations and the rule of equity and honesty in the processing of personal data.

9- Runes of Mystery ensures that the personal data it processes is accurate and up-to-date, taking into account the fundamental rights of personal data owners and their legitimate interests.

10- Runes of Mystery clearly and precisely determines the purpose of processing personal data in accordance with the law. In this context, personal data is processed limited to the services provided or to be provided and its legal obligations. In this context, the purpose for which personal data will be processed is determined before the personal data processing activity begins.

11- Runes of Mystery processes personal data in a manner that is suitable for the fulfillment of the specified purposes and avoids the processing of personal data that is not related to the fulfillment of the purpose or is not needed.

12- Protection of personal data is a right regulated in the Constitution. According to the Constitution, personal data can only be processed in cases stipulated by law or with the consent of the person. In this direction and in accordance with the Constitution; Runes of Mystery processes personal data only in cases stipulated by law or with the explicit consent of the person.

The explicit consent of the personal data owner must be related to a specific subject, based on information and freely given. Everyone who becomes a member declares and undertakes that he/she has read and accepts the contract and clarifying information text regarding the processing of personal data.

In this respect, the user is deemed to have waived all rights of objection, lawsuit, complaint and demand regarding the processing of personal data.

Apart from the explicit consent of the personal data owner, personal data may also be processed in the presence of one of the other conditions listed below. The basis of the personal data processing activity may be only one of the following conditions, or more than one of these conditions may be the basis of the same personal data processing activity.

Personal data can be processed in cases where it is clearly prescribed in the laws, where it is impossible to obtain the explicit consent of the data subject due to physical impossibility, where it is directly related to the establishment or performance of a contract, where there is a legal obligation, where the data subject has made their personal data public, where data processing is mandatory for the establishment or protection of a right, or for the legitimate interests of Runes of Mystery.

13- Race, ethnic origin, political opinion, philosophical belief, religion, sect, or other beliefs, appearance and dress, association, foundation, or union membership, health, sexual life, criminal conviction, and security measures-related data, as well as biometric and genetic data, are defined as 'special categories' of personal data in Article 6 of the Personal Data Protection Law.

By Runes of Mystery, in accordance with the Law on the Protection of Personal Data; sensitive personal data are processed provided that adequate measures to be determined by the PDP Board are taken and high sensitivity is shown in this regard.

14- Although it has been processed in accordance with the provisions of the Law on the Protection of Personal Data and other relevant laws, personal data shall be deleted, destroyed or anonymized by the data controller ex officio or upon the request of the person concerned in the event that the reasons requiring its processing disappear. However, Runes of Mystery has the right to retain personal data only for the period specified in the relevant legislation that it is obliged to comply with or for the period required for the purpose for which they are processed in accordance with the law.

15- Runes of Mystery shows utmost care and attention regarding the sharing of personal data domestically and/or abroad and continues its activities in accordance with the existing regulations in this context.

16- For the purposes of Articles 8 and 9 of the Law on the Protection of Personal Data numbered 6698 ("Law") published in the Official Gazette dated April 7, 2016, Runes of Mystery hereby declares that it will act in accordance with the following points in this article.

A- Any name, surname or title that can be provided within the scope of the relationship between you and Runes of Mystery and that makes the identity of natural persons specific or identifiable, and that allows them to be identified directly or indirectly through their belonging to one or more elements that express their psychological, physical, economic, cultural or social self, according to the password number, any information relating to natural persons who can be identified on the basis of one or more elements of all personal data, including, but not limited to, identity/tax number/Mersis number, age, gender, occupation/professional activity, health, genetic, ethnic, ethnic, religious, familial or political information, is considered to be personal data and, by default, Confidential Information.

B- Runes of Mystery is obliged to make maximum efforts and fulfill its legal obligations regarding the protection of personal data protected by the Turkish Constitution, Turkish Criminal Code No. 5237, Turkish Civil Code No. 4721, Turkish Civil Code No. 4721, Law No. 6698 on the Protection of Personal Data and primary and / or secondary legislation in force but not mentioned by name.

It is hereby acknowledged, declared and undertaken by the parties to these agreements that it is a legal obligation to share this information in the event that such information is requested by the competent institutions, organizations and judicial authorities, therefore, it is a legal requirement to share this information and Runes of Mystery cannot be held responsible for any damages that may arise for this reason.

C- Provided that the necessary disclosure obligation under the Law is fulfilled against the Data Subjects to whom the Personal Data transferred to Runes of Magic and the legal rights are reserved, the responsibility for the data transfer belongs to Runes of Mystery.

However, personal data of users can be transferred to administrative and official authorities that are legally required to be transferred, third parties from whom services are received to carry out activities, institutions, organizations, and cooperatives that are cooperating, program partner institutions, organizations, domestic/foreign organizations with whom cooperation is made, domestic/foreign/international organizations with whom service/support/consultancy is received or with whom projects/programs are partnered, third parties from whom support is received in areas such as security, call centers, subcontractors, legal entities such as organizations from which independent audit and support services are received, and third parties with whom cooperation is established to ensure the legal and commercial security of cooperating third parties and/or to ensure the security of electronic and physical environments, due to legal obligations and within the framework of legal limitations.

Runes of Mystery, kisisel verileri, gerekli güvenlik önlemlerini almak kaydiyla Türkiye içinde veya yurtdisinda bulunan disinda bulunan depolama, arsivleme, bilisim teknolojileri destegi alinan sunucular, hosting sirketleri, program, bulut vb diger elektronik ortamlara aktarabilir isleyebilir ve saklayabilecektir. Kullanici tüm bu is ve islemlere açik riza göstermistir. Bu kapsamda yapilacak olan islemler sebebi ile Runes of Mystery’un sorumluluguna gidilemez.

17- The user accepts, declares and undertakes that he/she has read and understood all the articles of the contract and clarifying text on the protection and processing of personal data separately when he/she becomes a member of the site and that he/she approves all the content and all provisions of the contract.

18- Runes of Mystery reserves the right to make changes to this disclosure statement due to changes in the Law on the Protection of Personal Data and the methods to be determined by the Personal Data Protection Board

In order to use your rights mentioned above, you can send your request containing the necessary information identifying your identity and your explanations regarding the right you request to use from the rights specified in Article 11 of the KVK Law; via notary public or other methods specified in the KVK Law or you can send the relevant form to [email protected].