This Privacy Notice has been prepared by the İLA Association, acting as the data controller, to inform data subjects regarding the processing of personal data in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”). This notice is provided for informational purposes only and does not constitute a contract.
1. Data Controller
Under the KVKK, your personal data is processed by us as the data controller:
ILA Association
Address: Namık Kemal Neighborhood, Sütçü İmam Street, No. 92, Ümraniye / Istanbul
Email: yardim@iladernegi.org.tr
Phone: +90 216 606 45 63
is processed by.
The ILA Association is a non-governmental organization operating under the Fundraising Law No. 2860.
2. Personal Data Processed
The following categories of personal data may be processed by the ILA Association:
- Personal Information: First Name, Last Name
- Contact Information: Phone number, email address, (optional upon request for a receipt) mailing address
- Membership Information: Membership registration and status information
- Transaction Security Information: IP address, website login and logout records, browser information
- Donation and Financial Transaction Information: Donation amount, transaction date, payment reference information
- Marketing / Analytics Information: Visitor behavior data collected via cookies and Google Analytics
- Request and Complaint Information: The content of requests and complaints submitted via contact forms or email
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Conducting the association's activities
- Implementation of membership registration and management processes
- Conducting, monitoring, and issuing receipts for donation processes under the Fundraising Law No. 2860
- Sending transactional emails to donors, such as donation details, receipts, and thank-you notes
- Planning events and activities
- Reaching out to donors and members
- Ensuring website security and conducting statistical analyses
- Compliance with legal obligations (Law on Associations, Law on Fundraising, tax legislation, etc.)
4. Method of Collecting Personal Data and Legal Basis
Your personal data is collected through the following channels:
- Website membership and donation forms
- Paynkolay payment infrastructure
- Bank transfer/EFT transactions
- Email and other communication channels
- Paper application and donation forms
- Through automated means via website cookies and Google Analytics
Your personal data is processed based on one or more of the following legal grounds specified in Article 5 of the Personal Data Protection Law:
- Required for the formation or performance of a contract: the completion of the donation process, the issuance of a receipt, and the membership agreement process.
- Explicitly provided for by law: Record-keeping and reporting obligations under the Associations Law, the Fundraising Law No. 2860, and the Tax Procedure Law.
- Compliance with legal obligations: Notifications to regulatory authorities and audit processes.
- The data controller’s legitimate interests: Ensuring website security, preventing fraud.
- Explicit consent: In cases where none of the above legal grounds apply; specifically regarding analytical cookies used for marketing purposes and the transfer of data abroad. A separate Explicit Consent Statement has been prepared for situations requiring explicit consent, and a separate declaration is requested from the data subject.
5. Transfer of Personal Data
Your personal data may be transferred to the following parties in accordance with the Personal Data Protection Law (KVKK):
- Authorized public institutions and organizations (Ministry of the Interior, Directorate of Civil Society Relations, Ministry of Finance, courts, etc.)
- Banks and payment service providers (Paynkolay)
- Website hosting service provider (Hostinger)
- Analytics and statistics service providers (Google Analytics — Google LLC)
5.1. Transfer to Countries Outside the EU
Pursuant to Article 9 of the Personal Data Protection Law (KVKK), the transfer of personal data abroad may be carried out under the scope of an adequacy decision, appropriate safeguards, or exceptional circumstances. The following cross-border transfers may take place within the ILA Association:
- Hostinger (France): As part of its website hosting service, data is processed on servers located in France.
- Google LLC (U.S.): As part of the Google Analytics service, cookies and analytical data are processed on servers located outside the country, primarily in the United States.
We obtain the explicit consent of the relevant individual for these transfers, and such consent is requested via a separate text and a separate consent mechanism. You have the right to withdraw your explicit consent at any time.
6. Retention Period for Personal Data
Your personal data is retained for the periods specified in applicable legislation or for as long as necessary to fulfill the purposes of processing. Specifically:
- Records of donations and financial transactions must be retained for at least 10 years in accordance with the Tax Procedure Code and the Associations Law
- Membership records are retained throughout the membership period and for the duration of the applicable legal retention periods following its termination
- Communication and request records will be retained for a reasonable period following the completion of the process
- Cookie and analytics data will be retained for the periods specified in the relevant cookie policy
Data whose retention period has expired is deleted, destroyed, or anonymized in accordance with the Personal Data Protection Law (KVKK).
7. Your Rights Under the KVKK
Under Article 11 of the KVKK, you have the following rights:
- Find out whether your personal data is being processed
- Request information regarding this, if applicable
- To find out the purpose of the processing and whether it is being used in accordance with that purpose
- Knowing the third parties to whom data is transferred, whether domestically or internationally
- If it is incomplete or has been processed incorrectly, please request a correction
- Requesting deletion or destruction
- Request that third parties to whom your data has been transferred be notified of any corrections, deletions, or erasures
- Objecting to a result that is unfavorable to you following an analysis conducted by automated systems
- Claiming compensation if you suffer damages due to an unlawful act
8. Application Method
You can submit your requests under the KVKK through the following contact channels:
Email: yardim@iladernegi.org.tr
Address: Namık Kemal Neighborhood, Sütçü İmam Street, No. 92, Ümraniye / Istanbul
Your requests will be processed within 30 days in accordance with the Personal Data Protection Law.
9. Updates
This Privacy Notice may be updated as necessary. The current version is published on our website.
Last updated: April 29, 2026
