General Data Protection Regulation
GDPR · The European Union regulation on the processing of personal data, which can also apply to organisations outside the EU that offer goods or services to people in the EU.
- 01
Why it matters
A company in Turkey can fall under the GDPR if it sells to customers in the EU or tracks their behaviour on its site. The regulation sets detailed obligations on legal basis, transparency, data security, breach notification and people's rights. For serious violations, fines can reach four percent of global turnover.
- 02
Example
A Turkish shop selling to Germany prepares a privacy notice in German, runs analytics cookies only with consent, signs data processing agreements with its shipping and payment providers and sets up a process for answering customers' deletion requests.
- 03
Common mistake
Assuming that complying with KVKK also means complying with the GDPR. The two are similar but differ on matters such as legal bases, international transfers and notification rules.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.