{"id":3024,"date":"2020-06-26T15:31:15","date_gmt":"2020-06-26T12:31:15","guid":{"rendered":"https:\/\/harveyarasan.com\/veri-isleyen-olarak-musterinize-karsi-sorumluluklariniz-neler\/"},"modified":"2023-09-07T12:38:12","modified_gmt":"2023-09-07T09:38:12","slug":"your-responsabilities-to-your-customers-as-a-data-processor","status":"publish","type":"post","link":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/","title":{"rendered":"Your  responsibilities  to your customers as a data processor"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Turkish Data Protection Law defines a data controller as \u201c<em>the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system<\/em>\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to the guidelines that the Turkish Data Protection Board has published on its website, \u201c<em>data processors are natural or legal person authorized by a data controller under a personal data processing agreement and who processes personal data in accordance with the instructions given by such data controller<\/em>\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are still not certain what your responsibilities are in case where your customer acts as the data controller and you are the data processor, this article will help you to understand what needs to be done.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Sign a data processing agreement<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>You must sign a data processing agreement with your customer.&nbsp;<\/li><li>Scope of the data processing, categories of data to be processed, categories of data subjects, purpose and duration of the processing must be determined in the DPA.&nbsp;<\/li><li>The DPA must also include your obligations as a data processor regarding data protection and privacy.<\/li><li>You can read more about what needs to be covered by a DPA <a href=\"https:\/\/harveyarasan.com\/en\/data-processing-agreement-under-turkish-law\/\">here<\/a>.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Compliance with the instructions<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>It is very important that you must entirely comply with the instructions of the data controller while you process personal data. In order to keep track of the instructions and for purpose of establishing proof, keep records of instructions.<\/li><li>Also keep records of data processing activities you conducted for your customers.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Don\u2019t use another data processor unless the data controller approves it<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>You must obtain data controller\u2019s approval before you appoint another data processor. Such approval can be a general permission given in the data processing agreement or a specific permission for relevant data processors.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Keep the personal data safe<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>You must take adequate organizational and technical measures to ensure safety and privacy of the data you process for your customer. Inform your customer about the said safety measures and share relevant documentation with them.<\/li><li>Applications, tools, products etc. that you offer to your customers must be in compliance with the personal data protection legislation and its requirements. You must be certain that only the data which is necessary for the data processing activity is processed.<\/li><li>As soon as the user or subscription agreement that you entered in with your customer or the purpose of the data processing terminates, delete all the data or return them to your customer. Be certain that you don\u2019t keep any copies of the data.&nbsp;<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Train your employees&nbsp;<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>You must train your employees regarding data protection and data processing and make sure they are subject to confidentiality obligation.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Help your data controller customer&nbsp;<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>You must immediately inform your customer in the event of a data breach. It is your customer\u2019s responsibility to notify the Personal Data Protection Board regarding data breaches, but you must help them to duly fulfil their obligations.&nbsp;<\/li><li>If a data subject demands to use any of their rights under the Data Protection Law, you must immediately inform your customer and assist them regarding their obligations to the data subjects.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Don\u2019t do the following<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>Don\u2019t process personal data beyond the data controller\u2019s instructions.&nbsp;<\/li><li>Don\u2019t be late for notifying any data breach.&nbsp;<\/li><li>Do not use data processors who do not provide adequate safety measures for data protection.<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The Turkish Data Protection Law defines a data controller as \u201cthe natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system\u201d. According to the guidelines that the Turkish Data Protection Board has published on its website, \u201cdata processors [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3357,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2,215],"tags":[],"class_list":["post-3024","post","type-post","status-publish","format-standard","has-post-thumbnail","category-default","category-data-protection-information-security","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.8 (Yoast SEO v23.8) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Your responsibilities to your customers as a data processor -<\/title>\n<meta name=\"description\" content=\"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Your responsibilities to your customers as a data processor\" \/>\n<meta property=\"og:description\" content=\"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-26T12:31:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-07T09:38:12+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1668\" \/>\n\t<meta property=\"og:image:height\" content=\"918\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Deniz Eray Harvey\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Deniz Eray Harvey\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\",\"url\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\",\"name\":\"Your responsibilities to your customers as a data processor -\",\"isPartOf\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg\",\"datePublished\":\"2020-06-26T12:31:15+00:00\",\"dateModified\":\"2023-09-07T09:38:12+00:00\",\"author\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/fd0e79c5c38bc4bd55b0de4f8838d162\"},\"description\":\"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.\",\"breadcrumb\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage\",\"url\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg\",\"contentUrl\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg\",\"width\":1668,\"height\":918},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Ana sayfa\",\"item\":\"https:\/\/harveyarasan.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Your responsibilities to your customers as a data processor\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/harveyarasan.com\/en\/#website\",\"url\":\"https:\/\/harveyarasan.com\/en\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/harveyarasan.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/fd0e79c5c38bc4bd55b0de4f8838d162\",\"name\":\"Deniz Eray Harvey\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7a217a5e1173d8e3359830abb7bf310110a6050995337ed57d31b90e38e447a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7a217a5e1173d8e3359830abb7bf310110a6050995337ed57d31b90e38e447a6?s=96&d=mm&r=g\",\"caption\":\"Deniz Eray Harvey\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Your responsibilities to your customers as a data processor -","description":"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/","og_locale":"en_US","og_type":"article","og_title":"Your responsibilities to your customers as a data processor","og_description":"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.","og_url":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/","article_published_time":"2020-06-26T12:31:15+00:00","article_modified_time":"2023-09-07T09:38:12+00:00","og_image":[{"width":1668,"height":918,"url":"http:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg","type":"image\/jpeg"}],"author":"Deniz Eray Harvey","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Deniz Eray Harvey","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/","url":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/","name":"Your responsibilities to your customers as a data processor -","isPartOf":{"@id":"https:\/\/harveyarasan.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage"},"image":{"@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage"},"thumbnailUrl":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg","datePublished":"2020-06-26T12:31:15+00:00","dateModified":"2023-09-07T09:38:12+00:00","author":{"@id":"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/fd0e79c5c38bc4bd55b0de4f8838d162"},"description":"This article will help you to understand what your responsabilities are as a data controller under Turkish law, towards your customer.","breadcrumb":{"@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#primaryimage","url":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg","contentUrl":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg","width":1668,"height":918},{"@type":"BreadcrumbList","@id":"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Ana sayfa","item":"https:\/\/harveyarasan.com\/en\/"},{"@type":"ListItem","position":2,"name":"Your responsibilities to your customers as a data processor"}]},{"@type":"WebSite","@id":"https:\/\/harveyarasan.com\/en\/#website","url":"https:\/\/harveyarasan.com\/en\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/harveyarasan.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/fd0e79c5c38bc4bd55b0de4f8838d162","name":"Deniz Eray Harvey","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/harveyarasan.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7a217a5e1173d8e3359830abb7bf310110a6050995337ed57d31b90e38e447a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7a217a5e1173d8e3359830abb7bf310110a6050995337ed57d31b90e38e447a6?s=96&d=mm&r=g","caption":"Deniz Eray Harvey"}}]}},"featured_image_src":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-600x400.jpg","featured_image_src_square":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-600x600.jpg","author_info":{"display_name":"Deniz Eray Harvey","author_link":"https:\/\/harveyarasan.com\/en\/author\/denizpanel\/"},"_links":{"self":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/posts\/3024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/comments?post=3024"}],"version-history":[{"count":2,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/posts\/3024\/revisions"}],"predecessor-version":[{"id":3360,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/posts\/3024\/revisions\/3360"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/media\/3357"}],"wp:attachment":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/media?parent=3024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/categories?post=3024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/tags?post=3024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}