As Kural Law Firm, we provide services regarding compliance, entering VERBIS and fulfilling all other obligations within the scope of GDPR (General Data Protection Regulation). In the GDPR compliance process, we support companies and professional chambers with all its elements while establishing the management system. All institutions and organizations, real and legal persons and professional chambers (except for some exceptions) are now obliged to register with VERBIS without seeking any additional criteria.
Following the correspondence between the Personal Data Protection Authority and the institution and the possible controversial legal processes, providing periodic trainings for current legislation and practice for authorized and authorized personnel in the institution, Contract and Documentation arrangements (Revision of personnel contracts and Personal files, Preparation of additional protocols), Web Global Innovation, which is a necessity of the New Age such as the examination of the website and its mobile application, if any, determining the Cookie policy, in the digitalized world from the legal side, in accordance with our laws, and at the same time, criminal and administrative penalties in areas such as E-Commerce Law, Blockchain and Information Law. We conduct audits in accordance with the GDPR, analyze the maturity of the established KVK Management System and compliance with the KVK Law and report deficiencies to companies and professional chambers.
Apart from the VERBIS registration obligation, the following penalties are imposed on the data controllers who do not make the necessary arrangements within the scope of the GDPR at any time upon complaint or as a result of the ex officio inspection of the Personal Data Protection Authority:
Failure to fulfill the lighting obligation: TL 9.103 -180.264 TL;
Violation of data security: 27.040-TL – 1.802.636 TL;
Failure to fulfill the Board’s decisions: 45.066-TL – 1.802.636 TL,
Unlawful Recording of Personal Data: 1 to 3 years of imprisonment – TCK 135.Md
Giving Personal Given to Someone Unlawfully, Spread Seizure: 2 to 4 years of imprisonment – TCK 136 Art.
Not Destroying Data: From 1 year to 2 years – TCK 138 Art.
