Personal Data Protection Policy

Definitions

Personal Data: Any statement—regardless of its source or form—that would lead to identifying an individual specifically, or make them identifiable, directly or indirectly, when combined with other data.

Sensitive Data: Any personal data that includes racial or ethnic origin, religious, intellectual, or political belief, or indicates membership in trade unions or associations. It also includes criminal and security data, biometric data that identifies a person, genetic data, health data, and data indicating that an individual is unknown of parentage.

Data Subject: The natural individual who is the subject of the personal data processed by the Center or on whose behalf it is processed.

Personal Data Processing: Any operation performed on personal data by any manual or automated means, including collection, recording, retention, organization, structuring, adaptation, alteration, retrieval, consultation, use, disclosure, alignment, or combination with other data.

Explicit Consent: Consent granted explicitly by the Data Subject in writing, electronically, or verbally through an affirmative action, such as signing a contract or agreeing to terms and conditions.

Personal Data Breach: Any disclosure of personal data, obtaining it, or enabling access to it without authorization or legal basis, whether intentional or unintentional.

The Center: The National Center for Non-Profit Sector Development.

First Responsible Person at the Center: The Chief Executive Officer or their authorized delegate.
Controlling Entity: Any entity affiliated with the Center that processes personal data.

Purpose

The purpose of the Personal Data Protection Policy is to maintain the confidentiality of personal information to ensure the protection of beneficiaries' rights and to regulate the process of collecting, processing, sharing, and maintaining personal data. It also aims to maintain national digital sovereignty, comply with national policies for data governance, and adhere to essential laws and regulations for protecting individuals' rights and privacy regarding their personal data, subject to the Personal Data Protection Law and relevant regulations.

This policy aims to ensure compliance with data management, governance, legal, and regulatory requirements.