IFC VIDEO AND PHOTOGRAPHY SHOOTING APPLICATION FORM

To ensure the safety, security, and appropriate use of our premises, all individuals or organizations intending to conduct video or photography shoots on the IFC campus must complete and submit the following application form.
The application form must be submitted no later than 10 business days prior to the scheduled shoot date.
Budget approval is required for any commercial shoots at IFC.
We appreciate your interest and cooperation, and look forward to assisting you.

FIRST NAME

LAST NAME

TITLE

COMPANY NAME

COMPANY ADDRESS

PHONE NUMBER

E-MAIL ADDRESS

PURPOSE OF SHOOTING (PLEASE PROVIDE A DESCRIPTION.)

SHOOTING START DATE

SHOOTING END DATE

WHERE WILL THE FOOTAGE/IMAGES BE USED? (PLEASE SELECT ALL THAT APPLY.)

TITLE OF THE PUBLICATION OR PROGRAM WHERE THE FOOTAGE WILL BE USED

I have read and understood the Privacy Notice. View

I have read, understood and approved the Terms and Conditions. View

I consent to İFC contacting me.

I agree to receive campaigns, newsletters and promotional messages.

TWF Istanbul Financial Center
Privacy Notice Regarding Photograph and Video Recording Requests
Pursuant to Personal Data Protection Legislation

Dear Recipient,

As TVF İFM Gayrimenkul İnşaat ve Yönetim Anonim Şirketi (“IFC” or the “Company”), we inform you that within the scope of your requests for photography and video recording within the IFC premises, either through the form available on our website or directly submitted to us, the personal data obtained from you will be processed in compliance with Law No. 6698 on the Protection of Personal Data (“PDPL”). In line with the purposes detailed below, and in a manner that is relevant, limited, and proportionate to these purposes, we will ensure the accuracy and up-to-date status of your personal data while recording, storing, and preserving it. Furthermore, we may share your personal data with legally authorized institutions and transfer it to third parties and companies under the conditions stipulated by the PDPL.

1. Definitions Regarding the PDPL

For the purposes of the implementation of PDPL, the following terms shall have the meanings set forth below:

Anonymization: The process of rendering personal data impossible to associate with an identified or identifiable natural person, even by matching it with other data.
Data Subject: The natural person whose personal data is processed.
Personal Data: Any information relating to an identified or identifiable natural person.
Processing of Personal Data: Any operation performed on personal data, whether wholly or partially automated or non-automated as part of a data recording system, such as collection, recording, storage, retention, modification, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of its use.
Board: The Personal Data Protection Board.
Authority: The Personal Data Protection Authority.
Data Processor: A natural or legal person who processes personal data on behalf of the Data Controller, based on the authority granted by the Data Controller.
Data Recording System: A recording system in which personal data is structured and processed according to specific criteria.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
Sensitive Personal Data: Personal data related to an individual’s race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and attire, association, foundation or trade union membership, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data.

2. What is Personal Data?

Personal data refers to any information that identifies you or makes you identifiable. In this context, any information associated with you, including but not limited to your primary identification details such as your name, surname, Turkish Identification Number, as well as your address, phone number, and bank account details, is considered “Personal Data.” Furthermore, pursuant to Article 6 of the PDPL, data related to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data are classified as “Sensitive Personal Data.”

3. Personal Data That May Be Processed, Purpose of Processing, and Legal Grounds

In this context, IFC, in compliance with the PDPL, collects and retains the Personal Data specified below. The Personal Data processed by IFC can be detailed as follows:

Categories of Data That May Be Processed	Identity
Personal Data That May Be Processed	Name-Surname
Personal Data Processing Activity	Your personal data will be processed within the scope of our contact and contract processes.
Purposes of Processing	Ensuring Physical Space Security Managing Assignment Processes Monitoring and Conducting Legal Affairs Conducting Communication Activities Managing/Auditing Business Activities Conducting Occupational Health and Safety Activities Managing Contractual Processes Ensuring the Security of Data Controller’s Operations Conducting Administrative Activities Creating and Tracking Visitor Records
Legal Grounds for Processing	Processing is mandatory for the data controller to fulfill its legal obligations Processing is necessary for the execution or performance of a contract, provided that it is directly related to the establishment or performance of the contract

Categories of Data That May Be Processed	Contact
Personal Data That May Be Processed	Email Address, Phone Number
Personal Data Processing Activity	Your personal data will be processed within the scope of our contact and contract processes.
Purposes of Processing	Ensuring Physical Space Security Managing Assignment Processes Monitoring and Conducting Legal Affairs Conducting Communication Activities Managing/Auditing Business Activities Conducting Occupational Health and Safety Activities Managing Contractual Processes Ensuring the Security of Data Controller’s Operations Conducting Administrative Activities Creating and Tracking Visitor Records
Legal Grounds for Processing	Processing is necessary for the execution or performance of a contract, provided that it is directly related to the establishment or performance of the contract Processing is mandatory for the data controller to fulfill its legal obligations

Categories of Data That May Be Processed	Physical Space Security
Personal Data That May Be Processed	Camera Recordings
Personal Data Processing Activity	Your personal data will be processed during your visit to IFC offices and premises for the purpose of ensuring physical space security through CCTV camera recordings.
Purposes of Processing	Conducting Information Security Processes Fulfilling Employment Contract and Legal Obligations for Employees Managing Employee Benefits and Compensation Processes Conducting Training Activities Ensuring Compliance with Legal Regulations Ensuring Physical Space Security Managing Assignment Processes Monitoring and Conducting Legal Affairs Conducting Contact Activities Planning Human Resources Processes Managing/Auditing Business Activities Conducting Occupational Health and Safety Activities Managing Storage and Archiving Activities Managing Contractual Processes Ensuring the Security of the Data Controller’s Operations Managing Investment Processes Managing Talent/Career Development Activities Providing Information to Authorized Persons, Institutions, and Organizations Conducting Administrative Activities Creating and Tracking Visitor Records
Legal Grounds for Processing	Processing is mandatory for the data controller to fulfill its legal obligations Processing is essential for the establishment, exercise, or protection of a legal right

Categories of Data That May Be Processed	Other
Personal Data That May Be Processed	Request Content, Company Name, Company Address, Purpose of Recording, Recording Start and End Date
Personal Data Processing Activity	Your personal data will be processed within the scope of our contact and contract processes.
Purposes of Processing	Ensuring Physical Space Security Managing Assignment Processes Monitoring and Conducting Legal Affairs Conducting Contact Activities Managing/Auditing Business Activities Conducting Occupational Health and Safety Activities Managing Contractual Processes Ensuring the Security of the Data Controller’s Operations Conducting Administrative Activities Creating and Tracking Visitor Records
Legal Grounds for Processing	Processing is necessary for the execution or performance of a contract, provided that it is directly related to the establishment or performance of the contract Processing is mandatory for the data controller to fulfill its legal obligations

4. Personal Data Collection Methods

We collect your personal data directly from you within the scope of your visit to our premises for the purposes of maintaining entry-exit records of our buildings or facilities, ensuring security processes, and fulfilling our legal obligations. During this process, your personal data is processed through various methods, either fully or partially automated or non-automated as part of a data recording system, based on the information and documents you provide, in verbal, written, or electronic form.

5. Personal Data Security

IFC places great importance on protecting the confidentiality and security of personal data. In this regard, necessary technical and administrative security measures are implemented to safeguard personal data against unauthorized access, damage, loss, or disclosure. Accordingly, system controls, data access controls, secure data transfer controls, business continuity controls, and other necessary corporate security measures are applied. Additionally, sensitive personal data is processed in compliance with the adequate measures determined by the Authority.

6. Do We Transfer Your Personal Data to Third Parties?

(i) Your personal data may be shared in compliance with Article 8 of the PDPL and other relevant legislation under the following circumstances:

With Authorized Public Institutions and Organizations for the purposes of ensuring compliance with legal regulations, conducting finance and accounting processes, providing information to authorized persons, institutions, and organizations, and monitoring and managing legal affairs.
With Lawyers engaged by IFC through contractual agreements for the purpose of monitoring and managing legal affairs and executing contractual processes.
With Business Partners, such as audit firms, to ensure the continuity of activities carried out within the scope of IFC's business partnership plans.

Your personal data will be shared only to the extent necessary for achieving the above-mentioned purposes.

7. What Are Your Rights as a Data Subject and How Can You Submit a Request?

i. Your Rights Regarding Your Personal Data

We would like to inform you that you have the following rights concerning the personal data processed within IFC:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
To learn the identity of third parties to whom your personal data has been transferred within the country, if applicable, and which data has been transferred,
To request the correction of your personal data if it is incomplete or inaccurate,
To request that third parties to whom your personal data has been transferred be informed of any corrections, deletions, or destructions of your data,
To request the deletion or destruction of your processed personal data in the event that the reasons requiring its processing no longer exist or if your personal data has become outdated,
To object to any outcome that arises against you as a result of the exclusive analysis of your processed personal data through automated systems,
To request compensation for damages in the event that you suffer harm due to the unlawful processing of your personal data.

You may submit your requests regarding these rights through the application procedures specified below.

ii. Application

You may submit your requests regarding your personal data by completing the application form available on our website and delivering it in writing via hand delivery, postal mail, or courier to the address specified in the last section, through notary services, via secure electronic signature or mobile signature to our registered electronic mail (KEP) address, or by sending an email to kvkk@ifm.gov.tr from the email address you have previously provided to us and is registered in our system.

IFC will respond to requests as soon as possible and within a maximum of thirty (30) days free of charge, depending on the nature of the request. However, if the fulfillment of your request incurs a cost, we may charge you the fees specified in the tariff determined by the Personal Data Protection Board.

Following the evaluation of your request, IFC may either accept or reject the request by providing justification. The response will be provided in writing or electronically to the applicant. If the request is accepted, IFC is obliged to fulfill the requirements of the request immediately.

iii. Data Controller Identity Information

The term IFC used in this document refers to TVF İFM Gayrimenkul İnşaat ve Yönetim Anonim Şirketi, a company established in Türkiye, whose details are provided below. This document has been prepared for the data subjects whose personal data is processed under the responsibility of the company specified below.

TVF İFM GAYRİMENKUL İNŞAAT VE YÖNETİM ANONİM ŞİRKETİ
MERSİS NO: 0883093304800001
Adres: FİNANSKENT MAH. FİNANS CAD. NO: 46/3 İÇ KAPI NO: 1
ÜMRANİYE / İSTANBUL
KEP Adresi: tvfifm@hs01.kep.tr