Cross-Border Data Transfer Compliance – Documentation Request

To Whom It May Concern,

As part of our compliance efforts under the Turkish Personal Data Protection Law (KVKK), we are currently reviewing our vendor agreements involving cross-border data transfers.

The services provided by your company result with personal data being transferred abroad. Turkish Law on Protection of Personal Data and especially the amended in Article 9 of the Law No. 6698 titled “Transfer of personal data abroad”, requires data controllers to undersign standard contact in compliance with Turkish Law on Protection of Personal Data.

We are aware many foreign data processors such as Windows, Google etc. are already undersigning such standard contracts with Turkish companies. If you have a draft that you submit in your regular processes, we kindly ask for your relevant draft or guidance on the matter.

Warm regards,