Data Controllers’ Registry Information System (“VERBIS”) refers to the information system managed by the Turkish Personal Data Protection Authority, accessible over the internet, that data controllers will use in their application to the Data Controllers Registry and in other related transactions.

Organizations based outside of Türkiye that collect or process personal data of Turkish citizens and/or Turkish and non-Turkish residents in Türkiye must appoint a local data controller representative through that Registry Information System.

The representative must be a Turkish citizen or a Turkish entity. The Turkish Personal Data Protection Authority requires data controllers to notify the Turkish Personal Data Protection Authority of their data processing activities. The representative must apply through the VERBIS. The VERBIS Regulation, which is Turkish Personal Data Protection Law's secondary legislation, only provides for the appointment of a data controller representative who will communicate with the Authority and data subjects.

It needs to be noted that the selection of a representative for social media firms that offer services in Türkiye is subject to similar regulations.

As Sistem Global Consulting Company, we can undertake the representation of data controllers on behalf of companies located abroad. The Data Controller Representative, who will be appointed through our representative service, will assist you in complying with the legislation and implementing the following requirements for you. Within this context, we will: Become the point of contact for the processing of personal data for Turkish nationals and residents in Türkiye, carry out the VERBIS registration, and act as your representative with the Turkish Personal Data Protection Authority.

Data Controller Registry Notification

Before processing personal data from Türkiye, the The Turkish Personal Data Protection Law (Law No. 6698, “Law”) states that all natural persons and legal entities must register with the Data Controller Registry Information System (VERBIS). The registration procedure is free of charge and is performed through an online system.

What Information Should Be Provided During the Application to the Registry?

The following information must be submitted by the data controllers during the registration application; Identity and address information of the data controller and the representative of the data controller, the information in the application form, determined by the Board, the purpose for which personal data will be processed, the explanations about the data subject group and groups and the data categories of these persons, the recipient or recipient groups to whom personal data can be transferred, the personal data which are envisaged to transferred abroad, measures taken concerning the security of personal data as referred in Article 12 of the Law and in accordance with the criteria determined by the Board, maximum storage period of personal data laid down by the legislation or for the purposes for which personal data are processed.

In addition to that in case of any change in the Registry records, data controllers shall notify the Authority through VERBIS within seven days of the date of the change.

What are Our Services about the Registry?

As Sistem Global Consultancy, we are providing consultancy services for determining and reporting the obligations of data controllers residing abroad within the scope of Personal Data Protection Law No. 6698, preparing the necessary information and documents to fulfill these obligations, registering VERBIS. In additionwe support foreign data controllers while conducting correspondence with the Personal Data Protection Authority, answering the applications to be made by the data subjects and other legal processes. We carry out our services with a focus on transparency with the knowledge and approval of data controllers residing abroad for whom we are the representative.