INFORMATION NOTICE UNDER LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA
The protection and security of your personal data is our priority. In accordance with the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as “KVKK”) and other relevant legislation, this Information Notice has been prepared by us in our capacity as the Data Controller.
Within the scope of Article 10 of the KVKK titled “Obligation of the Data Controller to Inform,” we would like to inform our valued customers about which personal data are processed, for what purpose and on what legal basis they are processed, to whom and for what purpose the processed personal data may be transferred, how your personal data are collected, and about your rights listed under Article 11 of the KVKK and how you can exercise these rights.
Definitions
“Personal data” means any information relating to an identified or identifiable natural person (including information contained in the contract).
“Special categories of personal data” mean data relating to a person’s (employee’s) race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
“Processing of personal data” means any operation performed on personal data, whether fully or partially by automatic means or otherwise, provided that it is part of any data recording system, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use.
“Data processor” means any natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the controller.
Data Controller and Scope of Processed Data
In accordance with the KVKK, as the Data Controller, we process your identity and address information, fixed and mobile phone numbers, and all other personal data that you have submitted, provided, or delivered to our company through the private transfer agreement, in accordance with the conditions stated in Articles 5 and 6 of the Law and all other relevant legal provisions.
Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
-
To fulfill and improve the company’s duties, powers, obligations, services, and activities in accordance with the law,
-
To determine, plan, and implement company policies,
-
To ensure the data security of our customers, business partners, and other legal entities with which we maintain commercial relationships,
-
To provide the necessary information to public authorities and judicial bodies upon lawful request,
-
To ensure the fulfillment of legal obligations required or mandated by applicable laws and regulations,
-
To ensure the security of our company’s operations and practices by taking all necessary technical and administrative measures,
-
To create and monitor visitor and customer records,
-
To fulfill obligations arising from the Condominium Ownership Law No. 634, the Turkish Code of Obligations No. 6098, secondary legislation related to these laws, tax laws, and requirements imposed by competent public authorities.
Your personal data may be stored, used, updated, shared, transferred, and otherwise processed for these purposes, in accordance with the principles of legality, fairness, and proportionality.
Transfer of Personal Data
Your personal data protected under the Law may, in compliance with the basic principles prescribed by the Law and the conditions and purposes specified in Articles 8 and 9, be shared with the following parties:
-
Service providers and business partners providing infrastructure and software support,
-
Official authorities and regulatory institutions,
-
Third-party consultants including lawyers, tax advisors, and auditors,
-
Business partners, suppliers, shareholders, and branches of our company,
provided that data security is ensured through confidentiality agreements containing data transfer provisions, and only with data controllers located in foreign countries that ensure adequate protection or undertake to provide such protection.
Method and Legal Basis of Data Collection
Your personal data are processed on the legal basis of “being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” under Article 5 of the Law, and for the purposes stated above, through:
-
Telephone communication,
-
Camera systems,
-
Computers,
-
Fixed and mobile lines,
-
Automated, manual, or written methods.
Rights of the Data Subject under Article 11 of the KVKK
Under Article 11 of the KVKK, you have the right to:
-
Learn whether your personal data are processed,
-
Request information if your personal data have been processed,
-
Learn the purpose of processing and whether they are used in accordance with that purpose,
-
Know the third parties to whom your personal data are transferred domestically or abroad,
-
Request correction of your personal data if they are incomplete or inaccurate,
-
Request deletion or destruction of your personal data and notification of these operations to third parties,
-
Object to any outcome that may arise against you as a result of the analysis of your data exclusively through automated systems,
-
Request compensation for any damages incurred due to unlawful processing of personal data.
Application Procedure
Your requests regarding these rights will be evaluated and finalized as soon as possible and within 30 (thirty) days at the latest, free of charge by Studyzone International Education Limited Company, depending on the nature of your request. However, if the process incurs a cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
You may submit your requests in writing regarding your rights specified in Article 11 of the Law, in accordance with Article 13(1) of the Law, via notary public, registered mail with return receipt, or e-mail to our company’s official address.
Right to Make Changes
Due to possible amendments in the Law and other relevant regulations or decisions of the Personal Data Protection Board, our company reserves the right to amend the application principles and the provisions of this Information Notice and consent text.