fbpx

Protection of Personal Data

UNIVERSITY

ABOUT UNIVERSITY

ISTANBUL AREL UNIVERSITY

PERSONAL DATA PROTECTION DISCLOSURE TEXT

Istanbul Arel University (Arel or the University) attaches great sensitivity and importance to the protection of your personal data. With this awareness, we process all kinds of personal data belonging to individuals associated with Arel in accordance with the Personal Data Protection Law No. 6698 (KVKK).

 

As the “Data Controller” defined in the KVKK, Arel carefully and diligently processes your personal data within the purposes and methods explained below, within the limits set by the legislation, and in compliance with destruction requirements and timeframes.

 

Definitions

Under this Personal Data Protection Disclosure Text, the following terms shall have the following meanings:

  • Personal Data: Any data relating to an identified or identifiable natural person (such as name, surname, Turkish ID number, address, phone number, system login/logout times, location, resumes, place of birth, date of birth, email address, image recordings, and all other similar data).
  • Special Categories of Personal Data: Data that, if learned, may lead to discrimination or victimization of the individual, and must be protected much more strictly than other personal data (such as race, ethnic origin, political opinion, religious belief, sect, clothing, union membership, health, biometric data, and all other similar data).
  • Processing of Personal Data: Any operation performed on personal data, whether by automatic means or non-automatic means provided that it is part of any data recording system, including obtaining, recording, storing, modifying, sharing with third parties, and transferring abroad.
  • KVKK: Personal Data Protection Law No. 6698, which was published in the Official Gazette on April 7, 2016.
  • Communiqué: The Communiqué on Procedures and Principles for Fulfilling the Obligation to Inform, published in the Official Gazette on March 10, 2018, and numbered 30356.
  • Authority: Personal Data Protection Authority.
  • Data Processor: A natural or legal person who processes personal data on behalf of the Data Controller based on the authority granted by the Data Controller.
  • Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
  • Data Subject: The natural person whose personal data is processed.
  • Contact Person: The person who ensures communication with the Authority and interaction with Data Subjects.
  • Arel or University: Istanbul Arel University.

 

Data Controller and Contact Person

Data Controller: Istanbul Arel University
Address: Türkoba Mah. Erguvan Sok. No:26/K 34537 Tepekent Büyükçekmece-İstanbul
Contact Person:

 

Collection, Collection Method, and Processing of Personal Data

The personal data of our students, student guardians, employees, job applicants, lecturers, faculty members, officials, suppliers, business partners, employees of companies and institutions we collaborate or have a relationship with, visitors, and other third parties in our possession may be collected and processed by our University through its relevant departments, communication forms, telephone calls, electronic applications, software, various agreements, emails, social media, and similar means, whether orally, in writing, or electronically, in accordance with the Turkish Constitution, international agreements to which our country is a party, KVKK, and relevant regulations.

Therefore, we would like to inform you regarding the Processing of Personal Data as a Data Controller under KVKK.

In accordance with Article 4 of KVKK, your personal data shall be:

  1. Processed in accordance with the law and principles of honesty,
  2. Processed accurately and kept up to date when necessary,
  3. Processed for specific, explicit, and legitimate purposes,
  4. Processed in a manner that is relevant, limited, and proportionate to the purpose for which they are processed,
  5. Retained for the period required by the relevant legislation or necessary for the purpose for which they are processed.

 

Purpose of Processing Personal Data

Your collected personal data will be processed in accordance with Articles 5 and 6 of KVKK and the Communiqué within the following purposes:

  1. Ensuring the continuation of activities carried out by our University,
  2. Establishing communication and relationships with our students, student guardians, suppliers, business partners, employees of companies and institutions we collaborate or have a relationship with, visitors, and other third parties,
  3. Ensuring communication and relationships with our employees, job applicants, lecturers, faculty members, officials, and managers,
  4. Ensuring the continuation of collection, purchasing, and financial/accounting processes,
  5. Ensuring physical security and supervision of our University’s campuses and other locations,
  6. Managing evaluation, complaint management, legal compliance, internal audit, analysis, and other processes,
  7. Providing health and counseling services for our students and employees,
  8. Ensuring the safe execution of logistics activities,
  9. Conducting national and international projects and growth efforts in compliance with the law,
  10. Managing financial processes within the University’s internal operations,
  11. Managing human resources processes within the University’s internal operations,
  12. Ensuring the proper continuation of work life within the campus,
  13. Continuing mandatory and voluntary work within the scope of Information Technologies,
  14. Ensuring the legal and commercial security of the University and the individuals and entities in business relations with the University.

 

Transfer of Personal Data

Your personal data may be transferred within the framework of the purposes specified above and in compliance with KVKK and applicable legislation to, but not limited to, our lecturers, faculty members, shareholders, senior management, business partners, suppliers, business connections, employees, service providers, or to regulatory and supervisory institutions and official authorities as required by legislation, whether domestically or abroad.

 

Storage and Deletion of Data

The University stores personal data for the periods specified in relevant legislation or, where no such period is specified, for the duration necessary for the services provided by the University. After these periods expire, personal data is deleted, destroyed, or anonymized by methods defined in University procedures and policies.

 

Your Rights as a Data Subject

Under Article 11 of KVKK, you have the following rights:

  1. To learn whether your personal data is processed,
  2. To request information if your personal data has been processed,
  3. To learn the purpose of processing and whether they are used for their intended purpose,
  4. To know the third parties to whom personal data is transferred within the country or abroad,
  5. To request correction if personal data is processed incompletely or incorrectly,
  6. To request the deletion or destruction of personal data in accordance with KVKK and other regulations,
  7. To request that the third parties to whom personal data has been transferred be informed of these requests,
  8. To object to any negative consequences arising from the exclusive processing of personal data through automated systems,
  9. To demand compensation for damages in case of unlawful processing of personal data.

For exercising your rights and submitting requests, please follow the procedures stated in this text. Istanbul Arel University reserves the right to update this text in accordance with legal and administrative requirements.