Protection of Personal Data

T.R. ISTANBUL AREL UNIVERSITY

Information and Explicit Consent Text Regarding the Protection and Processing of Personal Data

As T.R. Istanbul Arel University (“University”), within the scope of KVKK No. 6698, we take the highest level of security measures possible in order to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy.

Our aim is to inform you in the most transparent way about the way your personal data is collected, the purposes of processing, their transfer, legal reasons and your rights, in accordance with Article 10 of the “Personal Data Protection Law” No. 6698 and in line with your satisfaction.

In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data will be collected and processed by Istanbul Arel University (“University”) as the data controller, within the scope explained below.

1) Purpose for why Personal Data will be Processed

Your collected personal data is carried out by the relevant units to enable you to benefit from the services of our university, to promote our university and its activities, to enable relevant people to benefit from the products and services offered by the university,

Meeting the Higher Education Law, relevant secondary regulations and other obligations regarding educational activities and supervision imposed by the Higher Education Council (YÖK), continuing education-training, scientific research, publication and consultancy activities, establishing rights arising from educational activities within the scope of higher education legislation and University internal regulations. , production and printing of ID cards and carrying out various academic and administrative procedures,

To make listings, reporting, verification, analysis and evaluations, to produce statistical and scientific information, to analyze your use of our website, mobile applications and other communication channels and to make customizations for you,

Ensuring that the rights and obligations of students studying in relevant departments and doing internships in units within the university or in organizations outside the university are protected and fulfilled,

Using your data to fulfill legal obligations, requirements or requests of judicial bodies or authorized administrative organizations, including protecting the life and property safety of university students/employees/visitors or complying with the rules regarding those specified in this article. Transferring the data to computing infrastructures and cloud computing systems in order to achieve the purposes mentioned here, by taking the necessary security and legal precautions, and archiving it in electronic or physical environments in order to fulfill legal obligations,

If you are a member of one of the University Student Clubs, your personal data will be shared with the associations, foundations, non-governmental organizations with which the club is affiliated, as well as with legally authorized public institutions and private individuals if processing is necessary for the purpose of keeping the records stipulated by the law by the University,

Your collected personal data may be used to research and develop our services and your personal choice opportunities regarding them, to contact you directly through the communication channels you have shared with us for market research purposes, to ensure and continue your registration to the University, to carry out and develop the University’s business and academic processes and to use these services within the scope of educational activities,

In line with the purpose of carrying out the university’s Human Resources policies, in accordance with the university’s Human Resources policies; carrying out operations, supplying personnel suitable for open positions, fulfilling obligations and taking necessary measures within the framework of the Labor Law, Social Security Law and legislation regulating business life, as well as occupational health and safety,

Within the framework of contracts made or activities carried out with third natural or legal persons who have a business relationship with the University; In order to fulfill legal and commercial obligations, fulfillment of obligations arising from contracts made by the University with business partners/customers/suppliers (authorized or employees), establishment of rights, protection of rights, commercial and legal evaluation processes, legal and commercial risk analyses, legal compliance process, financial execution of business,

Financial operations, communication, market research and social responsibility activities carried out by the university, purchasing operations (request, offer, evaluation, order, budgeting, contract), determination of university commercial and business strategies in line with the purpose of determining and implementing the university’s commercial and business strategies and its implementation, intra-university system and application management operations, management of legal operations,

2) To whom and for what purpose the processed personal data can be transferred

Your personal data collected is to continue the educational activities at the university, to ensure the legal and commercial security of our University and the people who have business relations with our University, to ensure the physical security and control of the University facilities and buildings in internal and external locations, to carry out legal compliance processes, to carry out financial and financial affairs, to ensure commercial and for the purposes of determining and fulfilling business strategies; to its business partners, to legally authorized public institutions such as the Higher Education Institution, SGK, authorities such as ministries, judicial authorities, to the consultants, institutions, parties, contracted organizations, payment systems organizations with which it cooperates, where permitted by the legislation.

3) Method and Legal Reason for Collecting Personal Data

Your personal data is collected through written/digital applications made to websites, social media, call center, printed form, scanning of criminal records, SSI records, PTT, your navigation movements on the website, channels through which our University communicates with you or may contact you in the future, and is stored for the legal period.

Your personal data collected through these methods may be processed and transferred for the purposes specified in articles (b) and (c) of this Information within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

4) Personal Data Owner’s Rights Listed in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights to our University using the methods set out below, our University will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, our University will charge the fee at the tariff determined by the Personal Data Protection Board. In this context, personal data owners;

Learning whether personal data is processed or not,

Requesting information if personal data has been processed,

Learning the purpose of processing personal data and whether they are used for their intended purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case personal data has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,

Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,

Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,

In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.

In accordance with the 1st paragraph of Article 13 of Law No. 6698, you can submit your request to exercise your above-mentioned rights to our University in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our University in writing, in accordance with Law No. 6698. In this context, the channels and procedures through which you can submit your application in writing within the scope of Article 11 of our University’s Law No. 6698 are explained below:

5) Situations in which the Personal Data Protection Law does not apply

The following legal provisions, to which the provisions of KVKK will not apply, are reserved:

Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that they are not given to third parties and obligations regarding data security are complied with.

Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.

Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defence, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.

Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defence, national security, public safety, public order or economic security.

Processing of personal data by judicial authorities or enforcement authorities regarding investigation, prosecution, trial or enforcement proceedings.

6) The following cases where the data controller’s obligation to inform will not apply are reserved:

Provided that it is in accordance with and proportionate to the purpose and basic principles of KVKK;

Article 16, which regulates the obligation to register in the Data Controllers Registry, does not apply in the following cases:

1. Processing of personal data is necessary for the prevention of crime or criminal investigation.
2. Processing of personal data made public by the relevant person,
3. Processing of personal data is necessary for the execution of auditing or regulatory duties and disciplinary investigation or prosecution by public institutions and organizations and professional organizations that are public institutions, based on the authority granted by the law,
4. Personal data processing is necessary to protect the economic and financial interests of the State regarding budget, tax and financial matters.

You can get more information about KVKK at www.kvkk.gov.tr.

Commercial Communication and Commercial Electronic Message Approval Form for Arel University Student Candidates

With the approval of this form, you will be sent to http://arel.edu.tr by AREL UNIVERSITY or through an intermediary firm within the scope of the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages published in the Official Gazette No. 29417 dated July 15, 2015. All kinds of commercial electronic messages containing data, audio and video sent for commercial purposes, using means such as telephone, call centers, fax, automatic dialing machines, smart voice recorder systems, e-mail, short message service, regarding the products offered on the website. You agree to send all promotional, campaign and informational messages. You can easily and free of charge leave the mailing list of messages sent by AREL UNIVERSITY using the method specified in this regard.