Personal Data Protection

CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

Istanbul Ticaret University (“University”) pays utmost attention to protecting individuals’ personal data in any and all processes it is involved in. With this awareness, the personal data of every individual who has established a communication/relationship with the University is processed and protected in accordance with the Personal Data Protection Law No. 6698 (“Law”). As the “Data Controller”, the University processes and maintains the personal data of the relevant persons in full compliance with the Law, as stipulated by the Law and explained below.

1)     The Identity of the Data Controller

As explained below, Istanbul Ticaret University processes personal data in accordance with the Law through its administrative and academic units in order to carry out its activities. The legal entity of Istanbul Ticaret University is responsible for all personal data processed by the academic and administrative units of our University.

2)    The Purpose of Processing Personal Data

Istanbul Ticaret University, which operates under the Higher Education Law No. 2547, processes personal data in order to continue its activities in the best possible way, in accordance with the legislation, the nature of the business, customs and traditions. The administrative and academic units of the University process the personal data of students, administrative and academic staff and visitors in accordance with Articles 5 and 6 of the Law in order to sustain the activities of the University, particularly educational activities, sports and cultural activities, to supervise these activities, to collect information that must be obtained per law and to use this information in accordance with these activities.

The primary purpose of processing personal data is to ensure that the relevant persons can make the best use of the services offered by the University, to determine and implement the University’s strategies and targets, to implement the University’s human resources policies and, ultimately, to ensure that the rights of individuals affiliated with the University are protected in accordance with the law.

3)    Transfer of Personal Data

The personal data collected may be transferred to the University’s business partners, affiliates, legally authorized public institutions, private individuals and other persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, in order for the relevant persons to benefit from the services offered by the University in the best way possible, to determine and implement the University’s strategies and objectives, to carry out the University’s human resources policies and, ultimately, to protect the rights of individuals affiliated with the University in accordance with the law.

4)    The Method and Legal Reason for Collecting Personal Data

The personal data is obtained in any and all kinds of verbal, written or electronic media, in line with the above-mentioned purposes and principles in a lawful manner, in order to provide university services and to ensure that the University can properly fulfill its obligations arising from contracts, laws and customs. Personal data collected for this legal reason and lawful purpose can also be processed and transferred for the purposes specified in Articles 1 and 2 of this Clarification Text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

5)    Rights of the Personal Data Owner listed in Article 11 of the Law

Per to the relevant provision of the Law, everyone has the right to contact the data controller and to:

Kanunun ilgili hükmüne göre herkes, veri sorumlusuna başvurarak kendisiyle ilgili;

1. find out whether his/her personal data is/has been processed,
2. request information about his/her personal data, if it has been processed,
3. learn the purpose of processing of personal data, if it has been processed, and whether their personal data is/has been used in accordance with this purpose,

ç) learn about the third parties to whom their personal data were transferred domestically or abroad, if their personal data has been processed,

1. request that their personal data be corrected, if their personal data has been processed incompletely or incorrectly,
2. request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7, if his/her personal data has been processed,
3. request that the processing made in accordance with paragraphs (d) and (e) be notified to third parties to whom the personal data has been transferred, if his/her personal data has been processed,
4. object to the emergence of an outcome that is to his/her detriment as a result of the analysis of the processed data exclusively through automatic systems, if his/her personal data has been processed, and

ğ) request compensation for the damage if his/her personal data has been processed and he/she has suffered damage due to the unlawful processing of his/her personal data.

In the event that a personal data owner submits a request regarding his/her rights to the University through the following methods prescribed by law, the University will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request, according to Article 13 of the Law. However, if the fulfillment of the request requires an additional cost, a fee in the tariff determined by the Personal Data Protection Board may be charged for the fulfillment of the request.

The personal data owner will be able to submit his/her relevant requests regulated in the Law and indicated in this Clarification Text to our University in writing or by other methods determined by the Personal Data Protection Board.

In order to exercise the above-mentioned rights, the relevant personal data owner may submit his/her written and signed request, including the necessary information identifying his/her identity and explanations regarding the right he/she wishes to exercise among the rights specified in Article 11 of the Law, to “İstanbul Ticaret Üniversitesi, Örnektepe Mahallesi, İmrahor Caddesi No:88/2 Beyoğlu/ İstanbul”, in person, with documents identifying his/her identity, or send it through a notary public or through other methods specified in the Law.