Protection of Personal Data
Bezmialem Vakif University (hereinafter referred to as the University) attaches great importance to the security of your personal data and ensures the security of personal data with all units within its structure under the conditions specified below.
DATA CONTROLLER
As the Data Controller, the University processes personal data within the framework explained in this text; will be able to record, store, update, disclose/transfer to third parties were permitted by the legislation, classify and process in the ways listed in the Personal Data Protection Law (PDPL).
This Information on Protection of Personal Data explains our personal data protection and processing policy and how personal data is collected, transferred, used, and protected during the services provided by the University.
1. Personal Data Collected by the University
In accordance with PDPL Number 6698, personal data shared with the University may be obtained, recorded, stored, changed, rearranged, in whole or in part, automatically or by non-automatic means if it is part of any data recording system, in short, as the subject of all kinds of operations performed on the data. It can be processed by the university. Any operation performed on data within the scope of PDPL is considered "processing of personal data".
Scope of data collected for this purpose:
• Name surname,
• TR identity information, passport number,
• Birth place and date,
• Gender information,
• Address info,
• Phone number,
• e-mail address,
• Wage, payroll, payment, etc. financial data such as,
• Private health insurance or Social Security Institution data,
• Closed circuit camera system video recording during the time at the university,
• Vehicle license plate data if parking service is used,
• Identity information shared when using online services on university websites,
• Other data shared if reached via e-mail, call center or other channels.
2. Purposes of Processing, Storage and Protection of Personal Data
Purposes of personal data collected within the scope of the services provided by the university:
•The relevant units carry out the necessary work for you to benefit from the services of our university, to introduce our university and its activities, to enable relevant people to benefit from the products and services offered by the University,
•Meeting the Higher Education Law, relevant secondary regulations and other obligations regarding educational activities and supervision imposed by the Higher Education Council (YÖK), continuing education-training, scientific research, publication and consultancy activities, establishing rights arising from educational activities within the scope of higher education legislation and University internal regulations. identification, production and printing of ID cards and carrying out various academic and administrative procedures,
•It can be processed for the purpose of listing, reporting, verification, analysis and evaluation, producing statistical and scientific information, analyzing your use of our website, mobile applications and other communication channels and making customizations for you.
•Including protecting the life and property safety of university students/employees/visitors or complying with the rules regarding those specified in this article; Your data may be used to fulfill legal obligations, requirements or requests of judicial bodies or authorized administrative organizations. By taking the necessary security and legal precautions, data can be transferred to computing infrastructures and cloud computing systems in order to achieve the purposes mentioned here, and can be archived in electronic or physical environments to fulfill legal obligations.
•Your collected personal data; To research and develop our services and your personal choice opportunities regarding them, to contact you directly through the communication channels you have shared with us for market research purposes, to ensure and continue your registration to the University, to carry out and develop the University's business and academic processes and to benefit from these services within the scope of educational activities. as;
•In line with the purpose of carrying out University Human Resources policies; In accordance with the University's Human Resources policies; carrying out operations, supplying personnel suitable for open positions, fulfilling obligations, and taking necessary measures within the framework of the Labor Law, Social Security Law and other legislation regulating business life and occupational health and safety,
•Within the framework of contracts made or activities carried out with third natural or legal persons who have a business relationship with the University; In order to fulfill legal and commercial obligations, fulfillment of obligations arising from contracts made by the University with business partners/customers/suppliers (authorized or employees), establishment of rights, protection of rights, commercial and legal evaluation processes, legal and commercial risk analyses, legal compliance process, financial execution of work,
•In line with the purpose of determining and implementing the University's commercial and business strategies; Financial operations carried out by the University, communication, market research and social responsibility activities, purchasing operations (request, offer, evaluation, order, budgeting, contract), determination and implementation of University commercial and business strategies, intra-University system and application management operations, legal It will be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the purposes of operations management.
However, your personal data will not be used for any commercial purposes other than the activities listed above and as required by the relevant legislation.
will be kept confidential in the database and systems at our university in accordance with Article 12 of the PDPL; It will not be shared with third parties in any way except for legal obligations and regulations specified in this document. Our university is obliged to prevent the unlawful processing of personal data in the systems and databases where your personal data resides, in accordance with Article 12 of the PDPL, to prevent access by unauthorized persons, and to take software and physical security measures such as access management. If it becomes known that personal data has been obtained by others through illegal means, the situation will be reported to the Personal Data Protection Board immediately, in accordance with legal regulations and in writing.
3. Persons and Organizations to whom Personal Data Can Be Transferred
Your collected personal data; To continue the educational activities at the University, to ensure the legal and commercial security of our University and the people who have business relations with our University, to ensure the physical security and control of the University facilities and buildings in their internal and external locations, to carry out legal compliance processes, to carry out financial and financial affairs, to implement commercial and business strategies. For the purposes of determination and fulfillment; to business partners, to legally authorized public institutions such as authorities such as the Higher Education Institution, SGK, ministries, judicial authorities, to cooperating consultants, institutions, parties, contracted organizations, payment systems organizations where permitted by the legislation, to Articles 8 and 9 of Law No. 6698. Personal data may be transferred within the framework of the processing conditions and purposes specified in articles .
Your personal data collected by any of the above-mentioned methods, to be processed in Turkey or to be processed and stored outside Turkey, will be processed abroad, if it remains within the scope of PDPL and in accordance with the contractual purposes (to countries that are accredited by the Personal Data Board and where there is adequate protection for the protection of personal data). It can also be transferred to intermediaries.
4. Method and Legal Reason for Collecting Personal Data
Your personal data is collected in all kinds of verbal, written or electronic media, within the scope of the purposes stated above and in order for the University to fulfill its contractual and legal obligations.
Your personal data is collected through written/digital applications made to websites, social media, call center, printed form, scanning of criminal records, SSI records, PTT, your navigation movements on the website, channels through which our University communicates with you or may contact you in the future, and is stored for the legal period.
Your personal data collected through these methods may be processed and transferred for the purposes specified in the relevant articles of this agreement within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
5. Personal Data Obtained Before PDPL Comes into Force
Your personal data obtained in accordance with the law before April 7, 2016, the effective date of
PDPL, is also processed and stored in accordance with the terms and conditions set out in this document.
6. Rights Regarding Personal Data
To the extent that your personal data is processed by the University as the data controller, in accordance with Article 11 of the PDPL, by filling out the "PDPL Access / Information Request Form" below and hand-delivering it to the hospital address from which you received service or sending it through a notary, your personal data.
a) Learning whether any of your personal data is being processed.
b) Requesting information regarding the processing activities of your personal data.
c) Learning the purposes of processing your personal data.
d) d) Learning about third parties if personal data have been transferred domestically or abroad.
e) Correcting personal data if they are incomplete or incorrectly processed.
f) To request the deletion or destruction of personal data if the reasons requiring the processing of personal data are eliminated or if the University does not have a legal basis or legitimate interest to process the data in question,
g) To object to adverse consequences that may arise as a result of the processing of personal data through automatic systems,
h) If you suffer damage due to unlawful processing of your personal data, you have the right to request compensation for this damage.
Depending on the nature of the request, the University will finalize the request free of charge as soon as possible and within thirty days at the latest. However, if the transaction requires an additional cost, the fee at the tariff determined by the Personal Data Protection Board will be charged by the University.
