KVKK Information Notice
Republic of Türkiye Yeditepe University Information Notice on the Processing of Personal Data
As Yeditepe University (“University”), we attach great importance to the security and confidentiality of your personal data and strive to take the highest level of security measures to process and safeguard such data. Your personal data is processed within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation, under our capacity as “data controller,” as explained below.
This Information Notice on the Processing of Personal Data (“Information Notice”) has been prepared in accordance with Article 10 of the KVKK, titled “Obligation of the Data Controller to Inform.” It aims to transparently inform you about the identity of the data controller, the method and legal basis of collecting your personal data, the purposes for which such data will be processed, to whom and for what purposes it may be transferred, the duration of data processing, and your rights listed under Article 11 of the KVKK. The explanations provided herein regarding “Your Personal Data” also cover “Special Categories of Personal Data.”
Method and Legal Basis of Collecting Your Personal Data
Depending on your relationship with our University, your personal data may be collected through automatic or non-automatic methods, verbally, in writing, or electronically, via our affiliated units, website, social media platforms, call center, mobile applications, and similar channels. Your personal data may be created and updated throughout your relationship with the University and stored in both digital and physical environments.
Your personal data may be processed and transferred in line with the purposes set out in Section 2 below, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of the KVKK.
Purposes of Processing Your Personal Data
The personal data collected may be processed for the following purposes:
Ensuring that individuals and institutions (students, employees, visitors, patients, suppliers, business partners, etc.) associated with our University and/or its affiliated centers and units can benefit from our products and services.
Safeguarding the life, property, legal, commercial, and occupational safety of individuals and institutions within our main campus and affiliated centers.
Fulfilling legal and regulatory obligations arising from relevant laws and secondary legislation, including but not limited to the Higher Education Law No. 2547, Labor Law No. 4857, Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Consumer Protection Law No. 6502, Occupational Health and Safety Law No. 6331, KVKK No. 6698, Internet Law No. 5651, Tax Procedure Law No. 213, Social Insurance and General Health Insurance Law No. 5510, Basic Health Services Law No. 3359, Decree Law No. 663, Private Hospitals Regulation, and the Regulation on Processing and Protection of Personal Health Data.
Carrying out audits and regulatory duties by authorized public institutions and professional organizations.
Managing disciplinary investigation processes concerning students, academic, and administrative staff.
Enabling membership in student clubs, participation in activities and events, and maintaining records required by law for clubs affiliated with associations, foundations, NGOs, or unions.
Responding to requests for information and documents from judicial or administrative authorities.
Conducting listing, reporting, verification, and analysis regarding the use of products and services, producing statistical and scientific data, improving services, and enhancing customer satisfaction.
Carrying out market research, promotions, and necessary notifications, evaluating complaints and suggestions, and contacting you directly through communication channels shared with the University.
Managing academic education, scientific research, project applications, intellectual property rights, publications, consultancy, and related activities.
Executing all Human Resources processes and policies of the University.
Defining, developing, and implementing administrative and academic processes, business strategies, and compliance procedures.
Conducting accreditation and evaluation studies of the University and its affiliated centers.
Protecting public order and health.
Providing preventive healthcare, medical diagnosis, treatment, and care, as well as managing the supply of medical materials.
Planning and managing the financing and invoicing of services provided.
Training and developing all employees.
Fulfilling requests to participate in training, seminars, and similar events.
Carrying out risk management and quality improvement activities.
Ensuring the fulfillment of rights and obligations arising from agreements with private insurance companies and other institutions.
Taking all necessary technical and administrative measures for data security.
Transfer of Your Personal Data
Within the scope of KVKK and relevant legislation, and limited to the purposes specified above, your personal data may be transferred to:
Yeditepe University’s affiliated centers and units,
İSTEK Foundation and/or its subsidiaries, subcontractors, and franchisees,
Legally authorized public institutions and organizations,
Business partners, subcontractors, suppliers, and service providers of Yeditepe University,
Domestic and/or international third-party institutions and organizations, in accordance with Articles 8 and 9 of the KVKK.
Duration of Data Processing
Your personal data will be processed in line with the purposes specified in Section 2, in compliance with the data processing and statute of limitations periods stipulated in higher education legislation and other relevant laws. In case of amendments to legal data processing periods, the newly determined periods will apply.
Rights of the Data Subject under Article 11 of KVKK
Except for cases stipulated under Article 28 of the KVKK (“Exceptions”), you have the following rights:
To learn whether your personal data is processed,
To request information if your data has been processed,
To learn the purpose of processing and whether it is used accordingly,
To know the third parties to whom your data is transferred domestically or abroad,
To request correction if your data is incomplete or inaccurate,
To request deletion or destruction of your data under Article 7 of the KVKK,
To request notification of such actions to third parties to whom your data has been transferred,
To object to any result arising against you due to analysis by automated systems,
To demand compensation if you suffer damage due to unlawful processing of your data.
Applications can be made by filling out the “Data Subject Application Form” available at www.yeditepe.edu.tr and submitting it in writing or electronically through the methods specified below.
If submitted in writing, the signed application form may be delivered in person to the University Directorate of Correspondence with an identity document, through a notary, or sent to the address: İnönü Mah. Kayışdağı Cad. 326A, 26 Ağustos Campus, 34755 Ataşehir / Istanbul
Electronic Applications
If you wish to submit your request electronically, you may sign the Data Subject Application Form with a secure electronic or mobile signature certificate as defined under the Electronic Signature Law No. 5070 and send it to our University’s Registered Electronic Mail (KEP) address: yeditepeuniversitesi@hs03.kep.tr. Alternatively, you may send the form from the e-mail address previously notified to our University and registered in our system, or through software or applications developed by our University for application purposes, if available.
Requests submitted to our University will be evaluated according to the nature of the request and responded to as soon as possible, and no later than thirty (30) days, in writing or electronically. Responses will be provided in accordance with Article 7 of the Communiqué on the Principles and Procedures of Application to the Data Controller, subject to the applicable processing fee.