ISTANBUL AYDIN UNIVERSITY INFORMATION NOTICE REGARDING PERSONAL DATA
STUDENT INFORMATION NOTICE
This information notice has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Disclosure Obligation, for the purpose of informing you about the processing, storage, and transfer of your personal data during the services provided to you by ISTANBUL AYDIN UNIVERSITY in its capacity as the Data Controller.
1–DATA CONTROLLER:
As ISTANBUL AYDIN UNIVERSITY, acting as the Data Controller, we show utmost sensitivity to ensure that all your personal data is processed and preserved in the best possible way and with due care. With this awareness, and in accordance with the Personal Data Protection Law No. 6698 and the relevant legislation, we process your personal data within the scope described below. Providing this information as the Data Controller is a legal obligation pursuant to Article 10 of the KVKK and Article 5(d) of the Communiqué on the Disclosure Obligation.
Within the scope of all services provided by our University, your personal data is processed in accordance with the principles stated in Article 4/2 of the KVKK titled “General Principles”, including: compliance with the law and rules of good faith; accuracy and being up to date when necessary; being processed for specific, explicit, and legitimate purposes; being relevant, limited, and proportionate to the purposes for which they are processed; and being retained for the period stipulated in the relevant legislation or necessary for the purposes for which they are processed.
2–YOUR PROCESSED PERSONAL DATA:
As ISTANBUL AYDIN UNIVERSITY, the following categories of personal data are processed:
Identity information (name-surname, date of birth, place of birth, gender, nationality, citizenship information, passport number for foreign nationals, ID number, photocopy of ID card),
Contact information (telephone, mobile phone, home phone, e-mail address, address information),
Student personal data (disciplinary investigation, graduation information, family details, driver’s license information, certificate details, military status information, IBAN information, photograph),
Diploma information,
Educational information (school information, education status, education level, foreign language program start–end dates),
Courses attended, in-service training information, certificates, transcript details, exam results, educational information,
Information regarding martyr relatives, veterans/veteran relatives, earthquake victims, and the related legal status,
Family member information (name, surname, mobile phone, educational background, retirement details, professional information, property details, etc.),
Disability data (disability status information),
Visual and audio records (photographs, video recordings, audio recordings),
Health data (illness information, allergies, medication use), health reports (for departments requiring health reports),
Transaction security data (IP Address, MAC Address, internet access logs without transferred or stored content, username, encrypted password, log records),
Criminal conviction and security measures (information on criminal convictions and security measures collected in a limited manner).
Your personal data is processed to fulfill obligations arising from the Higher Education Law, relevant secondary regulations, and educational and supervisory requirements imposed by the Higher Education Council (YÖK); to carry out education–training, scientific research, publication, and consultancy activities; to establish rights arising from educational activities under higher education legislation and University regulations; to produce and issue ID cards; to conduct various academic and administrative processes; to comply with mandatory legal requirements; to establish contracts; to establish rights; to respect fundamental rights and freedoms; and to fulfill contractual and legal obligations fully and accurately —based on legal provisions—through electronic systems, the document management system, or written/non-electronic methods.
Your collected personal data is processed according to the principles set forth in the KVKK—lawfulness and fairness; accuracy and being up to date; processing for explicit and legitimate purposes; being relevant, limited, and proportionate; retention for the required period—based on the legal grounds listed in Article 5/2 of the KVKK:
Your explicit consent,
Explicitly stipulated in laws,
Necessity for protecting the life or physical integrity of a person unable to express consent,
Necessity for processing personal data belonging to parties involved in a contract,
Personal data made public by the data subject,
Necessity for the Data Controller to fulfill legal obligations,
Necessity for the establishment, exercise, or protection of a right,
Necessity for data processing for the legitimate interests of the Data Controller, provided fundamental rights and freedoms are not harmed.
Your special-category personal data is processed only under the conditions listed in Article 6/2 of the KVKK:
Explicit consent of the data subject,
Explicitly stipulated in laws,
Necessity for protecting the life or physical integrity of a person unable to express consent,
Personal data made public by the data subject, in line with the intention of disclosure,
Necessity for the establishment, exercise, or protection of a right,
Necessity for the protection of public health by those under confidentiality obligations or authorized institutions,
For Education–Training Activities, the necessity for carrying out educational activities, assessment and tracking success, conducting exam processes, fulfilling students’ accommodation, social, financial, and personal rights, and ensuring and executing related processes,
For fulfilling the University’s legal obligations, ensuring exams and educational activities for disabled, detained, and convicted students, and evaluating student requests—processed in a limited manner by Istanbul Aydın University as the Data Controller, in compliance with the KVKK No. 6698 and other relevant legislation.
3–TRANSFER OF YOUR PROCESSED PERSONAL DATA:
Your collected personal data may be transferred—when requested—to public institutions authorized by law (including but not limited to Ministries and Presidency councils, the Military Recruitment Directorate, Provincial Directorate of Migration Management, law enforcement, the Higher Education Council), for the purposes of managing University registration processes, enabling you to benefit from University services, granting scholarships and educational services, conducting educational activities, carrying out exam processes, and ensuring public order and security.
Additionally, your personal data may be transferred, within the framework of Articles 8 and 9 of the KVKK, to authorized institutions such as:
YÖK, SGK, ministries, judicial authorities, and our legal advisors for judicial procedures,
Consultants, collaborating organizations, contracted institutions, payment system providers,
Audit firms, independent audit firms, and financial advisors/accountants to fulfill legal obligations and conduct commercial audits,
Service providers with servers located abroad are used in educational processes.
4–METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA:
Your personal data is collected through printed and electronic forms used during University registration and other educational processes, as well as through contracts, form submissions, document delivery, www.aydin.edu.tr communications via University or staff e-mail accounts, University IT systems, YÖKSİS, University Information Systems, Student Information System (UBIS), e-mail services, camera recordings, student ID card system, call center, student clubs, and social media platforms—via automated, partially automated, or non-automated methods.
As Istanbul Aydın University, your personal data is obtained and processed for the purposes of carrying out Education–Training Activities, ensuring compliance with legislation, conducting storage and archiving activities, carrying out communication activities, and managing administrative processes—based on compliance with legal requirements, establishing contracts, establishing rights, respecting fundamental rights and freedoms, explicit consent, and fulfilling contractual and legal responsibilities accurately and completely.
5–RETENTION PERIOD OF YOUR PERSONAL DATA:
Your personal data is stored for the duration required by YÖK and the relevant legislation, and upon expiration, it is deleted, anonymized, or destroyed.
6–RIGHTS OF THE PERSONAL DATA SUBJECT:
Under Article 11 of the KVKK, individuals whose personal data is processed have the following rights:
To learn whether personal data is processed,
To request information if personal data has been processed,
To learn the purpose of processing personal data and whether it is used in accordance with this purpose,
To know the third parties to whom personal data is transferred within the country or abroad,
To request correction of incomplete or inaccurate personal data,
To request deletion or destruction of personal data under the KVKK,
To request notification of correction, deletion, or destruction to third parties to whom data has been transferred,
To object to the occurrence of a result against the individual through automated systems,
To request compensation for damages arising from unlawful processing of personal data.
Requests within the scope of Article 11 titled “Rights of the Data Subject” may be submitted to ISTANBUL AYDIN UNIVERSITY at Beşyol Mah. İnönü Cad. No. 38, 34295 Küçükçekmece/Istanbul, in writing; via Registered Electronic Mail (KEP) signed with a “secure electronic signature” to the Electronic Document Management System (EBYS); via e-mail to [email protected] or in person in writing. You will receive a response within thirty days.
We hereby provide this information in our capacity as “Data Controller” under the Personal Data Protection Law.
Respectfully,
DATA CONTROLLER
ISTANBUL AYDIN UNIVERSITY
>> Click here for the Consent Statement on the Processing, Use, and Sharing of Personal Data of the Republic of Türkiye, Istanbul Aydın University
