Last updated:
İstanbul Nişantaşı University (the “University”) exercises the utmost care in protecting your personal data. The University processes and stores all types of personal data relating to individuals associated with the University in accordance with Law No. 6698 on the Protection of Personal Data (the “Personal Data Protection Law”). In its capacity as the “Data Controller,” as defined under the Personal Data Protection Law, the University processes your personal data as described below and in compliance with the applicable legislation. Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data, the purpose of this Privacy Notice is to inform you about the methods by which your personal data are collected, the purposes and legal grounds for their processing, and your rights in relation to your personal data.
Method and Legal Grounds for the Collection of Personal Data
Your personal data are collected through written and digital applications submitted via websites, social media, call centres, printed forms, searches of judicial records, Social Security Institution (SGK) records, the Turkish Post and Telegraph Corporation (PTT), your browsing activity on websites, and other channels through which the University communicates or may communicate with you in the future, and are stored for the legally prescribed retention period. Your personal data may be generated, updated, and processed for as long as your relationship with the University continues. Personal data collected through these methods will be processed in accordance with the conditions and purposes for processing personal data set out in Articles 5 and 6 of the Law.
Purposes for Which Personal Data Will Be Processed
Your personal data, whether collected verbally, in writing, or electronically, will be processed for the purpose of enabling the provision of our services and ensuring that the University fully and accurately fulfils its obligations arising from contracts, undertakings, and applicable laws. Within this framework, your personal data will be processed for the purposes of fulfilling obligations under higher education legislation, carrying out education and training, scientific research, publication, and consultancy activities, conducting listing, reporting, analysis, and evaluation activities, promoting the University and its activities, enabling relevant individuals to benefit from products and services, communicating with you, carrying out registration procedures, and managing the relevant administrative processes, in accordance with the conditions set out in Articles 5 and 6 of the Law.
Parties to Whom Personal Data May Be Transferred and the Purposes of Such Transfer
Your collected personal data may be transferred, for the purposes of carrying out educational activities, ensuring legal and commercial security, maintaining physical security, ensuring legal compliance, and conducting financial affairs, to business partners; higher education authorities and authorities such as the Social Security Institution (SGK); public institutions legally authorised to receive such data, including ministries and judicial authorities; and, where permitted by applicable legislation, consultants and organisations with which the University cooperates, subject to the conditions set out in Articles 8 and 9 of Law No. 6698. Provided that the necessary security and legal safeguards are in place, personal data may also be transferred to information technology infrastructures and cloud computing systems and may be archived for the purpose of fulfilling legal obligations.
Rights of the Personal Data Subject under Article 11 of Law No. 6698
As a personal data subject, you have the right to: ascertain whether your personal data have been processed; request information if your personal data have been processed; learn the purpose for which your personal data are processed and whether they are being used in accordance with that purpose; know the third parties to whom your personal data have been transferred, whether in Türkiye or abroad; request the rectification of any personal data that have been processed incompletely or inaccurately; request the deletion or destruction of your personal data where the conditions requiring their processing no longer exist, object to any adverse outcome resulting exclusively from the automated analysis of your personal data, and claim compensation for any damage suffered as a result of the unlawful processing of your personal data. You may submit your requests, together with information necessary to verify your identity, in writing, either in person or through a notary public, to Maslak Mahallesi, Taşyoncası Sokak, No: 1V and No: 1Y, Sarıyer, Istanbul, or send them to the University’s official e-mail address using a secure electronic signature.