Loading, please wait.

GDPR Compliance

IBN HALDUN UNIVERSITY

INFORMATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698

Ibn Haldun University ("University") takes all necessary technical and legal measures in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") in the processing of your personal data due to its activities. Data subjects can find detailed information below about the processing of their personal data, the legal reasons for data collection, and their rights under the KVKK, including the transfer of their personal data to third parties.

A. Purposes of Personal Data Processing

Your personal data may be processed under the following circumstances by the data controller or the real/legal persons it designates:

  • To fulfill legal and regulatory requirements arising from laws such as the Higher Education Law No. 2547, the Law on Higher Education Personnel No. 2914, the Labor Law No. 4857, the Turkish Commercial Code No. 6102, the Turkish Code of Obligations No. 6098, the Consumer Protection Law No. 6502, the Law No. 5651 on Regulating the Internet Environment and Combating Crimes Committed through Online Publications, the Tax Procedure Law No. 213, etc., and to take necessary measures in this regard,
  • To provide healthy and complete services in all centers and units affiliated with the University and ensure that students benefit from our educational services efficiently and rapidly,
  • To fulfill obligations related to education, research, publication, and consultancy activities under the Higher Education Law No. 2547, related secondary regulations, and the Higher Education Council (YÖK), to carry out academic and administrative processes such as student ID card production, various academic and administrative procedures,
  • To conduct statistical and scientific analyses related to the use of services, improve the services, and personalize them to increase user satisfaction,
  • To ensure the safety of individuals and property within the University's campus and/or affiliated centers and units, as well as legal and commercial security,
  • To take necessary precautions related to occupational health and safety, plan and execute training processes, and enable early intervention in health-related matters,
  • To ensure that the decisions of the faculties' and institutes' councils are implemented,
  • To plan and execute library services, membership processes, and document management,
  • To protect the rights and fulfill the obligations of students in internship programs, both within the University and at external organizations,
  • To enable oversight by relevant public institutions and professional organizations,
  • To fulfill requests for information and documents from judicial or administrative authorities,
  • To carry out market research, promotional activities, and address complaints, requests, and suggestions,
  • To carry out academic training, scientific research, project applications, and other operations related to intellectual property rights (such as copyrights and patents),
  • To handle processes related to registration freezing, deletion, double major programs, grade changes, make-up exams, and transfer between programs,
  • To enable students to become members of student clubs and participate in activities organized by these clubs,
  • To manage and execute the University's human resources policies and processes,
  • To evaluate, examine, and report the results of program applications,
  • To determine, develop, and apply the University's administrative and academic strategies and legal compliance processes,
  • To conduct accreditation and evaluation processes of the University and its affiliated units,
  • To carry out preventive healthcare, medical diagnosis, treatment, and care services,
  • To manage student exchange programs,
  • To plan and manage the financing and billing of all services provided,
  • To conduct disciplinary investigations,
  • To identify training needs and plan and execute educational processes,
  • To fulfill obligations under agreements with insurance companies or other institutions,
  • To take necessary technical and administrative measures to ensure data security,
  • To promote the University and its activities,
  • To research and develop personal preferences regarding our services and contact you via the communication channels you shared with us,
  • To plan and manage emergency management processes,
  • To manage financial and accounting operations,
  • To manage and perform any required documentation under applicable laws,
  • To prepare financial reports and perform risk management,
  • To manage visitor registration and follow-up,
  • To plan, develop, and improve public relations and marketing strategies,
  • To ensure the proper execution of contracts signed by the University,
  • To fulfill post-sale/service obligations,
  • To ensure the security of students, employees, visitors, and University buildings through security cameras and other security measures, including entry-exit control,
  • To plan and manage accommodation processes for students and visitors,
  • To ensure the effective and efficient use of delivered tools and equipment,
  • To evaluate employees' suitability for work and their ongoing employment,
  • To evaluate recruitment processes, create personnel files,
  • To improve the morale and motivation of students and employees, their satisfaction, interactions, and loyalty to the University,
  • To plan and manage exam processes and announce exam results,
  • To monitor communications with call centers for the purpose of identifying and analyzing the content of communications,
  • To provide internet access to visitors, students, and staff of the University,
  • To plan and execute transportation services and other logistical activities,
  • To collect statistical data when our website is visited, record visitor information, and ensure feedback,
  • To conduct required quality and standard audits or fulfill other legal obligations,
  • To inform about changes in laws or policies affecting the data subject.

B. Transfer of Personal Data

The personal data processed may be transferred, in accordance with the relevant legal requirements and the provisions of the KVKK, to the following entities:

  • Public institutions such as the Higher Education Council and TÜBİTAK, for auditing and monitoring the University's activities,
  • Our business partners, suppliers, and other entities to ensure the continuity and coordination of services,
  • Auditing firms, independent audit firms, and other entities related to legal obligations,
  • Technology service providers, including software companies, for system management, maintenance, and support,
  • Health institutions and occupational health and safety service providers,
  • Banks and financial institutions for banking and finance transactions,
  • Service providers for maintenance, repair, and support services,
  • Security service providers for campus and building safety,
  • Marketing firms, research firms, and event organizers for the development and execution of marketing strategies,
  • Other educational institutions for student exchange programs,
  • And other necessary third parties as required by law.

C. Method and Legal Basis of Data Collection

Your personal data is collected by the University or its designated real/legal persons through various means such as application forms, surveys, contracts, SGK (Social Security Institution) records, employment contracts, social media applications, communications with students, employees, suppliers, and business partners, and through verbal, written, or electronic channels, either with your explicit consent or under other processing conditions specified in the KVKK.

D. Retention and Destruction of Personal Data

Personal data is retained in accordance with the purpose for which it was collected, and as long as necessary to fulfill the purpose. Once the purpose or the legal basis for processing is no longer valid, personal data will be destroyed in accordance with the relevant legal regulations.

E. Rights of the Data Subject

Every data subject has the following rights under Article 11 of the KVKK:

  • To learn whether their personal data is being processed,
  • To request information about personal data that has been processed,
  • To learn the purpose of processing their data