In the Personal Data Protection Law Agreement, the principles regarding the processing of your personal data by the data controller Private Üsküdar American Academy (“Institution”), in accordance with the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation, are stated below.

• Data Controller and Representative

Your personal data is processed by the data controller Üsküdar American Academy in accordance with the requirements of current technology, in the procedures specified below.

• Purpose and Legal Reasons for Processing Personal Data

All information collected in all transactions to be carried out within the scope of education and training activities is processed for use in education and training service processes and for the Institution’s activities to be carried out in accordance with the law. The scope of these activities includes the work of business units, regulation of commercial and social policies, ensuring corporate functioning, ensuring data security, and managing human resources processes.

• Places Where Processed Personal Data Are Transferred and Purpose of Transfer

Data can be transferred to Health and Education Foundation institutions, alumni associations, business partners, suppliers, subcontractors and, exceptionally, private individuals, within the scope of the education and training service required, in accordance with the Law. The purpose of processing personal data and the purpose of transfer of data are parallel.

• Collection Method and Legal Reason for Personal Data

Your personal data is collected by our Institution through various methods, especially within the Institution’s networks, in written and electronic media, in order to carry out our education and training activities. Your personal data may be processed and transferred for the purposes specified in this Information Text in accordance with the basic principles, data processing conditions and exceptions stipulated by the Law.

• Ways to Apply to Data Processor and Data Controller

In accordance with Article 11 of the Law, by applying to our Institution, your personal data; a) to learn whether it has been processed, b) to request information if it has been processed, c) to learn the purpose of processing and whether it is used in accordance with its purpose, d) to learn the parties to which it has been transferred domestically / abroad, e) to request correction if it has been processed incompletely / incorrectly, f) to comply with the Law. Requesting it to be deleted/destroyed within the framework of the conditions stipulated in Article 7, g) Requesting that the transactions made in accordance with clauses (e) and (f) above be notified to third parties to whom it has been transferred, h) Objecting to a result against you due to being analyzed exclusively by automatic systems. , i) If you suffer damage due to illegal processing, you have the right to demand compensation for the damage.

• You can direct your information and application requests to us using the Application Form in the link below.

Our institution finalizes your requests free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged. Our institution may accept the request and process it, or may reject the request in writing, explaining the reason.

• Your Rights Regarding Data Processing

In cases where the application made by following the above-mentioned procedure is rejected, the response is found to be insufficient, or the application is not responded to in due time; The right to lodge a complaint with the Personal Data Protection Board (“Board”) is available within thirty days following the notification of the response and, in any case, within sixty days from the date of application. However, a complaint cannot be filed without exhausting the remedy.

Upon complaint or upon learning of an alleged violation, the Board, ex officio, carries out the necessary investigation on matters within its field of duty. Upon complaint, the Board examines the request and provides an answer to those concerned. If no response is given within sixty days from the date of complaint, the request is deemed rejected. If, as a result of the complaint or ex officio investigation, it is understood that there is a violation, the Board decides that the unlawfulness it detects will be remedied by the data controller and notifies the relevant parties. This decision shall be implemented without delay and within thirty days at the latest after notification. The Board may decide to stop data processing or transfer of data abroad in case of irreparable or impossible damages and if there is a clear violation of the law.

We thank you for your trust in us, stating that your data is carefully protected by our Institution.