Privacy Policy

BEYSUKENT COLLEGE PERSONAL DATA PROTECTION AND PRIVACY POLICY

Beysukent College places great importance on the protection, privacy, and security of your personal data. In this context, we would like to inform you about how we process the personal data of our students, parents, suppliers, business partners, their employees, and other third parties as we conduct our school's business relationships and educational activities. KVKK All concepts and expressions used in this Personal Data Protection and Privacy Policy will be expressed in the manner used in the Personal Data Protection Law No. 6698 (KVKK) and other relevant legislation. If you do not accept this Policy, you should not provide us with your personal data under any circumstances. If you prefer not to provide us with your personal data, it will not be possible for us to provide some of our services or respond to your requests.

If you do not accept this Policy, you should not transmit your personal data to us under any circumstances. If you choose not to transmit your personal data to us, we will not be able to provide some of our services or respond to your requests.

The personal data you provide to our school must be accurate, complete, and up-to-date. If you provide us with personal data belonging to a third party, it will be deemed that you have obtained all necessary permissions from the relevant third party for us to collect, process, use, and disclose their information, and our school cannot be held responsible.
Yavuz Beysukent Education Consultancy Tourism Construction Advertising Industry and Trade Limited Company (the Beysukent Collage.) acts as the Data Controller responsible for processing personal data.

ABBREVIATIONS AND DEFINITIONS

Our School / Beysukent College: Yavuz Beysukent Education Consultancy Tourism Construction Advertising Industry and Trade Limited Company, located at Angora Boulevard, No:7 Çayyolu Çankaya/ANKARA.
KVKK: Personal Data Protection Law, which came into force after being published in the Official Gazette No. 29677 dated April 7, 2016.
KVKKBoard: Personal Data Protection Board
KVKKInstutitionPersonal Data Protection Instutition
Relevant Person or Relevant Relevant Persons da or Data Owner: The real person whose personal data is processed by Beysukent College, including but not limited to our students, parents, prospective students, business partners, shareholders, officials, prospective employees, interns, visitors, suppliers, employees of collaborating institutions, and other individuals.
Application Notification: Communiqué on the Procedures and Principles of Application to the Data Controller, which came into force after being published in the Official Gazette No. 30356 dated 10 March 2018.
Regulation on Deletion, Destruction or Anonymization of Personal Data:Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette No. 30224 dated 28 October 2017 and entered into force as of 1 January 2018.
Policy: This Beysukent College Personal Data Protection and Privacy Policy
TCK: Published in the Official Gazette dated 12 October 2004 and numbered 25611; Turkish Penal Code No. 5237 dated 26 September 2004
Law No. 5651: Law on Regulation of Publications Made on the Internet and Combating Crimes Committed Through These Publications, which came into force after being published in the Official Gazette No. 26530 dated 23 May 2007.
Data Controller: It refers to Beysukent College as the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Our Principles for Processing Personal Data

When processing personal data, our school operates within the scope of the Law on the Protection of Personal Data (KVKK) and relevant legislation. The basic principles and principles we adhere to when processing your personal data in accordance with Article 4 of the KVKK are as follows:

Processing in Compliance with the Law and Good Faith:Our school acts in accordance with the principles established by legal regulations and the principles of trust and good faith when processing personal data. Within this scope, our school takes into account the principles of proportionality in the processing of personal data and does not use personal data beyond what the purpose requires.
Ensuring Personal Data is Accurate and Up-to-Date When Necessary:Our school ensures that the personal data it processes, taking into account the fundamental rights and freedoms of data subjects and their legitimate interests, are accurate and up-to-date.
Processing for Specific, Explicit, and Legitimate Purposes:Our school clearly and precisely determines the legitimate and legal purpose of processing personal data. Our school processes personal data only to the extent necessary for the services it provides and in connection with them.
Being Relevant, Limited, and Proportional to the Purposes for Which They are Processed:Our school processes personal data only in a manner suitable for achieving the specified purposes and avoids processing personal data that is unrelated to or unnecessary for achieving the purpose.
Retention of Personal Data for the Period Foreseen in the Relevant Legislation or Necessary for the Purpose for Which They are Processed:Our school retains personal data only for the period specified in the relevant legislation or as long as necessary for the purpose for which they are processed. In this context, our school first determines whether there is a period specified in the relevant legislation for the retention of personal data, complies with this period if specified, and retains personal data for the period necessary for the purpose for which they were processed if no period is specified. At the end of the period or when the reasons requiring processing cease to exist, personal data is deleted, destroyed, or anonymized by our school.

Groups of Individuals Whose Data We Process

The categories of data subjects whose personal data is processed by our school are as follows. Individuals outside of these categories may also address inquiries to our school for information purposes under Article 11 of the KVKK, and their requests will be evaluated within the scope of the KVKK.

–        Student-Parent:Refers to our enrolled students and their parents at our school.
–        Employee:Refers to employees working at all levels within our school.
–       Supplier:Refers to individuals providing goods and services from external sources while our school conducts its activities.
–        BusinessPartners:Refers to individuals with whom our school collaborates in various activities and events or conducts joint activities.
–        Employee:Job Applicant:Refers to individuals who apply to our school for employment purposes and are not yet included on the payroll.
–        ProspectiveStudent-–ParentRefers to prospective students and their parents who take exams at our school for the purpose of education and have not yet completed their registration. 

WHEN DO WE COLLECT YOUR PERSONAL DATA?

Your personal data is generally collected in the following cases:

• When you are involved in our educational activities or communicate with us for this purpose,
• When you sell goods to us or provide services to us,
• When you participate in events organized by our school,
• When you communicate with us through our website, email, other online platforms, or by phone,
• When you apply for a job at our school and become our employee,
• When you connect to the school's internal network,
• When you communicate with us for any purpose as a prospective student-parent/supplier/business partner/employee.
• When you visit our school,

The personal data we process acquired in the above situations will only be processed in accordance with this Policy.

WHAT PERSONAL DATA DO WE PROCESS?

The type of data we process varies depending on the relationship between you and our school. It may also vary depending on how you contact us.

Our basic methods for processing personal data are divided into electronic environments (our website, email, MEB e-school system, etc.) and physical environments (coming to our school in person, submitting job applications in person, candidate student interviews, and documents collected upon final registration, etc.). In this context, the personal data we process on your behalf may be disclosed under the following categories:

• Identity Information (such as name, surname, TR identity number, date of birth, etc. contained in identity documents)
• Contact Information (phone, address, email address, etc.)
• Financial Information (credit card information, bank account information, invoice, etc.)
• Photographs and Videos (security camera recordings at our school, photographs and videos used in events)
• Internet Records (IP address, MAC address, etc. when connecting to the school's internal network)
• Health Information (Information such as sick leave reports processed only for our employees' personnel/leave information.)
• Professional Experience Information (Data such as certificates regarding tenure and expertise in the profession for employees) 

PROCESSING OF PERSONAL DATA OF VISITORS TO OUR SCHOOL AND ANAKAMPUS MOBILE APPLICATION USERS

When you visit our school, your photographs and videos are taken by the security cameras for security reasons. These recordings are processed by our school to ensure the safety of the school and its surroundings, to prevent any possible unwanted incidents, and to fulfill legal obligations.
As our school, we process the personal data of AnakampusMobile application users in accordance with the "AnakampusMobile User Data Processing Policy" and the "AnakampusMobile Cookie Policy" which are annexed to this Policy.

LEGAL REASONS FOR PROCESSING YOUR PERSONAL DATA

Your personal data KVKK m. 5 and m. Within the framework of the following legal reasons regulated in Article 6:

– Existence of your explicit consent,
– It is clearly foreseen in the law,
– It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity,
– It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
– It is mandatory for the data controller to fulfill its legal obligation.
– It has been made public by the person concerned,
– Data processing is mandatory for the establishment, exercise or protection of a right,
– We process data in cases where it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned. 

SHARING YOUR PERSONAL DATA

Our school is in accordance with KVKK art. regarding the transfer of personal data. In accordance with Article 8, it is the responsibility of acting in accordance with the decisions and relevant regulations stipulated in the KVKK and taken by the Board. As a rule, our School cannot transfer personal data and sensitive data belonging to data owners to other real persons or legal entities without the express consent of the relevant person.

In addition, transfer is possible without the consent of the person concerned in cases stipulated in Articles 5 and 6 of the KVKK. Our school may transfer personal data to third parties in accordance with the conditions stipulated in the KVKK and other relevant legislation and by taking the security measures specified in the legislation, unless otherwise regulated by the Law or other relevant legislation. In order to continue the activities of our school, we can make transfers to the people, institutions and software from which we receive service.

STORAGE PERIOD OF YOUR PERSONAL DATA

In accordance with the principles listed above, we store your personal data only until the purpose of processing is fulfilled. When determining these periods, the first thing we take into consideration is whether the periods are determined in the law or not. As a matter of fact, some laws have determined certain periods for certain data. For this reason, the storage period of each collected data varies. At the end of the relevant periods, if there is no other reason to keep your data, we destroy your personal data in accordance with KVKK and our Personal Data Storage and Destruction Policy.

DESTRUCTION OF YOUR PERSONAL DATA

According to Article 7 of the KVKK and Article 138 of the Turkish Penal Code, after personal data is processed within the scope of the principles listed above and if the reasons requiring processing are eliminated, it is deleted, destroyed or anonymized based on our School's Personal Data Storage and Destruction Policy or the request of the personal data owner.
DESTRUCTION OF PERSONAL DATA METHODS
A.    Deletion of Personal Data
Deletion of personal data is the process of making personal data inaccessible and unusable for the relevant users in any way. Our school takes all necessary technical and administrative measures to ensure that deleted personal data is inaccessible and unusable for those who have access to the data. First, the personal data that will be subject to deletion is determined. It is subsequently deleted by following the destruction procedure only by our employees who have access to this personal data. The method followed according to the recording environment in which personal data is kept is determined by our School. A report is kept during deletion, destruction and anonymization processes. The data stored in the physical environment is blackened by drawing, painting or erasing it so that it cannot be read. Data in electronic media is made inaccessible and unusable in any way by our School's IT officer using appropriate methods.
B.    Destruction of Personal Data
Destruction of personal data is the process of making personal data inaccessible, irretrievable and unusable by anyone. As the data controller, we take all necessary technical and administrative measures for the destruction of personal data. Data kept in physical media is destroyed by burning and paper shredders. Electronic data is destroyed with data destruction software.
C.    Anonymization of Personal Data
Anonymization of personal data means making it impossible to associate personal data with an identified or identifiable natural person in any way, even if it is matched with other data.

In order for personal data to be anonymized; Personal data must be returned by the data controller or third parties and/or made impossible to associate with an identified or identifiable natural person, even through the use of appropriate techniques in terms of the recording environment and relevant field of activity, such as matching the data with other data.

MEASURES TAKEN WITHIN THE SCOPE OF PROTECTING YOUR PERSONAL DATA

KVK Institution has published a guide called Personal Data Security Guide and stated the technical and administrative measures that must be taken to protect personal data. In this regard, our School takes the necessary administrative and technical measures, prepares letters of undertaking, regulates procedures and prepares information and explicit consent texts.

Technical Measures
The technical measures taken by our school regarding the personal data it processes are listed below:
– Network security and application security are ensured.
– A closed system network is used for personal data transfers via the network.
– Key management is implemented.
– Security measures are taken within the scope of supply, development and maintenance of information technology systems.
– The authorities of employees who change their duties or leave their jobs in this area are removed. 
– Up-to-date antivirus systems are used. 
– Firewalls are used.
– User account management and authorization control system is implemented and these are also monitored.
– In accordance with the legal compliance requirements determined on a business unit basis, access authorization has been granted only to certain individuals, a personal account management system has been established and encryption systems have been activated.
– Personal Data that cannot be evaluated under any conditions regulated in Articles 5 and 6 of the KVKK other than Explicit Consent and for which Explicit Consent cannot be obtained for the purpose of processing, are processed by masking.
Administrative Measures
Administrative measures taken by our school regarding the personal data it processes are listed below:
– In order to improve the qualifications of employees, training is provided on preventing unlawful processing of personal data, preventing unlawful access to personal data, ensuring the preservation of personal data, communication techniques, technical knowledge and skills, Law No. 1 and other relevant legislation.
– Employees are required to sign confidentiality agreements and commitments regarding the activities carried out by our school.
– Corporate policies on access, information security, use, storage and destruction have been prepared and started to be implemented. 
– The signed contracts contain data security provisions.
– Before starting to process personal data, our School fulfills its obligation to inform the relevant persons.
– A personal data processing inventory has been prepared.
– Information security training is provided to employees.
– A separate protection policy is applied in the processing and transfer of special personal data.

PROTECTION OF SPECIAL PERSONAL DATA

KVKK m. Special categories of personal data are listed in 6. These; Data regarding race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data. Since these data carry the risk of causing victimization or discrimination when processed unlawfully, they are regulated as special personal data and special measures are envisaged because the processing of these data requires more sensitive protection. A separate policy regarding the processing and protection of special personal data has been prepared and put into effect by our school.

In accordance with Article 10 of the KVKK, our school informs the Relevant Persons during the acquisition of sensitive personal data. In addition, in case of processing of special categories of personal data specified in Article 6, the Explicit Consent of the data owners - KVKK 6/3 and 5/2. Except for the exceptions stated in the articles. In addition, in order to protect special personal data, it is processed by taking measures in accordance with KVKK.

On the other hand, our School takes special precautions to ensure the security of sensitive personal data. Employees who have access to sensitive personal data are made to sign letters of undertaking. Special categories of personal data are not collected unless necessary for the relevant business process and are processed only when necessary. In case of processing special personal data, technical and administrative measures deemed necessary are taken to comply with legal obligations and to comply with the measures determined by the KVK Board.

YOUR RIGHTS AS A DATA SUBJECT

As a data subject, you have the following rights under the KVKK:

• The right to learn whether personal data concerning you is processed,
• The right to request information if your personal data has been processed,
• The right to learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• The right to know the third parties in the country or abroad to whom personal data have been transferred,
• The right to request the correction of personal data if it is incomplete or incorrectly processed,
• The right to request the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK,
• The right to request the notification of the operations carried out in accordance with sub-paragraphs (d) and (e) to third parties to whom personal data have been transferred,
• The right to object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,

You can submit your requests regarding your rights as a data subject to our school in writing or using other methods determined by the Personal Data Protection Board within the scope of the KVKK. Your requests will be evaluated and concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. In case the transaction requires an additional cost, our school may request a fee from you within the tariff determined by the Personal Data Protection Board.
1)     https://www.beysukentkoleji.k12.tr After filling out the form at and signing it with wet signature, send it to Beysukent College's Angora Bulvarı 2687. Sokak No:7 Çayyolu Çankaya/ANKARA delivered in person iletilmesi.
2)     https://www.beysukentkoleji.k12.tr After filling out the form at and signing it with wet signature, send it to Beysukent College's Angora Bulvarı 2687. Sokak No:7 Çayyolu Çankaya/ANKARA Sending through a notary. ile gönderilmesi.  
3)     https://www.beysukentkoleji.k12.tr After completing the application form at the address and signing it with your "secure electronic signature" within the scope of the Electronic Signature Law No. 5070, sending the form with the secure electronic signature to yavuzbeysukentegitimdanismanlik.anadolulisesi@hs01.kep.tra (KEP Address) via registered e-mail.
4)     Submission in writing using your e-mail address, which has been previously notified to our School and registered in our School's system.

To the application form https://www.beysukentkoleji.k12.tr you can reach us at. In order for your application to be answered, you must fill out the application form completely. It is not possible to apply to obtain information on behalf of a third party. However, an application can be made on behalf of a third party if there is a notarized and signed power of attorney issued on behalf of the person making the application. Please make sure that your request is clear, concise and understandable when filling out the form.

In accordance with KVKK, your applications will be finalized as soon as possible and within 30 days at most. These applications are free of charge. However, if the transaction requires an additional cost, the fee in the tariff determined by the KVK Board may be charged.

KVKK m. In cases where your application is rejected by our School in accordance with Article 14, you find our response insufficient, or we do not respond to your application in time; You can make a complaint to the KVK Board within thirty days from the date you learned our school's answer and probably within sixty days from the date of application.

OTHER MATTERS

In case of incompatibility between the provisions of KVKK and other relevant legislation and this Policy, the provisions of KVKK and other relevant legislation will first apply.

Updates may be made to this notice due to legislative provisions that may change over time and changes that may occur in our company policies. If changes are made, we will post the most current version of the Notice on our website.

The User(s) acknowledge that they have read this Personal Data Protection and Privacy Policy before entering the website, that they will comply with all the matters specified herein, that the contents of the website and all electronic media and computer records belonging to our School are in accordance with the Code of Civil Procedure Art. They have irrevocably accepted, declared and undertaken that it will be considered as conclusive evidence in accordance with Article 193. 01.09.2020

Data Controller:
Yavuz Beysukent Education Consultancy Tourism Construction Advertising Industry and Trade Limited Company
Address: Angora Boulevard 2687. Sokak No:7 Çayyolu Çankaya/ANKARA Tel: 0312 225 21 11
Tel: 0312 225 21 11
https://www.beysukentkoleji.k12.tr