Privacy Notice (KVKK)

Our company, operating under the title Recep Tayyip Erdoğan Üniversitesi ve Türk Alman Üniversitesi Teknoloji Geliştirme Bölgesi Yönetim Anonim Şirketi (the "Company"), carries out personal data processing activities in the capacity of Data Controller within the scope of Law No. 6698 on the Protection of Personal Data (the "Law") and the relevant legislation.

The Company provides disclosure through privacy notices prepared specifically for the relevant processes for employees, job candidates, visitors, data subjects whose camera footage is processed, employees of entrepreneur firms, and data subjects whose personal data is processed through cookies. Some of these notices are made available through our website, while others are presented physically and directly to the relevant person prior to the data processing activity.

For data processing activities concerning data subjects other than those specified above, we hereby present this privacy notice for your information.

The data of our customers and potential customers — name-surname, address, e-mail, telephone number, date of birth, project information, institution and title information, the field of activity requested in the application, nationality, social media accounts, website, address, tax office, tax identification number, education/certificate data, signature circular data; and for the shareholders of these persons — name-surname, Turkish ID number, gender, place of birth, date of birth, e-mail, telephone number, nationality, education/certificate data — is processed for the purposes of carrying out activities in compliance with legislation, conducting/auditing business activities, carrying out the production and operation processes of goods/services, the establishment of the contract and the fulfilment of obligations arising from the contract, carrying out after-sales support services for goods/services, and carrying out strategic planning activities.

The data of our suppliers and their employees — name-surname, Turkish ID number, tax identification number, tax office, address, e-mail, telephone number, bank account information, employee title, signature circular — is processed for the purposes of carrying out communication activities, carrying out the procurement processes of goods/services, the establishment of the contract and the fulfilment of obligations arising from the contract, and ensuring the security of the data controller's operations.

The data of project referees — name-surname, institution and title information, IP address, Turkish ID number, bank IBAN number, telephone number, e-mail information — is processed for the purposes of carrying out auditing activities, carrying out activities in compliance with legislation, carrying out communication activities, conducting/auditing business activities, carrying out the production and operation processes of goods/services, and carrying out the procurement processes of goods/services.

The data of persons providing training or consultancy within our Company — name-surname, institution and title information, photograph, camera footage, IP address, telephone number, e-mail information — is processed for the purposes of carrying out training activities, carrying out communication activities, carrying out business continuity activities, carrying out sponsorship activities, carrying out activities in compliance with legislation, conducting/auditing business activities, carrying out the production and operation processes of goods/services, and the establishment of the contract and the fulfilment of obligations arising from the contract.

The data of persons requesting a newsletter subscription — e-mail address — is processed for the purposes of carrying out training activities and communication activities.

The data of data subjects who complete the contact form — name-surname, telephone, e-mail address and any other personal data they choose to write in the message box — is processed for the purposes of tracking requests and complaints and carrying out communication activities.

Data reaching our Company is recorded in the system only to the extent necessary. Excess information is not recorded in the system; it is deleted or anonymised. Such data may be used for statistical purposes.

Our Company may transfer personal data to third parties — where the conditions set out in Articles 5 and 6 of the Law are met — for the fulfilment of legal obligations, where data processing is mandatory for our Company's legitimate interest, where data processing is necessary for the establishment and performance of the contract, and in certain cases based on your explicit consent. The third parties to whom transfers may be made are: in accordance with the legislation to which our Company is subject, the Ministry of Industry and Technology and its affiliated institutions and organisations; and, in the event of any dispute, courts, enforcement offices, the law/financial advisory/IT offices from which consultancy is obtained, suppliers, shareholders, affiliates and subsidiaries, and other authorised institutions and organisations. A data confidentiality undertaking is obtained from the private natural and legal persons to whom transfers are made, and data is shared only to the extent required by the purpose.

Furthermore, in posts made from our Company's social media account, the data of persons providing training within our Company is transferred abroad — with the explicit consent of the relevant person obtained — due to the fact that the servers of the social media applications used are located abroad.

Your personal data explained above may be collected verbally, in writing or electronically, by automated or non-automated means, through offices, camera recordings, the website and the cookies used therein, social media channels, SMS channels, software dedicated to our Company's activities, mobile applications, and similar means via business/programme partners.

Our data processing activities are based on one or more of the following legal grounds under the Law: Art. 5/2-ç, fulfilment of the legal obligations of the data controller; Art. 5/2-c, establishment and performance of the contract; Art. 5/2-f, legitimate interest of the data controller; Art. 5/2-a, expressly provided for by law; Art. 5/1, explicit consent.

Within the scope of Article 11 of the Law, you have the rights to: learn whether your personal data is being processed; request information regarding the data processed; learn the purposes of processing your data and ask whether it is used in accordance with that purpose; request information regarding the domestic and international transfers of the data; request the rectification of incomplete or incorrectly processed personal data; object to a result being drawn against you through the analysis of the data; and request compensation for the damages incurred due to unlawful data processing.

In order to exercise these rights, you may complete the Data Subject Application Form available on our Company's website and submit it to our Company. You may also submit your written application containing your request to exercise the said rights to us through our Company's communication channels.