To whom it may concern,

The Law on the Protection of Personal Data no. 6698, which aims to protect the fundamental rights and freedoms of persons, especially the privacy of life, and to regulate obligations of natural and legal persons  processing data and the procedures and principles they should follow when doing so, was published in the Official Gazette on 7 April 2016 and according to the article governing the entry into force of the law, articles 8, 9, 11, 13, 14, 15, 16, 17 and 18 of the concerned Law took effect as of 7 October 2016.

Under the Law on the Protection of Personal Data, at İhsan Doğramacı Foundation and Schools, the personal data demanded from and/or shared by you might be processed, shared, retained and destructed, when necessary, in a way relevant with, limited to and proportionate to the purposes for which they are processed, and maximum care will be taken for the security of personal data.

Personal data belonging either to you or to people whose data you have the right to share may be collected in any oral, written or electronic medium through channels such as school application and registration forms, our websites and your e-mails, mobile applications, collected forms, health reports, e-okul, mebbis systems, school and course management systems, educational software platforms, contracts, applications, forms, proposals, sound and video recordings, cookies used by our computers to recognize you in website visits, etc. by student affairs and registration units and other school employees, administrative and academic units, secretariat, reception and security offices, our school and program partners in Turkey and abroad, and transportation bus company and other companies which provide us services. However, personal data can be collected in any oral, written and electronic media without being limited to the ones stated above.

The purposes and legal bases of processing and transfer of your personal data include, besides fulfillment of legal and contractual obligations, carrying out the relations between the school and students/parents, holding activities and celebrating important events, and remote execution and recording of all school activities and celebrations to be shared in a limited way in physical and digital media and for relevant purposes, updating contact information, opening and follow-up of student and parent registrations, provision of all our services, conducting the registration and ensuing procedures, meeting financial requirements including invoicing, enabling relevant units to contact you and ensuring your satisfaction in general, identifying your needs, guaranteeing the legal and physical safety of our institution, our students and yours, continuation of education and other services in line with the demands of the legislation, contracts and technology, improvement of our services, undertaking promotional activities, carrying out analyses, management of all records and  documents in line with the purpose of processing, fulfillment of the obligations of storing data, reporting data, informing, sharing data and destructing data when necessary provided for by the legislation, relevant regulatory institutions and other authorities, ensuring your use of schools and programs in Turkey and abroad and meeting all other requirements, without being limited to the ones above, as well as the requirements laid down in the legislation.

Persons/institutions to which the personal data you shared with us or other third persons or obtained by us for the purposes listed above can be transferred include the Ministry of National Education and other relevant institutions and organizations allowed and/or required by statutory provisions, Bilkent University and our other schools, schools and our program partners at home and abroad, persons and firms which offer us services and/or which we direct you to use their services, persons and institutions whose services we use or with whom we cooperate to carry out our operations, persons, firms and our units and personnel who can take measures and make the necessary interventions particularly in relation to health problems, and other third persons who are responsible for and support us in taking security measures such as safeguarding your personal data, preventing unauthorized access and unlawful processing and who are or may be needed in ways that are not limited to the ones stated above.

Pursuant to articles 10 and 11, as well as other relevant articles of the Law on the Protection of Personal Data, you are entitled to contact us at any time, to access your processed personal data, to request information about data processing, to learn the purpose of processing of your personal data and whether the data is used for intended purposes, to know the third parties to whom your personal data is transferred at home or abroad, to request the rectification of incomplete or inaccurate data, if any, to request the erasure, not being shared with third persons or destruction of your personal data, although your data was processed under the provisions of relevant laws and there was a requirement, to request notification of third parties to whom your data was transferred of your use of the right to request the erasure or destruction of your personal data, to object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavorable consequence for you, and to request compensation for the damage arising from the unlawful processing of your personal data. (If a request is made in cases where processing, sharing and storage of your personal data are necessary, the request will be evaluated in this context and the applicant will be informed of the outcome of the request. After being informed, the relevant person may be asked to give their approval for the second time and if this approval is not given, a course of action dictated by the requirements will be followed. The responsibility for the negative response given to the second approval sought shall lie with the relevant person.)

Detailed information about the Policy on the Processing, Protection and Destruction of Personal Data and other rights you have can be found at http://www.obi.bilkent.edu.tr