Personal-data collection methods, purposes, legal bases and individual rights under Turkish Law No. 6698.
This draft describes the platform’s current operation. The controller’s identity and contact details, domain, service providers, recipients and international transfer arrangements will be added when confirmed. The document must be completed before use as the final published notice.
Collection methods and data categories
Personal data is collected electronically through registration/profile forms, sign-in and verification, learning and self-assessment activity, correspondence/privacy requests and necessary technical security records. Categories include identity/contact details, organisation/business and activity information, learning/certificate records and transaction-security information.
The telephone number is optional at registration. Required fields are distinguished from optional fields. Do not submit unrelated sensitive personal data or unnecessary information about other people in message fields.
Processing purposes and legal grounds
Processing necessary for the account and requested learning service is assessed under contractual necessity in KVKK Article 5(2)(c). Processing necessary for account security and abuse prevention is assessed under legitimate interests in Article 5(2)(f), with regard to fundamental rights and freedoms.
Handling rights requests is assessed under legal obligation in Article 5(2)(ç); necessary records for establishing, exercising or protecting a right are assessed under Article 5(2)(e). These are proposed mappings limited to the relevant activity and necessary data. Viewing or acknowledging this disclosure does not constitute explicit consent.
Retention and access principles
Data is kept relevant, limited and proportionate to specified purposes. Access is controlled by role and permission. The Privacy Notice describes the current project schedule by record category; proposed periods do not mean that all records are retained in every circumstance. Erasure, destruction or anonymisation is assessed when the processing reason ends.
Recipient categories, service providers and any international-transfer basis will be completed when those arrangements are confirmed. This draft does not present an undecided transfer as taking place or legally authorised.
Your rights under KVKK
Under Article 11 of KVKK, subject to the applicable conditions, you may:
- Learn whether your data is processed and request information about that processing.
- Learn the processing purpose and whether the data is used in accordance with it.
- Learn the third parties receiving your data in Türkiye or abroad.
- Request correction of incomplete or inaccurate data.
- Request erasure or destruction when legal conditions are met.
- Request notification of correction, erasure or destruction to third-party recipients.
- Object to an adverse result arising solely from automated analysis.
- Seek compensation for damage caused by unlawful processing.
Requests and assessment
Verified users can use the Privacy Centre in Profile. Requests are assessed as soon as possible according to their nature and no later than 30 days. Necessary identity checks are limited to handling the request securely. Statutory complaint routes remain available according to the outcome. Official controller and non-account request details will be completed later.
