KVKK Information Text

GENERAL DISCLOSURE TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

As FEN EĞİTİM KURUMLARI A.Ş. (“FEN KOLEJİ” or the “Company”), we attach the utmost importance to the security of your personal data. With this awareness, we place great emphasis on ensuring that the personal data of natural persons with whom the Company interacts are processed and stored in compliance with the Law No. 6698 on the Protection of Personal Data (the “Law”), the secondary legislation enacted or to be enacted under the Law (such as regulations and communiqués), and binding decisions taken or to be taken by the Personal Data Protection Board. With full awareness of this responsibility, and in our capacity as Data Controller, as defined in the Law, we process your personal data as explained below and within the limits prescribed by the legislation.


1. Information Regarding the Data Controller

In accordance with the Law, FEN EĞİTİM KURUMLARI A.Ş., registered with the Istanbul Trade Registry and holding tax ID number 9480453116, located at Postane Mahallesi, Halis Bey Sokak, No: 5, Tuzla, Istanbul, acts as the Data Controller.


2. Purposes for Processing Personal Data

Your personal data is processed by the Company for the following purposes:

  • Ensuring that commercial, cultural, and educational activities are carried out in compliance with legislation and Company policies,

  • Performing necessary tasks by relevant business units and executing operational processes accordingly,

  • Determining, planning, and implementing the Company's short, medium, and long-term commercial strategies,

  • Designing and executing human resources processes,

  • Fulfilling legal obligations arising from applicable legislation,

  • Managing customer relations and corporate communication processes,

  • Ensuring the commercial and legal security of real and legal persons with whom the Company maintains business relations.

Processing is conducted in accordance with the principles of legality, good faith, purpose limitation, data minimization, and proportionality, and always within the scope of the Law.


3. Transfer of Personal Data

To ensure uninterrupted execution of the above-mentioned purposes and business operations, your personal data may be transferred in accordance with Articles 8 and 9 of the Law to:

  • Legally authorized public institutions and judicial/administrative authorities,

  • Legal entities and individuals permitted by applicable legislation,

  • Regulatory and auditing authorities,

  • Contracted payment institutions for financial obligations,

  • Business partners and suppliers when necessary,

  • Institutions governed by the Ministry of National Education and relevant legal frameworks,
    with appropriate security measures in place.


4. Method and Legal Grounds for Collecting Personal Data

Your personal data may be collected through verbal, written, or electronic means, either automatically or non-automatically, by authorized Company employees and units. Categories of collected data include:

  • Identity, contact, location, personnel, legal, financial, visual/audio records, educational, health, and security data.

The legal grounds include:

  • Explicit stipulation in laws (Article 5/2-a),

  • Necessity for the establishment or performance of a contract (5/2-c),

  • Fulfillment of legal obligations (5/2-ç),

  • Public disclosure by the data subject (5/2-d),

  • Necessity for the establishment, exercise, or defense of legal claims (5/2-e),

  • Legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed (5/2-f).

Special categories of personal data that do not fall within these exceptions will be processed only with your explicit consent, per Article 5/1 of the Law.

Health data, classified as sensitive personal data, may be processed by occupational safety experts or workplace physicians who are under a confidentiality obligation, based on the grounds specified in Article 6/3 of the Law, such as protection of public health, preventive medicine, medical diagnosis, treatment, and management of healthcare services.

For marketing and promotional activities, personal data may be processed upon your explicit consent, per Article 5/1, and used for sending informative commercial electronic messages regarding campaigns, offers, and promotions.


5. Data Subject Rights Under the Law

As a data subject, you may apply to FEN KOLEJİ at any time to request:

  • Information about whether your personal data is being processed,

  • Details if your data has been processed,

  • The purpose of processing and whether the data is being used in line with this purpose,

  • Information about third parties to whom your data has been transferred (domestically or internationally),

  • Correction of incomplete or inaccurate data,

  • Deletion or destruction of your data under the conditions defined in Article 7,

  • Notification to third parties of any corrections or deletions carried out under Articles 11(d) and 11(e),

  • Objection to automated decision-making processes that result in an unfavorable outcome,

  • Compensation if you suffer damages due to unlawful data processing.

You can exercise these rights by completing the application form available at https://www.fenkoleji.k12.tr/ and submitting it:

  • In person or by notary to: Postane Mahallesi, Halis Bey Sokak, No: 5, Tuzla, Istanbul

  • Via email with your secure electronic or mobile signature from your KEP address to: fenegitimkurumlari@hs01.kep.tr or kvkk@fenkoleji.com

Written responses will be provided free of charge up to ten pages; a fee of 1 TRY per page will be charged beyond that. If the response is delivered via CD or flash drive, only the cost of the medium will be charged.

Applications must include your name, surname, signature, Turkish ID number, address, email or phone number, and subject of request. If applying on behalf of another person, you must present a notarized power of attorney.


Disclaimer

FEN KOLEJİ reserves the right to update this disclosure statement in line with changes to the Law, secondary legislation, or Board decisions. Any such changes will become effective as of the date they are notified.

For more detailed information or to review our processing activities as recorded in the VERBIS (Data Controllers Registry Information System), please contact us or visit the relevant link on our website.

WhatsApp