Protection of Personal Data

Hisar Academy Personal Data Processing Disclosure Statement

As Hisar School (Hisar Academy), we place the utmost importance on the security of your personal data. In this regard, we highly value the processing and protection of all personal data belonging to individuals associated with our institution, including those benefiting from our services, in compliance with the Law on the Protection of Personal Data No. 6698 (“KVK Law”). In full awareness of this responsibility, we process your personal data within the scope and limits prescribed by the relevant legislation, as outlined below, in our capacity as the “Data Controller” as defined in the KVK Law.

1) Data Controller and Representative

Pursuant to the KVK Law, your personal data may be processed by our institution as the data controller within the scope detailed below.

2) Collection, Processing, and Purpose of Processing Personal Data

Your personal data is processed by our institution in accordance with applicable legislation and institutional procedures to ensure the proper execution of operations by our departments, maintain school security, manage student processes, and implement human resources policies and procedures. This processing is carried out within the conditions and purposes specified in Articles 5 and 6 of the KVK Law.

3) Transfer of Processed Personal Data and Purpose of Transfer

Your collected personal data may be transferred to parents, students, alumni, shareholders, institutional authorities, third parties, business partners, suppliers, legally authorized public institutions (including the Ministry of National Education), and private entities, in accordance with the conditions and purposes specified in Articles 8 and 9 of the KVK Law. The purpose of such transfers is to ensure the proper execution of activities in compliance with legislation and institutional procedures, to maintain school security, to carry out student registration and other processes, and to implement human resources policies and procedures.

4) Method and Legal Basis for Collecting Personal Data

Depending on your relationship with our institution, your personal data may be collected through automatic or non-automatic means, including institutional units and offices, the alumni association, our website, social media channels, mobile applications, and similar verbal, written, or electronic channels. These data are processed and transferred in accordance with the conditions and purposes specified in Articles 5 and 6 of the KVK Law, as outlined in sections (2) and (3) of this disclosure statement. Additionally, when you use our website, visit our institution or website, or participate in educational programs, seminars, or events organized by our institution, your personal data may be processed.

5) Rights of the Personal Data Owner under Article 11 of the KVK Law

As the owner of personal data, you have the right to submit requests regarding your data, and our institution will process such requests free of charge within thirty (30) days, depending on the nature of the request. However, if the Personal Data Protection Authority imposes a fee, our institution will apply the fee schedule determined by the authority. Within this scope, personal data owners have the right to:

Inquire whether their personal data has been processed,

Request information if their personal data has been processed,

Learn the purpose of personal data processing and whether it has been used appropriately,

Know the third parties to whom personal data has been transferred domestically or internationally,

Request the correction of incomplete or inaccurate personal data and request notification of this correction to third parties to whom data has been transferred,

Request the deletion or destruction of personal data if the reasons for processing no longer exist, and request notification of this action to third parties to whom data has been transferred,

Object to an outcome derived from the exclusive processing of data by automated systems if such an outcome is unfavorable,

Request compensation for damages incurred due to the unlawful processing of personal data.

Under Article 13, Paragraph 1 of the KVK Law, you may submit your request regarding the exercise of your rights in writing or via other methods determined by the Personal Data Protection Authority. Since the Authority has not yet defined other methods, you must submit your request in writing in accordance with the KVK Law.

To exercise your rights under Article 11 of the KVK Law, you must submit a request with your identity verification documents and details of the specific right you wish to exercise. You can do so by:

Personally delivering a signed copy of the request form, along with identity verification documents, to Göktürk Merkez Mahallesi, İstanbul Cad. No.3, Eyüpsultan / İstanbul,

Sending it via a notary or using other methods specified in the KVK Law, or

Sending a secure electronically signed copy of the request form to info@hisarschool.k12.tr.