Özyeğin University Student Clarification Document Pursuant to the Law No: 6698 on the Protection of Personal Data

Özyeğin University takes the highest level of security measures to ensure that your personal data is processed in accordance with the law and to maintain your privacy.

Our objective is to inform you in the most transparent manner about the methods employed to collect your personal data, the purposes for which your personal data is processed, receiving parties, legal grounds for such processing, and your legal rights as per Article 10 of the “Law No: 6698 on the Protection of Personal Data” (“Law”).

1. Data Controller

This Clarification Document has been prepared by Özyeğin University (hereinafter referred to as the "University") to inform you about the processing, storage, and transfer of your personal data during the provision of our services, within the scope of Law No. 6698 on the Protection of Personal Data (hereinafter Law) and relevant legislation.

Your personal data is processed by Özyeğin University, as the Data Controller, for the purposes explained below.

2. Purposes of and Legal Grounds for the Processing of Personal Data

The following personal data of data subjects are obtained by the University through printed or online/electronic forms, personal declarations by data subjects, emails, and website systems. The personal data and personal data categories processed by Özyeğin University are as follows:

Identity Information: Name and surname, date of birth, place of birth, gender, nationality, citizenship, ID number, copy of the ID Card, and for foreign nationals: passport number,
Student Information: Student No, Signature
Contact Information: Telephone No, Mobile Phone Number, Home Phone, Email Address, Home Address
Audio-Visual Records: Photograph, Video Records, Audio Records
Educational Information: Alma Mater Information, Education Status, Level of Education, Start and End Date of the English Preparatory Program
Family Information: Name, Surname, Mobile Phone Number, Education Background, Retirement Information, Professional Information, Ownership Information
Health: Disease Information, Allergy - Medication Information, Disability Information
Health Certificate (Applicable to students applying for the Professional Flight and the Aviation Management Programs)
Military Status: Military Status, Postponement Reason, Deployment Date
High School Teacher Information: Name, Surname, Email Address, High School Name
EDP Security: IP Address, MAC Address, Internet Login-Logout Information without any transmitted or stored data content, username, password (encrypted), log records

Your personal data can be processed for the following purposes based on the following legal grounds:

To fulfill the educational, inspectional, or any other miscellaneous roles and responsibilities required by the Higher Education Law, the relevant secondary regulations, and the Higher Education Council (YÖK), to maintain teaching, learning, scientific research, publishing, and consulting activities, to establish educational rights arising from the higher education legislation and the University’s internal rules and regulations, to prepare and issue ID Cards, and to complete academic and administrative procedures; based on the legal ground that it is expressly provided for by the laws, and it is necessary for compliance with a legal obligation,
To inform university students/faculty/staff about academic and administrative processes, and send University-related announcements/daily updates via MyOzU, the University’s internal communication channel, to the institutional email addresses; based on the legal ground that processing of data is necessary for the legitimate interests pursued by the University,
To list, report, verify, analyze, and evaluate; to produce statistical and scientific information; to analyze your usage patterns on our website, mobile applications, and other communication channels, and to customize these channels for you; based on the legal ground that processing of data is necessary for the legitimate interests pursued by the University,
To meet legal obligations, and the demands or requirements of judicial or authorized regulatory bodies including to protect the safety of life and property of Özyeğin University students/faculty/staff/visitors, and to ensure compliance with the requirements stipulated hereunder; based on the legal ground that it is necessary for compliance with a legal obligation,
To determine the students to receive scholarships in order to complete scholarship processes; based on the legal ground that processing of data is necessary for the legitimate interests pursued by the University,
To keep records pertaining to any association, foundation, or NGO that your club is affiliated with as well as to keep legally required records if you are a member of one of the student clubs at the University; based on the legal ground that it is necessary for compliance with a legal obligation,
To enable our relevant units to take necessary actions and complete the relevant processes in order to make OZU’s services readily available to benefit from, and to ensure that the OZU carries out its activities; based on the legal ground that processing of personal data is necessary for the establishment or performance of the contract,
To analyze and improve our services in order to offer you better choices as Özyeğin University; to contact you for market research through the communication channels you directly shared with us; to complete and maintain your enrollment at the University; to manage and improve the University’s business and academic processes; and to offer access to these services within the scope of our educational activities; based on the legal ground that processing of data is necessary for the legitimate interests pursued by the University,
To complete the university enrollment/registration processes; based on the legal ground that it is expressly provided for by the laws,
To provide the due health conditions on the University campus, and to plan treatment services; based on the legal ground that express consent is granted,
To set and execute the University’s commercial and business strategies, and to that end, to plan and undertake the University’s financial operations, communication, market research and social responsibility activities, purchasing operations (purchasing requests, bid collection, evaluation, order, budgeting, contract), to perform internal system and application management operations, and to manage the University’s legal operations; based on the legal ground that processing of data is necessary for the legitimate interests pursued by the University.

Your personal data will be processed for the above mentioned purposes as per the terms and conditions for the processing of personal data stipulated in Article 5 and 6 of Law No:6698. Your personal data will be destructed as per the “Regulation on Erasure, Destruction, or Anonymization of Personal Data” once the intended purpose no longer exists.

3. Transfer of Processed Personal Data

Your personal data may be disclosed to the public authorities such as the Higher Education Council, and the Social Security Institution, and legally authorized public institutions and organizations such as ministries and judicial bodies, and where permitted by the legislation, partner consultants, institutions, third parties, partner organizations, payment system providers, and service providers whose services are used in educational processes and whose servers are located abroad for the main purposes of completing your enrollment process and granting scholarships awarded by the University; within the framework of the terms and conditions and legal purposes for personal data processing stipulated in Article 8 and 9 of the Law No:6698.

4. Personal Data Collection Methods

Your personal data are collected through printed, electronic forms and educational/administrative applications used for University enrollment/registration and other educational processes.

5. Legal Rights of the Data Owner

You may submit a request regarding your rights as the data owner, using one of the methods explained below. The University will proceed and conclude your request within 30 business days depending on the nature of the request. No fees will be assessed for the response.

On this note, you are entitled to the following regarding your personal data:

To learn whether or not your personal data has been processed, and if processed, to request information about such processing,
To inquire the reason for why your personal data is processed and whether or not your data has been used for the intended purposes,
To know the third persons to whom your personal data has been disclosed at home or abroad as well as the reason and content of such disclosure,
To have your personal data rectified if it is incomplete or inaccurate, or if the data has already been transferred to third parties, to have such rectifications notified to the respective third party that received the personal data,
To request the erasure or destruction of your personal data in a case in which the reasons for processing such data are no longer valid, even if such data has been processed in accordance with the provisions of Law No:6698 and other relevant laws, or if the data has already been transferred, to have such erasure/destruction notified to the respective third party that received the personal data,
To object to any negative consequences that might arise out of or in connection with an analysis performed on the processed personal data, using exclusively automated systems,
To demand compensation as per effective laws for any losses incurred due to the illegal processing of your personal data.

For your applications and requests regarding your personal data, you can fill out the Data Subject Application Form and submit it through the following channels:

By mail to the University’s address: “Nişantepe District, Alemdağ/Çekmeköy 34794, Istanbul”, with your physical signature and a copy of your identity card,
In person with a valid ID card at the University’s address: “Nişantepe District, Alemdağ/Çekmeköy 34794, Istanbul”,
By email at privacy@ozyegin.edu.tr with your mobile signature or secure electronic signature,
By email at the University’s registered email address (KEP) at ozyeginuniversitesi@hs1.kep.tr, with your secure electronic signature or mobile signature,
By email at privacy@ozyegin.edu.tr via your email address registered in the Özyeğin system, with your signature,

As per Communiqué on the Principles and Procedures for the Request to Data Controller, it is mandatory for the Data Subject to include the following information in their application: name, surname, signature if the application is in writing, Turkish identification number (passport number if the applicant is a foreign national), residential or workplace address for notification purposes, electronic mail address for notification purposes, if available, telephone number, fax number, and information regarding the subject of the request.

In their applications submitted to exercise the aforementioned rights, the Data Subject must clearly and explicitly specify the subject matter of the request and provide sufficient information regarding the right they seek to exercise. The required application information and documents must also be included in the application.

The subject of the request must pertain to the applicant personally. If acting on behalf of another, the applicant must be specifically authorized and must provide documentation of such authorization (power of attorney). Furthermore, the application must include the applicant's identity and address information, along with documents verifying the applicant's identity. Requests made by unauthorized third parties on behalf of others will not be considered.