- Data Controller and Representative
Your personal data is processed by the data controller, Üsküdar American Academy, in accordance with the requirements of today's technology, within the framework of the procedures specified below.
- Purpose of Processing Personal Data and Legal Reasons
The information collected in all transactions to be carried out within the scope of education and training activities is processed for use in education and training service processes and for the purpose of carrying out the activities of the Institution in accordance with the law. The scope of these activities includes the work of business units, regulation of commercial and social policies, ensuring corporate functioning, ensuring data security and management of human resources processes.
- Places Where Processed Personal Data Are Transferred and Purpose of Transfer
Data may be transferred to Health and Education Foundation institutions, alumni associations, business partners, suppliers, subcontractors and, exceptionally, private individuals, as required by education and training services, in accordance with the Law. The purpose of processing personal data and the purpose of transferring data are parallel.
- Collection Method and Legal Reason for Personal Data
Your personal data is collected by our Institution through various methods, especially in written and electronic media through the Institution's networks, in order to carry out our education and training activities. Your personal data may be processed and transferred for the purposes specified in this Information Text, in accordance with the basic principles, data processing conditions and exceptions stipulated in the Law.
- Ways to Apply to Data Processor and Data Controller
In accordance with Article 11 of the Law, by applying to our Institution, your personal data; a) to learn whether it has been processed, b) to request information if it has been processed, c) to learn the purpose of processing and whether it is used in accordance with its purpose, d) to learn the parties to which it has been transferred domestically / abroad, e) to request correction if it has been processed incompletely / incorrectly, f) to comply with the Law. to request deletion/destruction in accordance with Article 7, even though it has been processed in accordance with clauses (e) and (f), g) to request that the transactions made in accordance with paragraphs (e) and (f) be notified to third parties to whom they have been transferred, h) to request that a result against you arise due to exclusive analysis by automatic systems. You have the right to object to the decision, i) to request compensation for the damage if you suffer damage due to unlawful processing.
- You can send us your information and application requests using the application form in the link below.
Our institution finalizes your requests free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires additional costs, a fee may be charged. Our institution may accept the request and process it, or it may reject the request in writing, explaining the reason.
- Your Rights Regarding Data Processing
In cases where the application made in accordance with the above-mentioned procedure is rejected, the response is found to be insufficient, or the application is not responded to in time; You have the right to file a complaint with the Personal Data Protection Board (“Board”) within thirty days following the notification of the response and, in any case, within sixty days from the date of application. However, before applying for a complaint, the remedy must be exhausted. Upon complaint or upon learning of a violation, the Board carries out the necessary investigations ex officio on matters within its field of duty. Upon complaint, the Board examines the request and responds to the relevant persons. If no response is given within sixty days from the date of the complaint, the request is deemed rejected. If the existence of a violation is detected as a result of the complaint or ex officio investigation, the Board decides that the unlawfulness detected will be remedied by the data controller and notifies the relevant parties. This decision shall be implemented without delay and within thirty days at the latest. The Board may decide to stop data processing or transfer of data abroad if irreparable or impossible damages occur and if there is a clear violation of the law.