Ibn Haldun University
Privacy Policy and Clarification Text Regarding
the Protection of Personal Data
Identity of the Data Controller
- Title: Ibn Haldun University
- Website: https://www.ihu.edu.tr
- Telephone Number: 0212 692 02 12
- E-Mail Address: info@ihu.edu.tr
- Address: Başak Mahallesi, Ordu Caddesi, No:3, Başakşehir/İstanbul
- KEP (Registered Electronic Mail) Address: ihu@hs01.kep.tr
General Principles of Data Protection
We process your personal data in compliance with the general principles of data protection law. These principles are as follows:
- Processing of personal data transparently, lawfully, and fairly;
- Processing of personal data for specific, explicit, and legitimate purposes;
- Processing of personal data strictly limited to the specified purposes;
- Keeping data accurate and up to date;
- Retention of data for the period interconnected with the purpose of data processing;
- Storing data securely.
What Type of Data Do We Collect?
Within the scope of the activities we conduct as Ibn Haldun University (“University”), we process your personal data in accordance with the general principles prescribed in Article 4 of the Personal Data Protection Law (“KVKK”) and Article 5 of the General Data Protection Regulation (GDPR).
The personal data we process are as follows:
- Your Identity Information: Name, surname, trade name for sole proprietorships, signature/authorized signatures list, Republic of Türkiye identity number, passport information, gender, date of birth;
- Your Contact Information: Telephone number, electronic mail address, business address and residential address information, telephone conversation records;
- Your Professional Experience Information: Duty/title, position, department of employment, institution of employment, CV, education information;
- Your Audio and Visual Records: Visual and audio records contained within photographs, videos, and voice recordings;
- Your Financial Information: Bank account-IBAN information, amount information, invoice information, enforcement-debt information;
- Your Legal Transaction Information: Information contained within correspondence with judicial authorities, personal data within lawsuit-enforcement files;
- Your Request and Complaint Information.
From Where Do We Obtain This Data?
We obtain the data we process via:
- Automated means through the internet addresses belonging to our University, primarily our website https://www.ihu.edu.tr, and the forms located on these addresses;
- Partially automated means through CIMER (Presidency Communication Center);
- Non-automated and partially automated means through lawsuit/enforcement files and notifications;
- Non-automated means through the documents you have submitted to us;
- Non-automated and partially automated means from the relevant public institutions and organizations;
- Partially automated means via electronic mail;
- Non-automated means verbally;
- Non-automated means through documents physically delivered to us;
- Partially automated and non-automated means through applications made;
- Non-automated means through contracts;
- Automated means through the call center.
What Are Our Purposes in Processing This Data and Which Legal Condition Do We Rely On?
The data processing conditions prescribed within the scope of the KVKK are as follows:
- The existence of explicit consent (“Art. 5/1, Art. 6/3-a”).
- Being clearly prescribed in laws (“Art. 5/2-a, Art. 6/3-b”).
- Being mandatory for the protection of the life or physical integrity of the person or another person, who is unable to express their consent due to actual impossibility or whose consent is not granted legal validity (“Art. 5/2-b”).
- Provided that it is directly related to the establishment or performance of a contract, being necessary to process the personal data of the parties to the contract (“Art. 5/2-c”).
- Being mandatory for the data controller to fulfill its legal obligation (“Art. 5/2-ç”).
- Having been made public by the data subject themselves (“Art. 5/2-d”).
- Data processing being mandatory for the establishment, exercise, or protection of a right (“Art. 5/2-e”).
- Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing being mandatory for the legitimate interests of the data controller (“Art. 5/2-f”).
We request this data obtained from you to realize our following purposes:
- Your Identity Information;
- For the purpose of verifying your identity,
(KVKK, Art. 5/2-ç, Art. 5/2-f),
- For the purpose of conducting and auditing business activities,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of conducting communication and correspondence activities,
(KVKK, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-f),
- For the purpose of executing payments,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of fulfilling our legal obligations,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of following up legal and judicial processes,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of executing contract processes,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing invoicing processes,
(KVKK, Art. 5/2-ç),
- For the purpose of creating current accounts and conducting current account reconciliations,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing request and complaint processes,
(KVKK, Art. 5/2-f).
- Your Contact Information;
- For the purpose of conducting and auditing business activities,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of conducting communication and correspondence activities,
(KVKK, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-f),
- For the purpose of fulfilling our legal obligations,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of following up legal and judicial processes,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of executing contract processes,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing invoicing processes,
(KVKK, Art. 5/2-ç),
- For the purpose of creating current accounts and conducting current account reconciliations,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing request and complaint processes,
(KVKK, Art. 5/2-f).
- Your Professional Experience Information;
- For the purpose of conducting and auditing business activities,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of conducting communication and correspondence activities,
(KVKK, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-f),
- For the purpose of executing contract processes,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of following up legal and judicial processes,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e).
- Your Financial Information;
- For the purpose of conducting and auditing business activities,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing payments,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of following up legal and judicial processes,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of executing contract processes,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing invoicing processes,
(KVKK, Art. 5/2-ç),
- For the purpose of creating current accounts and conducting current account reconciliations,
(KVKK, Art. 5/2-c, Art. 5/2-f).
- Your Legal Transaction Information;
- For the purpose of conducting and auditing business activities,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of fulfilling our legal obligations,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of following up legal and judicial processes,
(KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e),
- For the purpose of executing contract processes,
(KVKK, Art. 5/2-c, Art. 5/2-f),
- For the purpose of executing invoicing processes,
(KVKK, Art. 5/2-ç).
- Your Request/Complaint Information;
- For the purpose of executing request and complaint processes,
(KVKK, Art. 5/2-f),
We process this data. The data processing conditions we rely upon while processing these data are specified in parentheses.
With Whom Do We Share the Data?
We may share the personal data we process with:
- Courts and authorized public institutions and organizations for the purpose of following up legal and judicial processes;
- Authorized public institutions and organizations for the purpose of fulfilling our legal obligations;
- Law firms for the purpose of conducting legal processes;
- Domestic or, if necessary, foreign banks for the purpose of conducting payment processes;
- The relevant affiliate company for the purpose of conducting request and complaint processes;
- Independent auditors for the purpose of conducting auditing processes;
- Relevant suppliers for the purpose of conducting and auditing business activities;
- Corresponding real and legal persons for the purpose of conducting necessary correspondence and communication activities.
We do not share personal data with unrelated and unauthorized third parties other than the specified third parties.
Storage and Destruction of Personal Data
As the University, we process and store your personal data in accordance with general principles, in a manner that is interconnected and proportionate to the purpose of processing, and in line with the purpose of processing your personal data.
We take all kinds of technical and administrative measures for the security of stored personal data, and we audit the compliance of the third parties to whom we transfer your data with these measures.
We store your personal data by taking into consideration factors such as the purpose and reason for processing, the period required by the relevant legislation, and our legal obligations.
If we no longer need your personal data according to the specified criteria and we have no legal obligation to store it, we destroy the personal data in question.
What Are Your Rights Within the Scope of KVKK
Data subjects have the right to apply to us and:
- Learn whether personal data is processed or not;
- Request information regarding this if personal data has been processed;
- Learn the purpose of processing personal data and whether they are used in accordance with their purpose;
- Know the third parties to whom personal data are transferred domestically or abroad;
- Request the rectification of personal data in the event that they are processed incompletely or inaccurately, and request the notification of the operation performed within this scope to the third parties to whom the personal data have been transferred;
- Request the erasure or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite having been processed in accordance with the Law and other relevant statutory provisions, and request the notification of the operation performed within this scope to the third parties to whom the personal data have been transferred;
- Object to the occurrence of a result against the person themselves by means of analyzing the processed data exclusively through automated systems;
- Request the indemnification of the damage in the event that they suffer damage due to the unlawful processing of personal data.
You may convey your requests regarding your rights in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
Your requests will be evaluated and concluded free of charge as soon as possible and ultimately within thirty (30) days at the latest.
In the event that the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board shall be taken as a basis.
Furthermore, if you wish to receive detailed information regarding your data processing processes, you may also apply to us.
