Privacy Notice on the Processing of Personal Data

Privacy Notice on the Processing of Personal Data under the Personal Data Protection Law

This Privacy Notice has been prepared by Hakkari University, acting as the data controller, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the applicable regulation governing the fulfilment of the obligation to inform data subjects.

Hakkari University takes appropriate measures to ensure that personal data belonging to all internal and external stakeholders associated with the University is processed, retained and protected in accordance with KVKK and applicable legislation.

As the data controller, Hakkari University may process the following categories of personal data to the extent necessary under applicable legislation:

• Identity Information
• Contact Information
• Location Information
• Personnel Information
• Legal Transaction Information
• Customer Transaction Information
• Physical Premises Security Information
• Transaction Security Information
• Risk Management Information
• Financial Information
• Professional Experience Information
• Visual and Audio Records
• Association Membership Information
• Foundation Membership Information
• Trade Union Membership Information
• Health Information
• Criminal Conviction and Security Measures Information
• Audit and Inspection Information
• Request and Complaint Management Information
• Vehicle and License Plate Information

1. Purposes of Processing Personal Data

Your personal data may be processed for purposes including:

• Conducting emergency management processes
• Conducting information security processes
• Conducting candidate employee, intern and student selection and placement processes
• Conducting employee candidate application processes
• Conducting employee satisfaction and engagement processes
• Fulfilling obligations arising from employment contracts and legislation
• Managing employee benefits and entitlements
• Conducting audit and ethics activities
• Conducting educational activities
• Managing access authorizations
• Ensuring compliance of activities with applicable legislation
• Conducting finance and accounting activities
• Conducting company, product and service loyalty processes
• Ensuring physical premises security
• Conducting assignment and appointment processes
• Conducting and monitoring legal affairs
• Conducting internal audit, investigation and intelligence activities
• Conducting communication activities
• Planning human resources processes
• Conducting and supervising business activities
• Conducting occupational health and safety activities
• Receiving and evaluating suggestions for improving business processes
• Ensuring business continuity
• Conducting logistics activities
• Conducting procurement processes for goods and services
• Conducting after-sales support processes
• Conducting sales processes for goods and services
• Conducting production and operational processes
• Conducting customer relationship management processes
• Conducting customer satisfaction activities
• Conducting organization and event management
• Conducting marketing analysis activities
• Conducting performance evaluation processes
• Conducting advertising, campaign and promotional activities
• Conducting risk management processes
• Conducting retention and archiving activities
• Conducting social responsibility and civil society activities
• Conducting contractual processes
• Conducting sponsorship activities
• Conducting strategic planning activities
• Tracking requests and complaints
• Ensuring the security of movable assets and resources
• Conducting supply chain management processes
• Conducting remuneration policy processes
• Conducting marketing processes for products and services
• Ensuring the security of data controller operations
• Conducting work and residence permit procedures for foreign personnel
• Conducting investment processes
• Conducting talent and career development activities
• Providing information to authorized persons, institutions and organizations
• Conducting management activities
• Creating and tracking visitor records

2. Method and Legal Basis for Collecting Personal Data

Your personal data may be collected by personnel authorized by Hakkari University through different methods depending on the relationship of internal and external stakeholders with the University and the relevant activities and transactions.

Personal data may be processed and recorded through automated or non-automated means, including electronic applications, mobile applications, websites, call centers, social media channels, contracts, undertakings, petitions, official records and similar physical or digital means.

The personal data collected may be processed and transferred within the scope of the conditions stipulated in Articles 5 and 6 of KVKK and for the purposes specified in this Privacy Notice.

3. Transfer of Personal Data

Personal data is processed in accordance with Law No. 6698 and applicable legislation, limited to the purposes specified in this Privacy Notice and in compliance with the general principles under Article 4, the conditions for processing personal data under Article 5 and the conditions governing special categories of personal data under Article 6 of KVKK.

Where necessary, personal data may be transferred to the University and its affiliated units, legally authorized natural or legal persons, business partners, subcontractors, suppliers, and domestic or international natural or legal persons from whom the University receives services or with whom it cooperates, subject to the conditions stipulated in Articles 8 and 9 of KVKK.

4. Retention and Disposal of Personal Data

Even where personal data has been processed in accordance with KVKK and other applicable legislation, it shall be deleted, destroyed or anonymized upon the request of the data subject or ex officio by the University when the reasons requiring its processing cease to exist.

Hakkari University provides the necessary administrative and technical infrastructure to comply with current and future legislation concerning the deletion, destruction and anonymization of personal data and with the University’s personal data retention and disposal policies.

University employees are also required to comply with applicable legislation and University policies and procedures relating to the retention and disposal of personal data.

5. Your Rights Regarding Personal Data

Pursuant to Article 11 of Law No. 6698 on the Protection of Personal Data, you have the right to:

• Learn whether your personal data is being processed.
• Request information if your personal data has been processed.
• Learn the purpose of processing your personal data and whether it is being used in accordance with that purpose.
• Know the third parties to whom your personal data has been transferred within Türkiye or abroad.
• Request correction of incomplete or inaccurate personal data.
• Request notification of such corrections to third parties to whom your personal data has been transferred.
• Request deletion or destruction of your personal data when the reasons requiring its processing cease to exist.
• Request notification of such deletion or destruction to third parties to whom your personal data has been transferred.
• Object to a result arising against you through the analysis of processed personal data exclusively by automated systems.
• Request compensation for damages arising from the unlawful processing of your personal data.

Application Procedure

Within the scope of Article 13(1) and the data subject rights set out in Article 11 of KVKK, you may submit your requests to Hakkari University by completing the KVKK Application Form and using one of the following methods:

Address:
Merzan Mahallesi Küçük Sanayi Sitesi Arkası
433. Sokak No:51
Merkez / Hakkari, Türkiye

Registered Electronic Mail (KEP):
hu@hs01.kep.tr

E-mail:
kvkk@hakkari.edu.tr

Applications duly submitted to the University will be concluded as soon as possible depending on the nature of the request and, in any event, within 30 days at the latest.

If the processing of the application requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

Applications must include:

• Name and surname
• Handwritten signature for written applications
• Turkish Republic identification number for Turkish citizens
• Nationality, passport number or identification number, if available, for foreign nationals
• Residential or business address for notification
• E-mail address, telephone number and fax number, if available
• Subject of the request

Relevant information and supporting documents should also be attached to the application.

The application and information request form can be accessed through the University’s Personal Data Protection Law webpage.