Data Protection

In the application and counselling process we process the following personal data:

• Identity: name, surname, mother's and father's name, nationality; the information in your passport (passport number, date and place of birth, sex, expiry date).
• Contact: e-mail address, phone number, your province/city.
• Education: your current school, transcript, diploma and their translations, your preferred university and programme.
• Visual: passport-style photograph.
• Application and transaction: application number and status, counsellor and agency notes, our correspondence with you.
• Transaction security: IP address, browser information, session and security cookies, e-mail verification records, the date of your declaration regarding this notice and the version of the notice.

We do not ask for special categories of personal data (health, religion, ethnic origin, biometric data, etc.). If a document you upload contains such data and it is not needed for the application, please cover that part before uploading.

Your personal data is processed for the following purposes:

• Receiving and evaluating your application and forwarding it to the educational institutions you choose.
• Providing educational counselling; supporting you in the application, admission, enrolment, visa and accommodation processes.
• Contacting you about the status of your application and providing the application tracking service.
• Checking that the documents you upload are legible and consistent with the information in the form. This check is partly performed by automated software; the decision on your application is always made by a counsellor.
• Carrying out the service contract, invoicing and agency commission processes.
• Ensuring information security and preventing misuse and the use of forged documents.
• Fulfilling legal obligations, responding to requests from competent authorities and protecting rights in possible disputes.
• Only if you give separate consent: sending commercial electronic messages about study programmes, scholarships and campaigns.

Your personal data is processed on the following legal grounds listed in Article 5 of the KVKK:

• Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c): receiving, evaluating and forwarding your application to educational institutions and providing the counselling service.
• Processing is necessary for us to comply with a legal obligation (Art. 5/2-ç): keeping invoices and commercial records, providing information to competent authorities.
• Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e): keeping application, correspondence and declaration records.
• Processing is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed (Art. 5/2-f): information security, prevention of misuse and document checks.
• Your explicit consent (Art. 5/1) and your approval under Law No. 6563: only for sending commercial electronic messages. This consent is optional and is not a condition of your application.

The statement "I have read the Data Protection Notice" in the application form is not explicit consent; it shows that this notice has been provided to you.

Your personal data is collected electronically through the application, contact and application tracking forms on our website and mobile applications, the documents you upload and e-mail correspondence, and, if you applied through an agency, by that agency. Transaction security data is collected automatically through server logs and essential cookies while you use the site.

For the purposes above and to the extent necessary, your personal data may be transferred to the following recipients:

• The universities and language schools in Türkiye you apply to: to evaluate your application (Art. 5/2-c).
• If you applied through an agency, that agency: to inform it about the status of your application (Art. 5/2-c).
• Competent public authorities: within the scope of legal obligations and lawful requests (Art. 5/2-ç).
• Our service providers (server hosting, e-mail delivery): only to provide the service, on our instructions and as data processors.
• Our legal and financial advisers: to protect rights and comply with legal obligations.

The servers of our e-mail delivery infrastructure are located abroad ([DOLDURULACAK: service provider and country]). This transfer is made on the basis of the standard contract published by the Personal Data Protection Board under Article 9 of the KVKK ([DOLDURULACAK: date the standard contract was signed and notified to the Board]). If you applied through an agency located abroad, information about the status of your application is transferred to that agency occasionally and only to the extent necessary for the performance of the contract with you (Art. 9/6-c).

Your personal data is kept for as long as necessary for the purpose for which it is processed and for the periods required by the applicable legislation; at the end of these periods it is deleted, destroyed or anonymised. Your application and document data is kept for [DOLDURULACAK] months from the last action on your application; when this period ends, your application is anonymised and the documents you uploaded are deleted. Invoices and commercial records are kept for 10 years under the Tax Procedure Law and the Turkish Commercial Code. Declaration and consent records are kept for the statutory limitation period to protect the relevant rights.

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

• learn whether your personal data is processed,
• request information about it if it has been processed,
• learn the purpose of processing and whether the data is used in line with that purpose,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate,
• request its deletion or destruction under the conditions of Article 7 of the KVKK,
• request that correction, deletion and destruction be notified to the third parties to whom the data was transferred,
• object to a result against you arising from the analysis of your data exclusively by automated systems,
• claim compensation if you suffer damage because of unlawful processing.

You can withdraw your consent to commercial electronic messages at any time without giving a reason.

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests about your rights through one of the channels below, stating your name, surname, nationality, passport number, address for notification, e-mail address and phone number (if any) and the subject of your request:

• By wet-signed letter, in person or through a notary: İstanbul, Türkiye
• By registered electronic mail (KEP): [DOLDURULACAK]
• From the e-mail address you used in your application and registered in our system: info@turanligrup.com

Your request will be concluded free of charge within 30 days at the latest, depending on its nature; if the process requires an additional cost, the fee in the tariff set by the Board may be charged. If your request is rejected, you find the answer insufficient or no answer is given in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of the date of your application.