KAHRAMANMARAS SUTCU IMAM UNIVERSITY
INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
This information text has been prepared by Kahramanmaraş Sütçü İmam University (University), acting as the “Data Controller”, in accordance with Article 10 of Law No. 6698 titled “Data Controller’s Obligation to Inform”, within the scope of the Law on the Protection of Personal Data No. 6698 (Law No. 6698), published in the Official Gazette dated April 7, 2016 and numbered 29677, and is for informational purposes only.
As a University, we attach great importance to ensuring the security and privacy of personal data belonging to all relevant individuals affiliated with the University and to processing and preserving this data in accordance with Law No. 6698. In accordance with our obligation to inform as the "Data Controller" under Law No. 6698, this informational text aims to inform relevant individuals about the identity of the data controller and their representative, if any, the purposes for which data will be processed, to whom and for what purposes the processed data may be transferred, the method and legal basis for data collection, and their other rights listed in Article 11 of Law No. 6698. has been prepared.
1. Data Controller
In accordance with Law No. 6698, as the University, acting as the “Data Controller”, we process the personal data of the relevant persons within the scope of the purposes explained below and within the limits determined by the relevant legislation.
2. Purposes for Processing Personal Data
Your personal data collected by the University must be in accordance with the law and rules of integrity, accurate and up-to-date when necessary, as stipulated by Law No. 6698. being, Personal data is processed for the purposes listed below, in accordance with the principles of being processed for specific, clear and legitimate purposes, being linked, limited and proportionate to the purpose for which it is processed, and being stored for the period stipulated in the relevant legislation or necessary for the purpose for which it is processed, and within the framework of the processing conditions of personal data specified in Articles 5 and 6 of Law No. 6698.
Your personal data;
a) Carrying out the educational, academic, administrative and business processes of our university and development,
b) In line with the purpose of carrying out the personnel policies of our University; carrying out the operations in accordance with the personnel policies of the University, providing suitable personnel for open positions, fulfilling the obligations within the framework of the Labor Law, Social Security Law and other legislation regulating business life and occupational health and safety and taking the necessary measures. to be taken,
c) Fulfilling legal and commercial obligations within the framework of contracts made or activities carried out with third parties or legal entities that have a business relationship with the University. for, University by work partner/customer/suppliers with made
Fulfillment of obligations arising from contracts, establishment of rights, protection of rights, commercial and legal evaluation processes, execution of financial affairs,
d) Carrying out the necessary work by the relevant units to benefit from the University services, contacting the relevant persons through the communication channels shared with the University, introducing the University and its activities, ensuring that the relevant persons benefit from the products and services offered by the University. to benefit from,
d) Meeting the obligations related to educational activities and supervision imposed by the Higher Education Law No. 2547 and the Council of Higher Education, continuing education, scientific research, publication and consultancy activities, establishing rights arising from educational activities within the scope of higher education legislation and internal University regulations,
to) To protect the life and property of all university stakeholders or to comply with the rules in this context; to fulfill legal obligations, requirements or requests of judicial bodies or authorized administrative organizations, to take necessary security measures (camera recordings, turnstile/card pass systems, data collected through visitor registration at the campus entrance and user internet access traces/logs used within the scope of authority) and legal measures and to transfer them to information technology infrastructures to achieve these purposes, to fulfill legal obligations in electronic or physical environments, and archiving,
f) To our university settled students record transactions And education duration along Carrying out all transactions to be carried out within the scope of education and training legislation,
g) Producing statistical and scientific information through listing, reporting, verification, analysis and evaluation, and using measurement and evaluation methods and surveys in order to increase the quality of the services provided, ensure their continuity, reduce their costs and ensure their efficient and healthy execution. arrangement,
g) Organizing and announcing events, courses, development programs, exhibitions, conferences, workshops, meetings, etc. by the university and recording these activities electronically when necessary,
h) Carrying out activities, announcing them and providing necessary communication to ensure that our graduates benefit from our University's social opportunities, events and job/career consultancy services. ensuring,
i) Being a member of one of the social groups/clubs within the university Sharing the necessary information with the relevant unit/department employees,
i) Services offered in places such as libraries, cafeterias, social and sports facilities etc. located on university campuses benefiting from,
j) Protection and fulfillment of students' rights and obligations within the scope of internship/practice training activities in units within the university or in organizations outside the university. ensuring,
k) Protection of public health, medical diagnosis, treatment and care services execution,
l) Relating to regulations in accordance with Health Ministry And other public organisation And organizations responding to requests,
m) Appointment management, planning the internal functioning of the hospital and managing,
n) Analysis for the purpose of improving healthcare services to be done,
he) Billing, identity verification, supply of medicines and medical supplies or devices, ö) Fulfillment of the relevant personnel procedures of our University employees to be brought,
p) Production and printing of ID cards and various academic and administrative procedures to be done,
r) Fulfilling legal and regulatory requirements, In line with its purposes, necessary security and legal measures are taken and processed in electronic or non-electronic environments in order to fulfill legal obligations.
3. To Whom and For What Purpose Can Processed Data Be Transferred?
Your personal data may be transferred to legally authorized public institutions and organizations such as the Council of Higher Education, the Social Security Institution, ministries, and judicial authorities, and to organizations, parties, contracted organizations, and payment system organizations with which it cooperates, where permitted by legislation, in accordance with the matters specified in Articles 8 and 9 of Law No. 6698, for the purposes of carrying out education, health, academic and administrative activities by our University, acting as the "Data Controller"; carrying out the necessary work by the relevant business units for you to benefit from the services offered; ensuring the legal and commercial security of our university and those who have a business relationship with our university; ensuring the physical security and supervision of university facilities and buildings in internal and external locations; carrying out legal compliance processes; and carrying out financial affairs.
In light of the principles stipulated in Article 4(2) of Law No. 6698, your personal data may be transferred abroad by the University only to persons and organizations residing in foreign countries with sufficient protection, as determined by the Personal Data Protection Board, or without explicit consent in the presence of the situations stipulated in Articles 5(2) and 6(3) of the Law, in accordance with the rules in Articles 8 and 9 of the Law. For countries where sufficient protection is determined and declared to be lacking, data may be transferred abroad only to cases where the data controllers in Türkiye and the relevant foreign country undertake in writing to provide adequate protection and where the permission of the Personal Data Protection Board for the relevant transfer can be obtained.
4. Personal Data Collection Method and Legal Reason
While this may vary depending on the services and activities provided by the University to its stakeholders, your personal data may be collected verbally, in writing or electronically by University units, departments, employees and real or legal persons from whom the University receives services, acting as "Data Processors", through automatic or non-automatic methods, contracts/information forms and other documents, automation software, websites, social media channels, mobile applications, security systems, education and training software, etc.
Your personal data is collected in order to provide our services in line with the purposes specified in Article 2 of this text and to enable the University to fully and accurately fulfill its contractual and legal responsibilities.
“In order to fulfill our legal responsibilities, our University, acting as the "Data Controller," may process your personal data in accordance with the personal data processing conditions stipulated in Articles 5 and 6 of Law No. 6698. In addition, your personal data may be processed to fulfill our legal obligations stipulated in the Health Services Fundamental Law No. 3359, the Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on the Operation of Inpatient Treatment Institutions, the Regulation on Personal Health Data, Law No. 1219 on the Practice of Medicine and its Branches, Ministry of Health regulations, and other relevant regulations.
5. Rights of the Personal Data Owner Listed in Article 11 of Law No. 6698
If personal data owners submit requests regarding their rights to our University using the methods outlined below, our University will process the request free of charge as soon as possible and within thirty days at the latest. However, if the process requires additional costs, our University will charge the fee set by the Personal Data Protection Board. In this context, the personal data owner shall:;
a) Whether personal data is processed or not learning,
b) Request information regarding your personal data if it has been processed don't,
c) The purpose of processing personal data and whether they are used in accordance with their purpose learning,
d) To know the third parties to whom personal data is transferred, either domestically or abroad,
d) Requesting correction of personal data in case it is processed incompletely or incorrectly and requesting that the process be carried out in this context by the third party to whom the personal data has been transferred. to be notified to persons don't want,
to) Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and requesting the notification of the action taken in this context to third parties to whom personal data has been transferred. don't want,
f) Processed data exclusively automatic systems by analysis to be done by means of objecting to the emergence of a result against oneself,
g) Personal data to the law against aspect processing due to loss to be visited in to demand compensation for the damage,has the rights.
Pursuant to Article 13 (1) of Law No. 6698, you may submit your request to our University regarding the exercise of your above-mentioned rights in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you may submit your application in writing, in accordance with Law No. 6698. In this context, the channels and procedures through which you can submit your written application to our University within the scope of Article 11 of Law No. 6698 are explained below.
You can fill out the Data Owner Application Form on the Kahramanmaraş Sütçü İmam University Website and deliver a signed copy in person, along with documents proving your identity, to the address “Kahramanmaraş Sütçü İmam University Rectorate, Avşar Campus, West Ring Road Blvd. No: 251/A 46050- Onikişubat/Kahramanmaraş”, or send it through a notary public or other methods specified in Law No. 6698, or fill out the relevant form. “ksu.kahramanmaras@hs01.kep.tr” address with a secure electronic signature You can forward.
We notify you as the “Data Controller” within the scope of the relevant Law.
Best regards.
Kahramanmaraş Sütçü İmam University.
Address: Kahramanmaraş Sütçü İmam University Rectorate Avşar Campus West Ring Road Blvd. No: 251/A 46050 Onikişubat/Kahramanmaraş
Phone: +90 (344) 300 10 00
Fax: +90 (344) 300 10 37