Our company, trading under the name Recep Tayyip Erdoğan University and Turkish-German University Technology Development Zone Management Joint Stock Company (the Company), carries out personal data processing in the capacity of Data Controller under Personal Data Protection Law No. 6698 (the Law) and related legislation.
The Company provides information through privacy notices prepared specifically for the processes concerned, covering employees, job candidates, visitors, data subjects whose camera recordings are processed, employees of startup companies, and data subjects whose personal data is processed through cookies. Some of these notices are made available on our website, while others are presented physically and directly to the data subject before the processing takes place.
For processing activities relating to data subjects other than those listed, we provide this privacy notice for your information.
- Your Personal Data and the Purposes of Processing;
For our customers and potential customers: name and surname, address, email, telephone number, date of birth, project information, institution and title, the workspace requested in the application, nationality, social media accounts, website, address, tax office, tax identification number, education and certificate data, signature circular data; and for the shareholders of these persons: name and surname, Turkish ID number, gender, place of birth, date of birth, email, telephone number, nationality, education and certificate data; are processed for the purposes of conducting activities in compliance with legislation, carrying out and auditing business activities, carrying out goods and service production and operational processes, establishing the contract and performing obligations arising from it, providing after-sales support services for goods and services, and carrying out strategic planning activities.
For our suppliers and their employees: name and surname, Turkish ID number, tax identification number, tax office, address, email, telephone number, bank account details, employee title and signature circular are processed for the purposes of carrying out communication activities, carrying out goods and service procurement processes, establishing the contract and performing obligations arising from it, and ensuring the security of the data controller’s operations.
For project evaluators: name and surname, institution and title, IP address, Turkish ID number, bank IBAN, telephone number and email details are processed for the purposes of carrying out audit activities, conducting activities in compliance with legislation, carrying out communication activities, carrying out and auditing business activities, carrying out goods and service production and operational processes, and carrying out goods and service procurement processes.
For those delivering training or consultancy within our Company: name and surname, institution and title, photograph, camera recording, IP address, telephone number and email details are processed for the purposes of carrying out training activities, carrying out communication activities, carrying out business continuity activities, carrying out sponsorship activities, conducting activities in compliance with legislation, carrying out and auditing business activities, carrying out goods and service production and operational processes, and establishing the contract and performing obligations arising from it.
For those requesting a newsletter subscription: email address is processed for the purposes of carrying out training activities and carrying out communication activities.
Data reaching our Company is entered into the system only to the extent necessary. Excess information is not recorded in the system, and is either deleted or anonymized. Such data may be used for statistical purposes.
- Transfer of Your Personal Data:
Where the conditions set out in Articles 5 and 6 of the Law are met, our Company may transfer personal data to third parties on the grounds of fulfilling legal obligations, the necessity of processing for our Company’s legitimate interests, and the necessity of processing for the establishment and performance of a contract, and in certain cases on the basis of your explicit consent. The third parties to whom transfers may be made are: the Ministry of Industry and Technology and its affiliated institutions and organizations, as required by the legislation to which our Company is subject; and, in the event of any dispute, courts, enforcement offices, the law, financial consultancy and IT firms from which advice is obtained, suppliers, shareholders, affiliates and subsidiaries, and other authorized institutions and organizations. A data confidentiality undertaking is obtained from the private natural and legal persons to whom transfers are made, and only as much data as the purpose requires is shared.
In addition, in posts made from our Company’s social media accounts, the data of those delivering training within our Company is transferred abroad, with the data subject’s explicit consent, because the servers of the social media applications used are located abroad.
- The Method of Collection and Legal Basis of Your Personal Data
Your personal data described above may be collected orally, in writing or electronically, by automated or non-automated means, through offices, camera recordings, the website and the cookies used on it, social media channels, SMS channels, software dedicated to our Company’s activities, mobile applications and similar means via business and program partners.
Our processing activities are based on one or more of the following legal grounds under the Law: Article 5/2-ç, fulfilment of the data controller’s legal obligations; Article 5/2-c, the establishment and performance of a contract; Article 5/2-f, the legitimate interests of the data controller; Article 5/2-a, express provision in the laws; and Article 5/1, explicit consent.
- Your Rights Regarding Your Personal Data
Under Article 11 of the Law you have the right to: learn whether your personal data is being processed; request information about the data processed; learn the purposes of processing and ask whether the data is used in line with those purposes; request information about domestic and international transfers of the data; request the correction of personal data that is incomplete or processed incorrectly; object to a conclusion being drawn against you through the analysis of the data; and request compensation for damage suffered as a result of unlawful processing.
To exercise these rights you can complete the Data Subject Request Form available on our Company’s website and submit it to us. You can also send us a written application setting out your request to exercise these rights through our Company’s contact channels.
