Information on the Processing and Transfer of Personal Data

Your personal data that you have shared with Istanbul Galata University, which has the title of "Data Controller" within the scope of the Law on the Protection of Personal Data No. 6698 ("KVKK"), may be processed by our University for the purposes and principles set forth below, provided that it complies with the principles set forth in the Law and secondary legislation1 and to third parties.


 1- Collection Method of Your Personal Data: Your personal data is collected verbally, in writing or electronically, by automatic or non-automatic methods, through our University's website, social media channels, mobile applications and similar means. Your personal data, training, seminars, courses, conferences, etc. provided by our University. As long as you benefit from the services, it can be collected, updated and processed when you participate in organizations organized by our University, when you apply for a job at our University, when you call our university's call center, when you visit our university campuses, website or social media accounts.


 2- Purpose and Reason for Processing Your Personal Data: Your Personal Data that you have submitted to our University, as the data controller, is carried out by our University, to promote our University and our education programs, to carry out research and development activities in relation to the education offered, to evaluate student satisfaction, to evaluate the quality of education, to conduct audit and data analysis, to shape promotional activities, to inform about human resources policies. It is processed for purposes and reasons such as conducting research and fulfilling our legal obligations.


3- Transfer of Your Personal Data: Your collected personal data; Within the framework of the above-mentioned reasons, purposes and regulations in the Law; As it will be used internally by our university, to the Bulut Education Foundation, its officials and members of the board of trustees, the officials of our University and the members of the board of trustees, the Social Security Institution, the Higher Education Institution and other legally authorized public institutions, the institutions and organizations we cooperate with in order to carry out our activities, data storage Domestic/foreign persons and institutions whose services we benefit from, physical server and/or cloud services for which we receive services, domestic/foreign companies from which we receive services for the sending of commercial electronic messages, contracted banks, internationally certified payment institutions, various domestic/foreign advertisements. companies, agencies and survey companies or other domestic/foreign business partners, legally authorized public institutions and private individuals in the country and abroad within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK. 1 Pursuant to the KVKK, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, of personal data in whole or in part by automated means or by non-automatic means provided that it is a part of any data recording system, Any operation performed on the data, such as classification or prevention of its use, is considered as "processing of personal data".


1 KVKK uyarınca, kişisel verilerin tamamen veya kısmen otomatik olan ya da herhangi bir veri kayıt sisteminin parçası olmak kaydıyla otomatik olmayan yollarla elde edilmesi, kaydedilmesi, depolanması, muhafaza edilmesi, değiştirilmesi, yeniden düzenlenmesi, açıklanması, aktarılması, devralınması, elde edilebilir hâle getirilmesi, sınıflandırılması ya da kullanılmasının engellenmesi gibi veriler üzerinde gerçekleştirilen her türlü işlem “kişisel verilerin işlenmesi” olarak kabul edilmektedir.


4- Your Rights as Data Owner: By applying to our University, which is the Data Controller, regarding the processing of your Personal Data:

  1. Learning whether your personal data is processed or not,
  2. If your personal data has been processed, requesting information about it,
  3. To learn the purpose of processing your personal data and whether they are used in accordance with the purpose, (Knowing the third parties to whom your personal data is transferred, in the country or abroad,
  4. Requesting correction of your personal data if it is incomplete or incorrectly processed,
  5. Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law,
  6. Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) above, to the third parties to whom your personal data has been transferred,
  7. Objecting to the emergence of a result against you by analyzing the processed data exclusively through automated systems, and
  8. We present to your information that you have the right to demand the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data.


You can submit your requests regarding your above-mentioned rights with a petition to our University's ………………………………………………………. You can personally forward it to the address of the Data Controller or to the email address

İstanbul Galata Üniversitesi




I have duly provided the letter "Information Regarding the Processing and Transfer of Personal Data" submitted to me in accordance with the Law on the Protection of Personal Data No. 6698, on the date I specified below; a suitable environment has been established for me to read and understand the text; that I have read, examined, evaluated the article in question and knowingly and understandingly accept all the matters stated above; I freely consent to the collection, processing and transfer of my personal data abroad, if necessary, for all the purposes and reasons stated above.