Your personal data that you have shared with Istanbul Galata University, which has the title of "Data Controller" within the scope of the Law on the Protection of Personal Data No. 6698 ("KVKK"), may be processed by our University for the purposes and principles set forth below, provided that it complies with the principles set forth in the Law and secondary legislation1 and to third parties.

 1- Collection Method of Your Personal Data: Your personal data is collected verbally, in writing or electronically, by automatic or non-automatic methods, through our University's website, social media channels, mobile applications and similar means. Your personal data, training, seminars, courses, conferences, etc. provided by our University. As long as you benefit from the services, it can be collected, updated and processed when you participate in organizations organized by our University, when you apply for a job at our University, when you call our university's call center, when you visit our university campuses, website or social media accounts.

 2- Purpose and Reason for Processing Your Personal Data: Your Personal Data that you have submitted to our University, as the data controller, is carried out by our University, to promote our University and our education programs, to carry out research and development activities in relation to the education offered, to evaluate student satisfaction, to evaluate the quality of education, to conduct audit and data analysis, to shape promotional activities, to inform about human resources policies. It is processed for purposes and reasons such as conducting research and fulfilling our legal obligations.

3- Transfer of Your Personal Data: Your collected personal data; Within the framework of the above-mentioned reasons, purposes and regulations in the Law; As it will be used internally by our university, to the Bulut Education Foundation, its officials and members of the board of trustees, the officials of our University and the members of the board of trustees, the Social Security Institution, the Higher Education Institution and other legally authorized public institutions, the institutions and organizations we cooperate with in order to carry out our activities, data storage Domestic/foreign persons and institutions whose services we benefit from, physical server and/or cloud services for which we receive services, domestic/foreign companies from which we receive services for the sending of commercial electronic messages, contracted banks, internationally certified payment institutions, various domestic/foreign advertisements. companies, agencies and survey companies or other domestic/foreign business partners, legally authorized public institutions and private individuals in the country and abroad within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK. 1 Pursuant to the KVKK, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, of personal data in whole or in part by automated means or by non-automatic means provided that it is a part of any data recording system, Any operation performed on the data, such as classification or prevention of its use, is considered as "processing of personal data".

¹ KVKK uyarınca, kişisel verilerin tamamen veya kısmen otomatik olan ya da herhangi bir veri kayıt sisteminin parçası olmak kaydıyla otomatik olmayan yollarla elde edilmesi, kaydedilmesi, depolanması, muhafaza edilmesi, değiştirilmesi, yeniden düzenlenmesi, açıklanması, aktarılması, devralınması, elde edilebilir hâle getirilmesi, sınıflandırılması ya da kullanılmasının engellenmesi gibi veriler üzerinde gerçekleştirilen her türlü işlem “kişisel verilerin işlenmesi” olarak kabul edilmektedir.