PRIVACY NOTICE REGARDING PROCESSING OF VISITORS' PERSONAL DATA
BY ISTANBUL BILGI UNIVERSITY
a) Data Controller and Representative
In accordance with the Personal Data Protection Law No. 6698 ("Law No. 6698"), your personal data may be processed by Istanbul Bilgi University ("University") as the data controller within the scope explained below.
b) Purpose of Processing Personal Data
Your collected personal data will be processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the purposes of establishing the security of our University campus, managing access records of the personal data you transmit while using the internet access facility provided by our University to visitors, and fulfilling our obligations arising from legislation.
You can access detailed information about the purposes of processing your personal data by our University from the Privacy Notice Regarding Processing of Personal Data shared with the public at www.bilgi.edu.tr.
c) To Whom and For What Purpose the Processed Personal Data May Be Transferred
Your collected personal data may be transferred to our business partners, suppliers, affiliates, legally authorized public institutions and private persons for the purposes of managing access records, fulfilling our obligations arising from legislation and establishing the security of our University campus, limited to the purposes specified in the Privacy Notice Regarding Processing of Personal Data shared with the public at www.bilgi.edu.tr within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.
d) Method and Legal Reason for Personal Data Collection
Your personal data is collected by our University based on the legal reasons specified in items (b) and (c) above. In this process, your collected personal data is collected through your internet access within our University in electronic environment, through your identity document, through your license plate information, verbally or through closed-circuit cameras located within our campus. Your aforementioned personal data may be processed and transferred for the purposes specified in items (b) and (c) of this Privacy Notice within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
e) Rights of the Data Subject Listed in Article 11 of Law No. 6698
As data subjects, if you submit your requests regarding your rights to our University through the methods set out in the Privacy Notice Regarding Processing of Personal Data shared with the public at kisiselverilerim@bilgi.edu.tr, our University will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by our University.
In this context, personal data subjects have the right to:
- Learn whether their personal data is being processed,
- Request information if their personal data has been processed,
- Learn the purpose of processing of personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom personal data is transferred domestically or abroad,
- Request correction of personal data if it is incomplete or inaccurate, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
- Request deletion or destruction of personal data in the event that the reasons requiring its processing disappear, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
- Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
- Request compensation for the damage in case of loss due to unlawful processing of personal data.