INFORMATION ON THE PROTECTION OF PERSONAL DATA AND EXPRESS CONSENT FORM

INFORMATION ON THE PROTECTION OF PERSONAL DATA

The personal data of all parents, students, teachers and all institutions, organizations, and third parties related to Kanaatkar Kardeşler Sanayi (the “Educational Institution”), regardless of their capacity or title, are processed and maintained in accordance with the Constitution of the Republic of Türkiye and Law No. 6698 on the Protection of Personal Data (“KVKK”).

Within the framework of KVKK, the personal data obtained by the Educational Institution through various channels and legal grounds are recorded and securely stored. These recorded and stored data may be shared and/or transferred to third parties when required by law, when permitted by applicable legislation, and/or based on the explicit consent of the data subject. The Educational Institution takes all necessary technical and administrative measures to ensure data security and prevent unauthorized access.

PERSONAL DATA TO BE PROCESSED AND STORED

For students enrolled and parents who enter into an education contract with the Educational Institution, the data listed below are collected:
photograph, nationality, religion, whether parents are biological/step, phone number, address, e-mail, marital status, profession, workplace information, civil registry information, custody decisions, information regarding the student’s siblings, documents and information on real estate or rental properties owned by parents for scholarship/financial aid assessments, rental valuation data, salary and income information, assets owned, and all other necessary information required to ensure the quality and continuity of the educational services.

If related to the enrolled student, the following data are collected: academic status, transcript, psychological conditions requiring attention, general health information, illnesses and genetic disorders within the family, vaccination information, blood type, allergies, and all health-related data that may be needed during treatment. All collected health data may be shared with the school doctor, authorized healthcare personnel, and—when required in emergencies—with authorized public bodies and relevant healthcare institutions, strictly in accordance with the law.

LEGAL GROUNDS AND PURPOSES FOR PROCESSING PERSONAL DATA

Personal data collected by the Educational Institution are processed in accordance with the following principles under KVKK:

1. Lawfulness and fairness
2. Accuracy and keeping data up to date when necessary
3. Processing for specified, explicit, and legitimate purposes
4. Being relevant, limited, and proportionate to the purposes of processing
5. Retention for the period required by relevant legislation or for the purpose for which the data are processed

Processing is carried out under the following legal grounds:

• When expressly permitted by law
• When necessary for the establishment or performance of a contract
• When required for the Educational Institution to fulfill its legal obligations
• When necessary for the establishment, exercise, or protection of a right
• When required for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed

Personal data may be processed for the following purposes:
ensuring the safety, health, and well-being of students; resolving issues students may experience (whether related to the Educational Institution or not); carrying out the Educational Institution’s commercial activities; ensuring the quality and continuity of the services provided under the concluded or future contracts; informing parents and students about developments within the institution; developing, organizing, planning, modifying, and improving the services provided; ensuring student and parent satisfaction; and enabling parents and students to benefit from the institution’s innovations, products, and services.

Data may be processed through automatic or non-automatic means, in compliance with applicable legal regulations.

METHOD OF COLLECTING PERSONAL DATA

The Educational Institution may collect personal data during or after the signing of the registration contract, in written or verbal form, electronically or physically, and through all other legal means, via its relevant units and departments.

TRANSFER AND SHARING OF PERSONAL DATA

Personal data collected and processed by the Educational Institution may be transferred to the Ministry of National Education, the Social Security Institution, other Ministries, Judicial Authorities, and all other public and private bodies authorized by law; and when necessary, to hospitals, clinics, healthcare institutions, doctors, nurses, and other healthcare professionals.

Within the scope of commercial activities of the Educational Institution and subject to legal requirements (excluding the student’s health data—which is Special Category Personal Data), personal data may also be shared with law offices, financial advisors, consultants, auditors, suppliers, business partners, and companies that are shareholders of or affiliated with the Educational Institution, and with third parties only where explicit consent exists.

Personal data are shared only to the extent necessary for the provision of contracted services.

Parents also give explicit consent for the Educational Institution (Özel Kalp İdol Akıl Anaokulu – KİDA) to send information via SMS, e-mail, or post within the legally permitted period, and for the student’s photographs to be used for promotional purposes in educational activities held within or outside the school.

DATA RETENTION PERIOD

Personal data may be processed and stored for the periods required by applicable legislation or until the purposes for processing cease to exist. Where legal or legitimate grounds no longer exist, the Educational Institution will delete or anonymize personal data in accordance with its data destruction and anonymization procedures.

In addition, data subjects retain the right to request deletion, destruction, or anonymization of their data under applicable legislation.

RIGHTS OF THE DATA SUBJECT

Regarding their personal data, data subjects have the following rights under Article 11 of KVKK:

1. To learn whether their personal data are processed
2. To request information regarding such processing
3. To learn the purpose of processing and whether the data are used in accordance with this purpose
4. To know the third parties to whom personal data are transferred domestically or abroad
5. To request the correction of incomplete or inaccurate data and to request notification of such correction to third parties
6. To request deletion or destruction of personal data under applicable legislation and to request notification of such deletion/destruction to third parties
7. To object to the occurrence of a result against them arising from analysis through automated systems
8. To claim compensation for damages arising from unlawful processing of personal data

PERSONAL DATA SECURITY

The Educational Institution has taken technical and administrative measures to:

• Prevent unlawful processing of personal data
• Prevent unlawful access to personal data
• Ensure the secure preservation of personal data

Such measures include confidentiality agreements with authorized personnel, technical encryption, secure storage of electronic data, and controlled physical access through authorized staff and electronic cards.

APPLICATION TO THE EDUCATIONAL INSTITUTION

Data subjects or their legal representatives (holding a notarized power of attorney) may submit their requests regarding their rights under KVKK with a signed written application, accompanied by proof of identity (identity card, driver's license, passport, or similar official document).

The Educational Institution will provide the necessary information and carry out the requested procedures in accordance with applicable legislation.

REQUEST FOR UPDATING INFORMATION

In case of any change in this Disclosure Statement, the effective date and content will be updated.
If you request deletion or destruction of personal data that must be retained under legal obligations, the Educational Institution will finalize your request free of charge as soon as possible and in any event within thirty (30) days, depending on the nature of the request. If processing the request requires additional cost, the fee determined by the Board will be charged.

RETENTION OF PERSONAL DATA AND SPECIAL CATEGORY PERSONAL DATA

Your personal data will be processed and stored for limited periods in accordance with the Data Controller’s Retention and Destruction Policy under Article 5/2 of KVKK.
Your special category personal data will be processed and stored for limited periods based on your explicit consent and in accordance with the Data Controller’s Retention and Destruction Policy under Article 6/2 of KVKK.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You may submit your requests under Article 11 of KVKK by sending a written application with your original signature and proof of identity to ……………… or by e-mail to ………………com, or through other application methods determined by the Board. Your request will be finalized as soon as possible and within 30 (thirty) days at the latest.
Detailed information can be found in our Personal Data Processing and Protection Policy at ………………com.tr.

EXPRESS CONSENT DECLARATION

I have read and understood the Disclosure Statement prepared in accordance with Law No. 6698 on the Protection of Personal Data.
I freely and explicitly consent to the processing and transfer of my personal data collected as described in the Disclosure Statement, for the purposes stated therein.

YES, I give explicit consent for a period of ………. (Please specify the duration), or until I withdraw my explicit consent.

Full Name:
Date:
Signature: