Data Protection

06.04.2018

 

PRIVATE SANKT GEORG AUSTRIAN HIGH SCHOOL AND COMMERCIAL SCHOOL

PROCESSING OF PERSONAL DATA

PRIVACY NOTICE

 

Our school declares that it has adopted the following principles for the processing, protection and transfer, under Personal Data Protection Law No. 6698 and the related legislation, of personal data belonging to students, parents, staff, job applicants, officers, employees and shareholders of companies from which we receive services or with which we cooperate, and all other natural persons connected with our school.

 

GENERAL PRINCIPLES FOR PROCESSING PERSONAL DATA

 

Our school, acting as the data controller, may process personal data in accordance with the following principles set out in Article 4 of Personal Data Protection Law No. 6698.

 

  1. Compliance with the law and the rules of good faith;
  2. Accuracy and, where necessary, keeping data up to date;
  3. Processing for specific, explicit and legitimate purposes;
  4. Being relevant, limited and proportionate to the purposes of processing;
  5. Retention for the period prescribed by the relevant legislation or necessary for the purposes of processing.

COLLECTION AND PROCESSING OF PERSONAL DATA

 

Where necessary under the Personal Data Protection Law, our school, as data controller, may collect all personal data, including special categories of personal data, through automated or non-automated methods, orally, in writing or electronically, through our school, website, email correspondence and other similar means.

 

Personal data to be collected or already processed under Articles 5 and 6 of the Personal Data Protection Law must be processed for purposes prescribed by law and for the following or similar purposes.

 

  1. Carrying out procedures and fulfilling obligations required by legislation or contracts, particularly private education legislation and the legislation of the Ministry of National Education;
  2. Handling applications and outcomes for free or discounted tuition and providing information about meetings, consultation days and events held at our school;
  3. Communicating with parents and students and making necessary recommendations and notifications concerning students' conduct and progress;
  4. Providing information in emergencies;
  5. Providing security services;
  6. Ensuring the security of the website, other electronic systems and physical premises, and sending emails;
  7. Sharing personal data with judicial authorities in connection with investigations, prosecutions and legal proceedings;
  8. Providing information on matters requested by the data subject;
  9. Responding to complaints and notifications from the data subject;
  10. Ensuring and improving information exchange, coordination and efficiency between school departments and official institutions;
  11. Sharing information with authorised persons on matters such as health, safety and education when required;
  12. Meeting staffing needs, conducting and improving recruitment processes, assessing and finalising job applications and communicating with applicants.

TRANSFER OF PERSONAL DATA

 

In accordance with Articles 8 and 9 of the Personal Data Protection Law, personal data may be transferred, for the purposes and under the principles stated above, to our authorised representatives and advisers, third parties from whom we obtain services as required by law, companies that process and retain our school data, suppliers, legally authorised public institutions and private persons.

 

RIGHTS OF THE DATA SUBJECT

 

Under Article 11 of the Personal Data Protection Law, data subjects have the right to:

 

  1. Learn whether their personal data is being processed;
  2. Request information if their personal data has been processed;
  3. Learn the purpose of processing their personal data and whether it is used in accordance with that purpose;
  4. Know the third parties to whom personal data is transferred in Türkiye or abroad;
  5. Request correction of incomplete or inaccurate personal data and request that third parties to whom the data has been transferred be notified of the correction;
  6. Request deletion or destruction of personal data when the reasons for processing no longer apply, even if it was processed in accordance with the Personal Data Protection Law and related legislation, and request that third parties to whom the data was transferred be notified;
  7. Object to a result arising against them through the analysis of processed data exclusively by automated systems;
  8. Claim compensation for damage caused by unlawful processing of personal data .

Under Article 13(1) of the Personal Data Protection Law, you may submit a request to exercise the above rights to our private educational institution in writing or by other methods determined by the Personal Data Protection Board.

 

You may submit your request concerning the rights listed in Article 11 of the Personal Data Protection Law in writing to principal(at)sgaustriank12tr.com.