SIVAS UNIVERSITY OF SCIENCE AND TECHNOLOGY
INFORMATION NOTICE
(REGARDING THE PROCESSING OF PERSONAL DATA BY THE DATA CONTROLLER)
Sivas University of Science and Technology (“University”), located at Yenişehir Mahallesi, Kardeşler Caddesi No:7/1, Sivas/Merkez, processes, stores, and transfers all types of personal data in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), prioritizing the security of personal data.This Information Notice has been prepared pursuant to Article 10 of the Law titled “Obligation of Data Controller to Inform,” regarding personal data collected, stored, and processed by the University as the “Data Controller.”
PURPOSE OF PROCESSING PERSONAL DATA
Under the Law, personal data is defined as any information relating to an identified or identifiable natural person. Within this scope, all such data is evaluated in compliance with the relevant legislation and is collected, processed, and stored as follows:
The University collects and processes personal data through administrative and academic units to create and maintain records required for higher education activities and to ensure the continuity of educational services.
The University collects and processes personal data of students, administrative and academic staff, and employees of suppliers/subcontractors in line with its activities.
The University collects and processes data to ensure the security of visitors to its campuses and to protect the interests of data subjects.
The University collects and processes personal data of students and staff to provide health services.
The University collects and processes personal data of participants in events, courses, seminars, conferences, and similar activities organized on its campuses.
The University collects and processes personal data to support alumni career planning and may share such data with consent.
The University collects and processes personal data with consent for promotional purposes and to contact individuals regarding its activities.
The University collects and processes data with consent for reporting, statistical analysis, and similar studies related to its activities.
METHOD AND SCOPE OF DATA COLLECTION
Personal data is collected verbally, in writing, or electronically through automatic or non-automatic means, including the University’s website, social media platforms, mobile applications, and similar channels
Data obtained verbally, in writing, or electronically from individuals—such as through websites, interviews, and educational activities—is collected, processed, stored, and transferred in accordance with this Information Notice and with the consent of individuals.
Personal data cannot be transferred for purposes unrelated to University activities without the explicit consent of the data subject.
TRANSFER OF PROCESSED PERSONAL DATA
Personal data collected, processed, stored, and transferred by the University may be shared in accordance with Articles 8 and 9 of the Law with:
Subcontractors or third parties providing services temporarily or permanently under agreements, to the extent and duration required by the work.
Similar institutions abroad for educational and research collaborations and staff exchanges in line with the University’s objectives.
Official authorities and public institutions when necessary.
Social Security Institution, Council of Higher Education, and other legally authorized public bodies; institutions and organizations cooperating for operational purposes; entities providing data storage services; domestic/foreign server and/or cloud service providers; companies providing electronic communication services; contracted banks; internationally certified payment institutions; various domestic/foreign advertising agencies, survey companies, and other business partners; and legally authorized public institutions and private persons.
RIGHTS OF THE DATA SUBJECT
Under Article 11 of the Law, data subjects may apply to the University to:
Learn whether their personal data is processed,
Request information if their personal data has been processed,
Learn the purpose of processing and whether it is used appropriately,
Learn the third parties to whom personal data is transferred domestically or abroad,
Request correction of incomplete or inaccurate data,
Request deletion or destruction of personal data under the conditions set forth in Article 7 of the Law,
Request notification of actions taken under (d) and (e) to third parties to whom data has been transferred,
Object to results arising from analysis exclusively by automated systems,
Claim compensation for damages incurred due to unlawful processing of personal data.
Requests within this scope will be finalized by the University within thirty days.
APPLICATION METHOD
To contact the University, provide feedback, or submit inquiries under the Law, the applicant must deliver a petition including identity verification documents either in person to the address Yenişehir Mahallesi, Kardeşler Caddesi No:7/1, Sivas/Merkez or via notary.
Notifications may also be made securely with an electronic signature to the KEP address: sivasbiltekuni@hs01.kep.tr.
Written applications will be evaluated following identity verification, and responses will be provided within the legal timeframe.
