Personal Data Protection

ISTANBUL INTERNATIONAL SCHOOL EĞİTİM KURUMLARI (EDUCATION INSTITUTIONS) TİC. A.Ş.

Istanbul International School Eğitim Kurumları Tic. A.Ş.’s Policy and Clarification Text Regarding the Protection, Processing and Sharing of Personal Data of Student’s Parents and Students

1. Data Controller and Representative:

This clarification text was prepared by Istanbul International School Eğitim Kurumları Tic. A.Ş. in the capacity of data controller within the scope of article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Principles and Procedures for Fulfillment of Disclosure Obligation.

2. The types of personal data processed:

Istanbul International School Eğitim Kurumları Tic. A.Ş. can process personal data in accordance with the principles and procedures stipulated by Personal Data Protection Law (KVKK), other laws and regulations.
Personal data regarding our students, student’s parents (parents), educators who apply for jobs, candidates applying for pre-registration and evaluation, and visitors who contact with us (via phone call, message, contact form, e-mail) and request information, both directly and indirectly, through Istanbul International School Eğitim Kurumları Tic. A.Ş. website, can be collected in written, oral or electronic form by social media, telephone and similar means.

Personal data processed by the Data Controller, subject to the procedures and laws stipulated in law no. 6698 and other relevant legislation, may contain the following data.

• Identity Information
• Citizenship Information
• Age
• Gender
• Blood group
• E-Mail
• Phone number
• Home Address
• Contact information for people to be called in case of emergency
• Custody information
• Nationality
• Passport Information
• Number of Children
• Student’s Identity Information
• Photo
• Camera Recording
• Student current educational institution information
• IGCSE or AS Level Certificates
• Exam and report card grades
• Diploma information
• Event videos and photos
• Athlete license information
• Financial assistance information
• Information about disease and allergy
• Health reports
• All kinds of opinions and interview minutes with teachers, school counselors, principals, vice principals, parents and counselors for the student
• Mandatory recorded video and audio data in cases where educational activities should be carried out remotely
• Title
• Professional experience information
• In addition to your video recordings and personal data recorded with a closed-circuit security camera system, your up-to-date data, which are required by the Law or need to be processed later, are processed.

3. Purposes, Methods of Collection and Legal Reasons for Processing Personal Data:

Your collected personal data will be processed for the following purposes within the terms of personal data processing specified in Articles 5 and 6 of Law No. 6698 in order to perform the educational service provided by Istanbul International School Eğitim Kurumları Tic. A.Ş. in accordance with the legislation.

• For the enrollment process
• To start and continue the educational activity,
• To plan and follow-up payment,
• To contact with the persons in order to ensure the safety of the student in case of emergency,
• To create the student’s health files and to share health information with the relevant unit in institution when necessary and to share them with the hospital and insurance company in case of emergency
• To evaluate the personal, academic and psychological status of the student and to record the opinions of the school counselor, parent and other relevant persons and to ensure that the process is observed,
• To record, operate and share the necessary information with the relevant parties when necessary for the operation of the student’s internal processes
• To provide support if the academic and social development of the student needs to be observed
• To analyze and observe the student’s academic standing
• To record of the information shared about the student in parent interviews and to observe that process
• In order to carry out distance education activities
• To create disciplinary board records, to evaluate the student in accordance with the Regulation on Special Education and Guidance Services of the Ministry of National Education and to send them to the relevant Ministry. To carry out all kinds of permission issues processes, requests and approvals for students who want to participate in all kinds of trips, cultural activities, tournaments and competitions
• To carry out license (sports) procedures of students
• To examine sports history, development, to support if necessary, to carry out necessary application procedures and permits for internal and international activities to which students can participate
• To use in school yearbook
• To carry out diploma procedures
• To create, protect and audit information security, to keep Internet log records,
• To improve the quality of service
• To fulfill all legal obligations in the audits to be carried out by the Ministry of National Education in institution,
• To fulfill the legal obligations,
• To keep in-house records related to personal information, vocational training, competencies, examination of experiences, analysis, interview and trial processes in instructor applications and compliance for full-time or distance education situations and to evaluate these data in the necessary decision-making processes.
• To save shared contact and personal information to respond to messages, requests and questions sent via contact forms or e-mail

4. To Whom and What Purpose the Processed Personal Data Can Be Transferred

Your personal data can be shared, if necessary, for organization and management of the service, to conduct educational activities, to conduct management activities, to ensure information security, to follow-up legal work and transactions, to conduct all activities in accordance with the legislation and fulfilling legal obligations, with Ministry of National Education, Ministry of Family, Labor and Social Services, Social Security Institution, courts, and with other public institutions and organizations that are authorized by law and request information, with business partners, real and private legal persons of the 3rd party who have received services, entities of private law, with law offices in order to obtain legal support within the scope of establishment, use and protection of their rights, upon the request of the parent, with the student’s psychological counselor and specialist, and the visual records can be shared on social media and on the corporate web site of the school in order to make the the school history and culture continuous . Your personal data may also be transferred within the framework of the personal data processing conditions set forth in Articles 8 and 9 of the Law No. 6698 for the data processing purposes listed above.

5. Method and Legal Reason of Collecting Personal Data:

Your personal data can be collected through Istanbul International School Eğitim Kurumları Tic. A.Ş. group companies, corporate website, student tracking system, registration form, candidate student application form, social media tools and similar means, in writing and electronically, via e-mail, security cameras, and collected through the documents requested from you in accordance with the legislation in order to carry out the appointment process before the Ministry of National Education and to create the personnel file. Your personal data collected in this way can also be processed and transferred for the purposes specified in Articles 3 and 4 of this Policy text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698.

Data Controller acts in accordance with the Policy on the Protection, Processing and Sharing of Personal Data, the Legislation of the Ministry of National Education and other legislation, the Law No. 5651 on Regulation Of Publications on the Internet and Combating Crimes Committed by Means Of Such Publication (“The Internet Law”), and the Social Insurance and Universal Health Insurance Law, for the personal data he/she processes while carrying out the educational activities of International School Eğitim Kurumları Tic. A.Ş.’s students.

The Data Controller retains your personal data only in accordance with the relevant legislation and/or internal policies of the institution or for the period necessary for the purpose for which they are processed. In this context, our Institution determines whether a period has been stipulated for the storage of personal data in the relevant legislation and if this is the case, it takes into account this period, otherwise it retains personal data for a time period required for the processing purpose. In the event that the reasons that require the expiration or processing of the period disappear, the personal data are deleted, destroyed, disposed or anonymized. However, visual records of students are kept in order to continue the history and culture of the school.

6. Rights of the Personal Data Owner, Designated in Article 11 of the Law no. 6698:

• In the event that you, owner of personal data, submit your claims regarding your rights with the methods set forth in Communiqué on the Procedures and Principles of Application to the Data Controller, Data Controller shall conclude the claim within the shortest time possible depending on the nature of the claim and within thirty days at the latest and free of charge. However, if the transaction requires an additional cost, Data Controller shall charge the fee in the tariff determined by the Personal Data Protection Board. In this context, as personal data owner you have the right;
• To learn whether any personal data has been processed or not,
• To request information regarding the processing activities of your personal data;
• To learn the purposes of processing your personal data;
• To learn the third parties to whom his/her personal data is transferred at home or abroad;
• To request the rectification of the incomplete or inaccurate data, if any
• To request the deletion or destruction of personal data if the reasons for the processing of personal data are eliminated or if the Data Controller has no legal basis or legitimate interest to process such data;
• To request from the Data Controller to ensure third parties authorized by the Data Controller to respect your rights within the scope of this section
• To object to the adverse consequences that may arise from the processing of your Personal Data through automated systems,
• You have the right to claim compensation for damages in the event of damages due to the unlawful processing of your personal data.

7. Exercise of rights:

In accordance with paragraph of the 13th article of the Law No. 6698, you can submit your request for exercising your rights mentioned above to the Data Controller by filling out the contact form on the official website of Istanbul International School School Eğitim Kurumları Tic. A.Ş. and sending it in writing or via our registered e-mail address.

We may ask for additional verifications (such as sending a message to your registered phone or calling) to determine whether the application is yours and to protect your rights. In order for third parties to request an application in the name of personal data owners, a special power of attorney, issued by a notary public in the name of the person applying for the data owner and granted by the same, must be submitted.

In order to exercise your rights mentioned above, you can personally submit your written and signed petition or website contact form to Turistik Çamlıca Cad No 20 / Üsküdar- İstanbul-TURKEY 34692 address or via notary with the necessary information to identify you and the rights specified in Article 11 of the Personal Data Protection Law, or send a signed copy of your form or petition to info@istanbulint.com email address.

ISTANBUL INTERNATIONAL SCHOOL EĞİTİM KURUMLARI (EDUCATION INSTITUTIONS INC.) TİC. A.Ş.

DATA OWNER PERSONAL INFORMATION APPLICATION FORM

GENERAL REMARKS

According to the Personal Data Protection Law No.6698 (“KVK Law”), the personal data owners defined as the relevant person (Hereinafter referred to as the “Applicant”) has the following rights:

• You can get detailed information about your rights to protect your personal data,
• You can learn if your personal data is processed or not,
• You can request information regarding the your personal data if processed,
• You can learn the purpose of processing your personal data and whether your data is used for this purpose,
• You can learn if personal data has been transferred, and if so, who are these third persons,
• You can request correction if your personal data have been processed incompletely or incorrectly,
• You can request the deletion of your personal data within the framework of the conditions stipulated in the relevant legislation,
• You can request the correction and deletion of personal data transferred to third parties,
• You can claim damages if you incur losses due to unlawful processing of your personal data.