Privacy Notice on the Processing of Personal Data

This notice is intended to inform you about how Bahçeşehir University processes your personal data. Matters relating to the processing of your personal data are set out below under separate headings.

Who is responsible for the processing of my personal data?

As Bahçeşehir University (“BAU”), we determine how your personal data will be processed and we manage the data recording system. In other words, we act as the data controller when processing your personal data.

How is my personal data collected?

Your personal data is collected through the communication channels available on our website (such as instant messaging platforms and the contact forms in which you enter your details so that we may reach you). Our methods of collection are automated and partly automated means.

Which of my personal data is processed?

Through the communication channels on our website, we process your name and surname, e-mail address, telephone number, and personal data relating to the message you send us. In addition, in connection with your visit to our website, we process information obtained through cookies, your IP address, and personal data relating to user transaction records.

For what purposes is my personal data processed?

We process your personal data, whether in Türkiye or abroad, for the purposes of conducting communication processes, receiving and concluding your requests, receiving suggestions aimed at improving and developing our activities, and reporting, examining and auditing our activities.

Is my personal data transferred to others?

We transfer your personal data to third parties located in Türkiye or abroad. The recipients of your personal data and the purposes of such transfers are set out below:

• Authorised persons, institutions or organisations — for carrying out our activities in compliance with legislation, providing information to authorised persons, institutions or organisations, and fulfilling our legal obligations.

• Suppliers — for obtaining support in the scope of the procurement of goods or services from third parties and ensuring the continuity of our operations.

• Business partners — for carrying out audits and reporting, managing our relationships with our business partners, and ensuring compliance with the policies and rules of the Bahçeşehir Group Companies.

What are the legal grounds relied upon in processing my personal data?

In processing your personal data, we rely on the legal grounds set out in Article 5 of the Personal Data Protection Law No. 6698, namely that “processing is mandatory for the establishment, exercise or protection of a right” and that “processing is mandatory for our legitimate interests, provided that the fundamental rights and freedoms of the data subject are not harmed”.

How may I exercise my rights as a data subject?

Article 11 of the Personal Data Protection Law No. 6698 grants certain rights to data subjects. Certain procedures for exercising these rights are set out in the Communiqué on the Procedures and Principles of Application to the Data Controller (the “Communiqué”). If you wish to exercise your rights, you may submit your request to us by one of the following methods or by the other methods specified in the Communiqué:

• Via our website, by completing the Data Subject Application Form available at bau.edu.tr;

• By post, by sending your request to Çırağan Cad. Osmanpaşa Mektebi Sok. No: 4–6, 34353, Beşiktaş/İstanbul;

• By e-mail*, by sending an e-mail to the BAU Contact Person at [email protected].

How can I obtain further information?

For detailed information on how BAU processes personal data, you may:

• review the “Policy on the Processing and Protection of Personal Data” available at bau.edu.tr; or

• send an e-mail to the BAU Contact Person at [email protected].

* Provided that the e-mail address you use is already registered in our systems.