PREFACE
Within the scope of the Personal Data Protection Law, Bülbülzade Education, Health and Solidarity Foundation attaches importance to the protection of your personal data and/or special categories of personal data. Our Foundation shows sensitivity regarding the storage of all personal data and/or special categories of personal data belonging to you, transmitted through various channels.
In this context, in order to comply with Law No. 6698 on the Protection of Personal Data, the Constitution of the Republic of Turkey, and other relevant legislation, Bülbülzade Education, Health and Solidarity Foundation has taken the necessary technical and administrative measures. We would also like to emphasize that we will protect your rights guaranteed by law.
In this regard, you can safely share your personal data with Bülbülzade Education, Health and Solidarity Foundation, and convey your suggestions, complaints, and concerns to us. We hereby share with you our Privacy Policy, which has been implemented within Bülbülzade Education, Health and Solidarity Foundation, particularly regarding the protection of your personal data.
BÜLBÜLZADE EDUCATION, HEALTH AND SOLIDARITY FOUNDATION
1. Definitions
2. PURPOSE OF THE PRIVACY POLICY
The fundamental principle of our Foundation is the protection of personal data and compliance with the law. As Bülbülzade Education, Health and Solidarity Foundation (hereinafter referred to as “BÜLBÜLZADE FOUNDATION” or “Foundation”), all personal data and/or special categories of personal data we receive from you are kept confidential and are not shared with third parties. In this context, our Foundation has always shown the necessary sensitivity regarding the protection of personal data and/or special categories of personal data. In accordance with Law No. 6698 on the Protection of Personal Data (hereinafter referred to as “Law” or “KVKK”), internal regulations have been updated, and technical and administrative measures have been taken. Moving forward, BÜLBÜLZADE FOUNDATION accepts, declares, and undertakes to comply with all obligations imposed by the Law.
3. SCOPE OF THE PRIVACY POLICY
This Privacy Policy has been prepared in accordance with Law No. 6698 on the Protection of Personal Data.
Your personal data and/or special categories of personal data are processed either with your consent or under legally permitted circumstances. These data are used for the following purposes:
Ensuring the security of the Foundation,
Providing complete services to you,
Conducting our commercial activities,
Resolving your issues quickly,
Improving the quality of our services.
Some personal data and/or special categories of personal data received from you are anonymized in accordance with the procedures stipulated by the Law. Data used for statistical purposes are not covered by this Policy or by the provisions of the Law. BÜLBÜLZADE FOUNDATION reserves the right to amend this Policy to protect personal data in compliance with the Law.
This Privacy Policy aims to protect data obtained from real and legal persons, clients, employees, and other individuals associated with the Foundation. It contains various regulations to achieve this purpose.
4. PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA
The main principles regarding the processing of personal data and/or special categories of personal data are as follows:
Legality: BÜLBÜLZADE FOUNDATION ensures that the personal data and/or special categories of personal data collected from real and legal persons are obtained from lawful sources and processed legally.
Fairness: The Foundation verifies the source of personal data and/or special categories of personal data and ensures their collection and use are in accordance with fairness principles.
Purpose Limitation, Proportionality, and Relevance: Data are used only for the purpose for which they were collected and in a proportional manner necessary to provide the service.
Accuracy: BÜLBÜLZADE FOUNDATION gives importance to the accuracy of collected personal data and/or special categories of personal data. However, the Foundation is not obliged to verify the accuracy of all data provided by clients or individuals in contact with the Foundation, as this may not be legally or operationally feasible.
Up-to-date Data: Data are updated when changes occur and when such changes are communicated to the Foundation.
Specific and Legitimate Purposes: Personal data are processed for specific and legitimate purposes, either with explicit consent or based on lawful exceptions.
Retention for the Legally Required Duration: Data are kept only for the periods prescribed by law or required for the purpose for which they were processed. Upon fulfillment of these purposes, data are anonymized, deleted, or destroyed.
5. SECURITY OF PERSONAL DATA
BÜLBÜLZADE FOUNDATION takes all reasonable administrative and technical measures to ensure the security of personal data, prevent unlawful processing, unauthorized access, accidental loss, deliberate deletion, or damage. Measures include:
Network and application security,
IT system security during procurement, development, and maintenance,
Cloud storage security,
Regular employee training on data security,
Authorization matrices for employees,
Policies on access, use, storage, and destruction,
Confidentiality agreements,
Revocation of access for employees changing roles or leaving,
Updated antivirus systems,
Firewalls,
Secure handling of paper-based personal data,
Tracking personal data security,
Regular audits,
Encryption of sensitive data on portable media,
Security protocols for special categories of personal data,
Compliance with KEP/corporate email for sending sensitive data,
Attack detection and prevention systems,
Continuous cybersecurity monitoring.
6. DELETION, DESTRUCTION, AND ANONYMIZATION OF PERSONAL DATA
Personal data and/or special categories of personal data are deleted, destroyed, or anonymized upon expiry of the legal retention period, completion of judicial processes, or fulfillment of purposes. These actions may be carried out upon the data subject’s request or proactively by BÜLBÜLZADE FOUNDATION.
7. PRINCIPLE OF MINIMIZATION
Only the necessary personal data and/or special categories of personal data are collected and processed. Excess data not required for the purpose are deleted, destroyed, or anonymized, though they may be used for statistical purposes.
8–19. ADDITIONAL PRINCIPLES, RIGHTS, AND PROCESSES
The remaining sections include:
Confidentiality and security of data,
Accuracy and updating of data,
Processing purposes,
Processing for marketing purposes,
Collection and processing within contractual relationships,
Data processed via automated systems,
Employees’ personal and sensitive data,
Cross-border transfers,
Auditing and processing security,
Notification of breaches,
Rights of data subjects (including access, correction, deletion, anonymization, objection, and compensation claims).
Requests regarding personal data can be sent to [email protected] or Güneykent Mah, 230 Nolu Cd, No: 10/1, Şahinbey/Gaziantep.
This Policy may be updated to comply with legal changes. Please visit our website for updates.
BÜLBÜLZADE FOUNDATION thanks you for visiting its website.
