Clarification Text within the Scope of the Personal Data Protection Law (KVKK)
1. Identity of the Data Controller
This Clarification Text has been prepared by [Company Name] as the data controller in accordance with Article 10 of the Personal Data Protection Law No. 6698 (KVKK). As [Company Name], we place great importance on the protection of the personal data of our users.
2. Personal Data Processed
The personal data processed within the scope of the application are as follows:
- Personal Information: Student ID, first name, last name, email address, phone number, profile photo.
- Academic Information: Medical skills (Skill), badges (Badge), group work, flashcards, and related assessment results.
- Notification Data: Log records of notifications sent via Firebase.
- User Preferences: Personal preferences such as language selection within the application, login status, and device settings.
- Other Data: Activities within the application and reports generated from these activities.
3. Purpose of Processing Personal Data
The collected personal data are processed for the following purposes:
- Monitoring and evaluating students’ medical skills, attitudes, and overall performance.
- Storing and sharing flashcards and classrooms created by students with other students.
- Monitoring and improving application performance.
- Assessing student competence and tracking overall success by universities.
- Storing user preferences and personalizing the application.
4. Transfer of Personal Data
Personal data may be shared with the following parties for the purposes stated above:
- Universities: To evaluate students’ performance, academic and personal information of students will only be shared with the instructors of the medical school at the university where the student is enrolled.
- Developer: Anonymized data may be analyzed by the development team to improve the project and enhance the user experience.
5. Method and Legal Basis for Collecting Personal Data
Personal data are collected through the information provided by users, in-app interactions, and technological infrastructures such as Firebase. These data are processed in accordance with the legal grounds specified in Articles 5 and 6 of KVKK.
6. Duration of Retention of Personal Data
Personal data will be retained for the period required for the purposes of data processing or for the period stipulated by the relevant legislation.
7. Rights of the Data Subject
Pursuant to Article 11 of KVKK, data subjects have the following rights:
- To learn whether personal data is processed or not,
- To request information if personal data has been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with the intended purpose,
- To know the third parties to whom personal data is transferred, whether domestically or abroad,
- To request the rectification of incomplete or inaccurate personal data,
- To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK,
- To request notification of the operations carried out in compliance with the rights stated above to third parties to whom personal data has been transferred,
- To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- To claim compensation for the damage arising from the unlawful processing of personal data.
To exercise these rights, you can contact your university or submit a request directly to [email protected].