MERSIN UNIVERSITY

Disclosure Statement Under the Personal Data Protection Law

Mersin University ("University" or "MEÜ"), located at Çiftlikköy Neighborhood, Sokak No. 30, Çiftlikköy Campus, Yenişehir/MERSİN, acts as the "Data Controller" and prioritizes the security of personal data processed under Law No. 6698 on the Protection of Personal Data (KVKK). To ensure this, all technical and administrative measures are taken, and necessary inspections are conducted. Personal data is stored for as long as the data processing purpose is valid. Necessary security measures are taken to prevent the loss of stored and recorded data, to prevent unauthorized access, and to prevent unlawful use.

For What Purposes Will Personal Data Be Processed?

In the processing of personal data, the principles of compliance with the law and the rules of integrity, accuracy and up-to-dateness when necessary, processing for specific, clear, and legitimate purposes, being relevant, limited, and proportionate to the purpose of processing, and retention for the period stipulated in relevant legislation or necessary for the purpose of processing are adhered to, as stipulated in the law under the heading "General Principles" and specified in Article 4 of the law. Your personal data is collected in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698 for the purposes of managing disciplinary investigation processes opened/that may be opened against students and academic and administrative staff, supporting graduates in career planning, monitoring graduate success, creating an alumni network, conducting sports activities and becoming a member of the university student community, benefiting from the studies, events and organizations organized under the club umbrella, fulfilling information and document requests requested by judicial bodies and/or administrative authorities, as well as for the execution and development of academic and administrative processes in accordance with our University's mission of conducting research, providing education and serving the community, and within the scope of educational activities. At our University, personal data is processed in academic and administrative units in order to carry out the necessary processes. Your personal data may be collected verbally, in writing or electronically by our University units, by automatic or non-automatic methods, depending on your relationship with our University; As long as your relationship with our University continues, the required data will be updated and processed by our University, acting as the Data Controller, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 on Personal Data Protection Law to fulfill our legal responsibilities.

To Whom and for What Purposes Can Processed Personal Data Be Transferred?

Your personal data will be transferred to the relevant institution, limited to the conditions and purposes of personal data processing, provided that adequate measures are taken when the conditions specified in Article 5, paragraph 2, and Article 6, paragraph 3, of Law No. 6698 are met.

Method and Legal Basis for Collecting Personal Data

Our University collects personal data by hand delivery, mail, courier, manual, digital, automatic, partially automatic, or integration methods. This data is collected to fulfill its legal obligations specified in the "Purposes for Processing Personal Data" article of the Law No. 6698. In addition to these purposes, personal data may be processed and transferred within the scope of the processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698.

The Rights of Personal Data Owners as Listed in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights to our University using the methods specified below, our University will process your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, it will be completed for the processing fee specified in Article 7 of the Communiqué on the Procedures and Principles for Applications to the Data Controller, published in the Official Gazette No. 30356 dated March 10, 2018. In this context, personal data owners are entitled to:
• To learn whether personal data has been processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,
• To know the third parties to whom personal data has been transferred, both domestically and internationally,
• To request correction of personal data if it is incompletely or incorrectly processed, and to request notification of the action taken to the third parties to whom personal data has been transferred,
• To request the deletion or destruction of personal data if the reasons requiring processing no longer exist, despite the processing being in accordance with the provisions of Law No. 6698 and other relevant laws, and to request notification of the action taken to the third parties to whom personal data has been transferred,
• To request the processing of personal data in accordance with the provisions of Law No. 6698 and other relevant laws.