SABANCI UNIVERSITY INFORMATION FORM ABOUT PROCESSING OF PERSONAL DATA FOR STUDENT CAMPUS CARD

Your personal data may be processed by Sabancı University (the “University”) in its capacity as data controller in accordance with the Personal Data Protection Law numbered 6698 (the “Law”) in the context explained below.

Purpose and Legal Grounds of Personal Data Processing

Your personal data may be processed for the following purposes (the “Purposes”) within the framework of personal data processing conditions and the purposes specified in Article 5 of the Law.

Based on the legal grounds where it is obligatory to process data for legitimate interests of the data controller on the condition of not doing harm to fundamental rights and freedoms of the related person:

Carrying out the operational processes for the provision of the student campus card to you by our relevant business units,
Printing and sending the student campus card to you,
Benefiting from the campus card offered by our University within the scope of carrying out your student transactions such as providing entrance and exit to the campus and areas such as laboratory, dorm room, etc. located on the campus,
Execution of information technologies and cyber security processes,
Management of emergency processes,
Execution of audit, ethics and discipline processes,
Follow-up of legal affairs,

Based on the legal grounds where it is expressly stipulated by the laws and it is obligatory for the data controller to fulfill its legal obligation:

Fulfilling requests of authorized state institutions,
Ensuring that the data is accurate and up-to-date,
Giving information to authorized state institutions based on legislation,
Ensuring compliance with the data storage obligations stipulated in the legislation,
Responding to applications of related people in accordance with the legislation and carrying out necessary operations.

Persons to whom Processed Personal Data may be transferred and the purposes allowed

Your personal data collected may be transferred to Utarit Bilişim Hizmetleri Sanayi ve Ticaret A.Ş. (“SoliClub”) for the purpose of enabling you to benefit from other financial and technological features that will be integrated into the student campus card, limited to your application within the scope of our legitimate interest in the fulfillment of the above-mentioned Purposes, to our suppliers, to authorized state institutions and authorized private persons in the framework of data processing conditions specified in Article 5 of the Law and by respecting the data transfer rules specified in Article 8 of the Law on the grounds that such transfer is explicitly stipulated by laws and we are obliged by the law to transfer your personal data in order to fulfill the Purposes.

Method of personal data collection

Your personal data is collected electronically through the university’s internal systems, online forms, e-mail and physical mail, and printed forms in line with the Purposes.

The Rights of Data Subjects in accordance with Article 11 of the Law

We hereby inform you that you have the following rights in accordance with Article 11 of the Law:

You have the right to apply to the controller and

to learn whether your personal data are processed or not,
to request information if your personal data are processed,
to learn the purpose of your data processing and whether this data is used for the intended purposes,
to know the third parties to whom your personal data are transferred at home or abroad,
to request the rectification of incomplete or inaccurate data, if any, and have the third parties to whom your data have been transferred know about this operation,
to request the erasure or destruction of your personal data, although processed legally, upon elimination of reasons for processing your data, and have the third parties to whom your data have been transferred know about this operation,
to object to processing, exclusively by automatic means, of your personal data, which leads to an unfavorable consequence for you,
to request compensation for the damage arising from the unlawful processing of your personal data.

You can submit your requests concerning your rights above by registered return mail or in person to Sabancı Üniversitesi Orta Mahalle Üniversite Caddesi No:27 Tuzla İSTANBUL, or by electronically-signed secure email to sabanciuniversitesi@hs03.kep.tr. Please include your identity, contact information and mailing address for us to take proper action. You will be notified of the outcome within 30 days, free of charge. If your request creates an additional cost, a fee may be collected in accordance with the tariffs imposed by the Personal Data Protection Board.