Privacy Notice

[DRAFT] This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform you about the personal data processed through the PADEM Akademi website. It is a draft and will be finalised after legal review and approval by Musa Sarıcı.

Data controller

[Name and title of the data controller — Musa Sarıcı / PADEM Akademi], [address], [email], [phone]

Personal data we process

• Appointment requests: name, email, phone, type and format of session (online / in person), chosen date, time and time zone, an optional short note; for adolescents, the parent's or guardian's name and phone.
• Seminar/workshop requests from institutions: organisation, contact person, email, phone, type of request, estimated date and number of participants, message.
• Newsletter: email address, language preference, subscription and confirmation dates, consent record.
• Security logs: IP address and time of request, kept briefly to prevent misuse of the forms. [To be verified against the implementation]

The appointment form does not ask for health information. Please do not write special categories of personal data, such as health information, in the note field; these are discussed in the session.

Purposes

• Receiving and scheduling appointment requests; sending confirmation, change and reminder emails
• Responding to requests from institutions and planning programmes
• Sending the monthly newsletter if you subscribe
• Keeping the website and its forms secure

Legal grounds

• Appointment and institution requests: necessary for entering into or performing a contract (KVKK Art. 5/2-c)
• Newsletter: your explicit consent (KVKK Art. 5/1), which you can withdraw at any time
• Security logs: legitimate interest, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f)
• [To be verified through legal review]

Transfers

Your personal data is never sold or shared for advertising. We use the following service providers to run the service:

• Resend (sending email): your email address and the content of messages sent to you
• Google Calendar (appointment calendar): the date and time of confirmed appointments and [information in the appointment record]
• [Hosting and backup provider]

These providers' servers may be located outside Turkey; such transfers are made under Article 9 of the KVKK on the basis of [legal basis — to be clarified through legal review]. Data may be shared with competent public authorities where required by law.

Retention

• Appointment records: [period]
• Institution requests: [period]
• Newsletter: until you unsubscribe; after that only the unsubscribe record is kept for [period]
• Security logs: [period]

When the period ends, data is deleted or anonymised.

Your rights (KVKK Art. 11)

• To learn whether your personal data is processed and, if so, to request information about it
• To learn the purpose of processing and whether data is used for that purpose
• To know the third parties in Turkey or abroad to whom data is transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction, and that third parties who received the data are notified
• To object to a result against you arising solely from automated analysis
• To claim compensation for damage caused by unlawful processing

How to apply

You can send requests about your rights in writing to [email] or [postal address]. Requests are answered free of charge within 30 days at the latest. To leave the newsletter, use the “unsubscribe” link in any newsletter email.