PDPL

This Privacy Notice has been prepared in accordance with the Personal Data Protection Law No. 6698 ("KVKK") to inform data subjects regarding the processing of personal data within the framework of educational, consulting, sales, marketing, communication, customer relations, and website operations carried out by AEC Akademi Limited Şirketi.

1.1. Data Controller

Your personal data is processed by the company listed below in its capacity as the data controller within the meaning of the KVKK:

Information Field	Content Details
Company Title	AEC Akademi Limited Şirketi
Address	Reşatbey Mahallesi Fuzuli Caddesi No:13 Daire:201 Seyhan/ADANA
Website	www.aecakademi.com.tr
E-mail	info@aecakademi.com.tr
Phone	+90 542 577 76 88
Tax Number	0081888179
MERSIS Number	0008188817900001
Trade Registry Number	95496

1.2. Scope

This notice applies to website visitors, individuals who fill out contact forms, training and webinar participants, clients receiving consulting services, potential clients, suppliers and business partner representatives, individuals contacting the company via social media, and commercial electronic communication recipients.

1.3. Personal Data Categories

Data Category	Processable Data Types
Identity Information	First name, last name; and tax identification details where necessary for invoicing and contractual processes.
Contact Information	Phone number, e-mail address, WhatsApp contact information, social media username, and correspondence address.
Customer Transaction Information	Training registration, subject of request, purchased training or consulting service, payment and order records, invoice details, and transaction history.
Financial Information	Bank wire transfer/EFT details, payment receipts, transaction references regarding credit card payment processes; card details are processed entirely by authorized payment institutions, and the Company does not store your credit card numbers.
Educational and Professional Information	Attended training sessions, webinars, certificate data, areas of professional interest, and training evaluation forms.
Visual and Auditory Records	Audio, video, screen shares, chat text messages, and attendance logs generated during online live training sessions and webinars.
Transaction Security Information	IP address, log records, device and browser specifications, transaction timestamps, cookie identifiers, and security event logs.
Marketing Information	Commercial electronic communication opt-in consents, campaign interactions, training preferences, CRM history, segmentation, and engagement indicators.
Request and Complaint Information	Subject and message text fields from contact forms, questions, requests, complaints, and feedback submissions.

1.4. Methods of Collecting Personal Data

The website with the domain name www.aecakademi.com.tr and the contact forms contained therein
Telephone, e-mail, WhatsApp, LinkedIn, Instagram, and similar interactive communication channels
CRM systems and corporate marketing communication tools
Live training sessions and webinars conducted via Google Meet
Bank wire transfers, credit card payments, İyzico, and other payment gateways that may be utilized in the future
YouTube, Google Maps, Google Analytics, Meta Pixel, and similar third-party technologies
Physical forms and agreements filled out during on-site training and consulting operations

1.5. Processing Purposes and Legal Grounds

Processing Purpose	Processed Personal Data	Legal Ground (KVKK Basis)
Providing training, webinar, and consulting services	Identity, contact, customer transaction, and educational information	Establishment or performance of a contract; legitimate interest of the data controller; statutory legal obligations
Managing sales, payments, invoicing, and corporate accounting workflows	Identity, contact, financial, and customer transaction information	Performance of a contract; fulfillment of statutory legal obligations
Responding to queries received via contact forms	Identity, contact, request, and complaint information	Legitimate interest of the data controller; pre-contractual processing initiated at the request of the data subject
Conducting and recording Google Meet live training sessions	Identity, contact, visual, and auditory records	Performance of a contract; legitimate interest of the data controller; explicit consent where mandatory legal requirements dictate
Sharing training recordings for promotional, advertising, social media, YouTube, or third-party usage	Visual and auditory records	Explicit consent of the data subject
Sending commercial electronic communications	Identity, contact, and marketing information	Explicit consent / commercial electronic message approval; statutory legal exemptions provided under applicable law
Maintaining website security and cookie management	Transaction security data, cookie variables	Legitimate interest of the data controller; mandatory strictly necessary cookies; explicit consent for analytic/marketing cookies
Executing analytics, behavioral advertising, and remarketing activities	Cookie data, transaction security, and marketing information	Explicit consent of the data subject
Tracking legal disputes and exercising the corporate right of defense	All relevant technical and transaction history records	Establishment, exercise, or protection of a legal right
Providing required declarations to authorized statutory institutions	Data types explicitly dictated by mandatory legal legislation	Fulfillment of statutory legal obligations

1.6. Training Recordings, Audio and Video Data

AEC Akademi may record online live training sessions, webinars, seminars, and similar digital activities to enhance educational quality, enable participants to re-watch sessions, document course contents, and perform contractual service deliveries. During recording, the participant's first name, last name, video feed, audio stream, screen shares, Q&A contributions, and text-based chat messages may be processed.

The publishing or sharing of these recordings on AEC Akademi’s main website, institutional social media profiles, corporate YouTube channel, marketing materials, or with third parties shall only be carried out if the data subject grants separate and explicit consent. The withholding of explicit consent does not restrict the participant from receiving the underlying training service; however, if consent is withheld, the participant must keep their camera and microphone switched off and notify the Company prior to the training session that they do not wish to appear in promotional capture runs.

1.7. Recipient Groups to Whom Personal Data May Be Transferred

Recipient Group	Transfer Purpose
Banking entities and clearing institutions	Managing payment processing, collections, refund transactions, chargeback evaluations, invoicing, and corporate financial workflows.
İyzico and other virtual POS/payment infrastructure platforms to be adopted	Executing secure processing frameworks for online gateway transactions and credit card settlements.
Accounting and independent financial advisory service providers	Fulfilling statutory tax requirements, legal declarations, business ledgers, and institutional accounting mandates.
Legal consultants and retained attorneys	Drafting contracts, managing formal disputes, enforcement procedures, litigation support, and consulting workflows.
CRM and e-mail delivery service providers	Managing customer relationship records, deploying educational announcements, cross-checking subscription permissions, and general notifications.
Google, Meta, YouTube, Google Maps, and similar cloud technology providers	Operating structural web analytics, targeted advertisement feeds, video embedded frames, coordinate layouts, digital classrooms, and communicative networks.
Authorized public institutions and administrative bodies	Answering formal regulatory requests, answering legal sub-poenas, and meeting statutory declaration duties.
Business partners and contracted educational experts	Coordinating course setups, technical support paths, advanced syllabus consulting, and handling structural attendee rosters.

1.8. Cross-Border Data Transfer

Due to the deployment of globally integrated cloud networks such as Google Analytics, Meta Pixel, YouTube, Google Maps, Google Meet, CRM platforms, and e-mail infrastructure nodes, your personal data may be transferred to server centers or cloud host suppliers located overseas. These cross-border data transfer processes are conducted strictly under the systematic procedures explicitly established in the KVKK and secondary legislations, using mechanisms such as explicit consent, adequate safeguards, standard contractual clauses (SCCs), or other legitimate data transfer frameworks authorized under applicable regulations.

1.9. Data Retention Periods

Data/Operational Process	Retention Period
Contracts, sales entries, invoices, and accounting records	Throughout the mandatory duration frameworks explicitly established by applicable financial, commercial, and tax laws.
Contact forms and active request tickets	Until the formal conclusion of the incoming request and for the duration of potential statutory limitation periods for claims.
Training attendance histories and credential metadata	As long as required to prove service fulfillment, maintain continuous certificate verification services, and manage ongoing customer relationships.
Audio records and structural video captures	For the duration that re-watching accesses, service deliveries, or explicit consent objectives remain active; processing ceases within a reasonable technical timeframe upon withdrawal of consent.
Commercial electronic messaging opt-in consents	For the entire lifespan of the consent's validity and throughout the statutory evidence periods mandated by consumer protection laws.
Website tracking cookies and analytical system log captures	For a duration matching the underlying cookie category, technical runtime necessities, and applicable data security legislation.
Dispute resolution data and legal case histories	Throughout the duration of the legal conflicts and the applicable statutory limitation periods.

1.10. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, any individual may exercise the following rights by applying directly to the data controller:

To learn whether their personal data has been processed or not,
To request further information if their personal data has indeed been processed,
To understand the core purpose of the processing runs and check if data is used in line with said targets,
To identify the domestic or foreign third-party recipients to whom their personal data has been transferred,
To request the correction of personal data if it has been processed incompletely or inaccurately,
To demand the deletion or destruction of personal data within the boundaries of conditions specified by law,
To request that corrections, deletions, or destructions be formally notified to the third parties to whom data was transferred,
To object to any unfavorable consequences resulting exclusively from data analysis handled via automated systems,
To demand compensation for damages incurred due to the unlawful processing of personal data.

1.11. Application Procedure

To exercise your statutory rights, you can submit a written application to the Company's physical address alongside information validating your identity, or forward your application to info@aecakademi.com.tr using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address verified and logged within the Company's active user systems. Applications will be evaluated and finalized within the statutory timeframes established by law. If the transaction requires an additional cost, a fee may be charged in accordance with the tariff specified by applicable regulations.

1.12. Updates

AEC Akademi reserves the right to update this Privacy Notice in response to operational structural expansions or modifications in legal legislation. The revised text shall become legally binding on the exact date it is officially published on the company's website.

Instructors Careers Our Quality and Customer Policy Why AEC Academy Pre-Registration About Us PDPL Cookie Policy Privacy Policy Cancellation and Refund Policy Distance Sales Agreement Preliminary Information Form PDPL Application Form