PDPL
This Privacy Notice has been prepared in accordance with the Personal Data Protection Law No. 6698 ("KVKK") to inform data subjects regarding the processing of personal data within the framework of educational, consulting, sales, marketing, communication, customer relations, and website operations carried out by AEC Akademi Limited Şirketi.
1.1. Data Controller
Your personal data is processed by the company listed below in its capacity as the data controller within the meaning of the KVKK:
|
Information Field |
Content Details |
|
Company Title |
AEC Akademi Limited Şirketi |
|
Address |
Reşatbey Mahallesi Fuzuli Caddesi No:13 Daire:201 Seyhan/ADANA |
|
Website |
www.aecakademi.com.tr |
|
|
info@aecakademi.com.tr |
|
Phone |
+90 542 577 76 88 |
|
Tax Number |
0081888179 |
|
MERSIS Number |
0008188817900001 |
|
Trade Registry Number |
95496 |
1.2. Scope
This notice applies to website visitors, individuals who fill out contact forms, training and webinar participants, clients receiving consulting services, potential clients, suppliers and business partner representatives, individuals contacting the company via social media, and commercial electronic communication recipients.
1.3. Personal Data Categories
|
Data Category |
Processable Data Types |
|
Identity Information |
First name, last name; and tax identification details where necessary for invoicing and contractual processes. |
|
Contact Information |
Phone number, e-mail address, WhatsApp contact information, social media username, and correspondence address. |
|
Customer Transaction Information |
Training registration, subject of request, purchased training or consulting service, payment and order records, invoice details, and transaction history. |
|
Financial Information |
Bank wire transfer/EFT details, payment receipts, transaction references regarding credit card payment processes; card details are processed entirely by authorized payment institutions, and the Company does not store your credit card numbers. |
|
Educational and Professional Information |
Attended training sessions, webinars, certificate data, areas of professional interest, and training evaluation forms. |
|
Visual and Auditory Records |
Audio, video, screen shares, chat text messages, and attendance logs generated during online live training sessions and webinars. |
|
Transaction Security Information |
IP address, log records, device and browser specifications, transaction timestamps, cookie identifiers, and security event logs. |
|
Marketing Information |
Commercial electronic communication opt-in consents, campaign interactions, training preferences, CRM history, segmentation, and engagement indicators. |
|
Request and Complaint Information |
Subject and message text fields from contact forms, questions, requests, complaints, and feedback submissions. |
1.4. Methods of Collecting Personal Data
- The website with the domain name www.aecakademi.com.tr and the contact forms contained therein
- Telephone, e-mail, WhatsApp, LinkedIn, Instagram, and similar interactive communication channels
- CRM systems and corporate marketing communication tools
- Live training sessions and webinars conducted via Google Meet
- Bank wire transfers, credit card payments, İyzico, and other payment gateways that may be utilized in the future
- YouTube, Google Maps, Google Analytics, Meta Pixel, and similar third-party technologies
- Physical forms and agreements filled out during on-site training and consulting operations
1.5. Processing Purposes and Legal Grounds
|
Processing Purpose |
Processed Personal Data |
Legal Ground (KVKK Basis) |
|
Providing training, webinar, and consulting services |
Identity, contact, customer transaction, and educational information |
Establishment or performance of a contract; legitimate interest of the data controller; statutory legal obligations |
|
Managing sales, payments, invoicing, and corporate accounting workflows |
Identity, contact, financial, and customer transaction information |
Performance of a contract; fulfillment of statutory legal obligations |
|
Responding to queries received via contact forms |
Identity, contact, request, and complaint information |
Legitimate interest of the data controller; pre-contractual processing initiated at the request of the data subject |
|
Conducting and recording Google Meet live training sessions |
Identity, contact, visual, and auditory records |
Performance of a contract; legitimate interest of the data controller; explicit consent where mandatory legal requirements dictate |
|
Sharing training recordings for promotional, advertising, social media, YouTube, or third-party usage |
Visual and auditory records |
Explicit consent of the data subject |
|
Sending commercial electronic communications |
Identity, contact, and marketing information |
Explicit consent / commercial electronic message approval; statutory legal exemptions provided under applicable law |
|
Maintaining website security and cookie management |
Transaction security data, cookie variables |
Legitimate interest of the data controller; mandatory strictly necessary cookies; explicit consent for analytic/marketing cookies |
|
Executing analytics, behavioral advertising, and remarketing activities |
Cookie data, transaction security, and marketing information |
Explicit consent of the data subject |
|
Tracking legal disputes and exercising the corporate right of defense |
All relevant technical and transaction history records |
Establishment, exercise, or protection of a legal right |
|
Providing required declarations to authorized statutory institutions |
Data types explicitly dictated by mandatory legal legislation |
Fulfillment of statutory legal obligations |
1.6. Training Recordings, Audio and Video Data
AEC Akademi may record online live training sessions, webinars, seminars, and similar digital activities to enhance educational quality, enable participants to re-watch sessions, document course contents, and perform contractual service deliveries. During recording, the participant's first name, last name, video feed, audio stream, screen shares, Q&A contributions, and text-based chat messages may be processed.
The publishing or sharing of these recordings on AEC Akademi’s main website, institutional social media profiles, corporate YouTube channel, marketing materials, or with third parties shall only be carried out if the data subject grants separate and explicit consent. The withholding of explicit consent does not restrict the participant from receiving the underlying training service; however, if consent is withheld, the participant must keep their camera and microphone switched off and notify the Company prior to the training session that they do not wish to appear in promotional capture runs.
1.7. Recipient Groups to Whom Personal Data May Be Transferred
|
Recipient Group |
Transfer Purpose |
|
Banking entities and clearing institutions |
Managing payment processing, collections, refund transactions, chargeback evaluations, invoicing, and corporate financial workflows. |
|
İyzico and other virtual POS/payment infrastructure platforms to be adopted |
Executing secure processing frameworks for online gateway transactions and credit card settlements. |
|
Accounting and independent financial advisory service providers |
Fulfilling statutory tax requirements, legal declarations, business ledgers, and institutional accounting mandates. |
|
Legal consultants and retained attorneys |
Drafting contracts, managing formal disputes, enforcement procedures, litigation support, and consulting workflows. |
|
CRM and e-mail delivery service providers |
Managing customer relationship records, deploying educational announcements, cross-checking subscription permissions, and general notifications. |
|
Google, Meta, YouTube, Google Maps, and similar cloud technology providers |
Operating structural web analytics, targeted advertisement feeds, video embedded frames, coordinate layouts, digital classrooms, and communicative networks. |
|
Authorized public institutions and administrative bodies |
Answering formal regulatory requests, answering legal sub-poenas, and meeting statutory declaration duties. |
|
Business partners and contracted educational experts |
Coordinating course setups, technical support paths, advanced syllabus consulting, and handling structural attendee rosters. |
1.8. Cross-Border Data Transfer
Due to the deployment of globally integrated cloud networks such as Google Analytics, Meta Pixel, YouTube, Google Maps, Google Meet, CRM platforms, and e-mail infrastructure nodes, your personal data may be transferred to server centers or cloud host suppliers located overseas. These cross-border data transfer processes are conducted strictly under the systematic procedures explicitly established in the KVKK and secondary legislations, using mechanisms such as explicit consent, adequate safeguards, standard contractual clauses (SCCs), or other legitimate data transfer frameworks authorized under applicable regulations.
1.9. Data Retention Periods
|
Data/Operational Process |
Retention Period |
|
Contracts, sales entries, invoices, and accounting records |
Throughout the mandatory duration frameworks explicitly established by applicable financial, commercial, and tax laws. |
|
Contact forms and active request tickets |
Until the formal conclusion of the incoming request and for the duration of potential statutory limitation periods for claims. |
|
Training attendance histories and credential metadata |
As long as required to prove service fulfillment, maintain continuous certificate verification services, and manage ongoing customer relationships. |
|
Audio records and structural video captures |
For the duration that re-watching accesses, service deliveries, or explicit consent objectives remain active; processing ceases within a reasonable technical timeframe upon withdrawal of consent. |
|
Commercial electronic messaging opt-in consents |
For the entire lifespan of the consent's validity and throughout the statutory evidence periods mandated by consumer protection laws. |
|
Website tracking cookies and analytical system log captures |
For a duration matching the underlying cookie category, technical runtime necessities, and applicable data security legislation. |
|
Dispute resolution data and legal case histories |
Throughout the duration of the legal conflicts and the applicable statutory limitation periods. |
1.10. Rights of the Data Subject
Pursuant to Article 11 of the KVKK, any individual may exercise the following rights by applying directly to the data controller:
- To learn whether their personal data has been processed or not,
- To request further information if their personal data has indeed been processed,
- To understand the core purpose of the processing runs and check if data is used in line with said targets,
- To identify the domestic or foreign third-party recipients to whom their personal data has been transferred,
- To request the correction of personal data if it has been processed incompletely or inaccurately,
- To demand the deletion or destruction of personal data within the boundaries of conditions specified by law,
- To request that corrections, deletions, or destructions be formally notified to the third parties to whom data was transferred,
- To object to any unfavorable consequences resulting exclusively from data analysis handled via automated systems,
- To demand compensation for damages incurred due to the unlawful processing of personal data.
1.11. Application Procedure
To exercise your statutory rights, you can submit a written application to the Company's physical address alongside information validating your identity, or forward your application to info@aecakademi.com.tr using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address verified and logged within the Company's active user systems. Applications will be evaluated and finalized within the statutory timeframes established by law. If the transaction requires an additional cost, a fee may be charged in accordance with the tariff specified by applicable regulations.
1.12. Updates
AEC Akademi reserves the right to update this Privacy Notice in response to operational structural expansions or modifications in legal legislation. The revised text shall become legally binding on the exact date it is officially published on the company's website.