This notice informs you about how Açı Eryaman Koleji (Açı Premium School) processes personal data collected through https://acieryamankoleji.com under Turkey's Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
Last updated:
1. Data Controller
The data controller under KVKK and GDPR is Açı Eryaman Koleji.
Address: Susuz Mahallesi Akıncılar Caddesi 5327. Sokak No:2B Yenimahalle/Ankara
The site may collect the following categories of personal data:
Identity data: Name and surname — via the contact and pre-interview forms.
Contact data: Email address and phone number — via the forms.
Transaction security data: IP address, processed transiently and only as a hash for form rate-limiting / spam protection. The raw IP is not stored in emails, logs or databases.
Form message content: The message you type into the contact form.
Cookie and browsing data: Analytics and advertising data collected through cookies subject to your consent (detailed below).
3. Processing Purposes
Responding to contact and pre-interview requests
Evaluating and responding to enrollment inquiries
Providing information about our educational services
Ensuring form and site security; blocking automated bots and spam submissions
Measuring site performance and improving user experience (only with your consent)
Carrying out marketing and targeted advertising activities (only with your consent)
4. Legal Bases
Personal data is processed under the following legal bases (KVKK Art. 5 / GDPR Art. 6):
Explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)): Marketing/advertising cookies and analytics cookies are activated only with your opt-in consent.
Performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)): Providing the communication you requested by submitting the form.
Legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)): Spam protection, rate limiting, necessary/functional cookies and site security.
Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)): Records we are required to retain under applicable law.
5. Third-Party Services and International Transfers
The site uses the following third-party services. Their servers may be located outside Türkiye; data is transferred internationally under KVKK Art. 9.
Service
Provider / Country
Purpose
Google reCAPTCHA v2
Google LLC / USA
Form bot and spam protection (security)
Google Tag Manager
Google LLC / USA
Tag management container (consent-gated firing)
Google Maps (embed)
Google LLC / USA
Location display (loaded when the map is shown)
Meta Pixel
Meta Platforms Inc. / USA
Ad measurement (loaded only with "Advertisement" consent)
The site uses four cookie categories. Everything except Necessary and Functional cookies is loaded only with your explicit consent. On first visit, advertising, analytics and marketing cookies are set to "denied" under Google Consent Mode v2.
Necessary cookies (always active): Required for core site functionality, form security and session management. No consent required under KVKK/GDPR.
Functional cookies: Remember user preferences such as language.
Analytical cookies: Measure site usage anonymously. (Requires consent.)
Advertising cookies: Meta Pixel and similar ad-measurement tools are loaded only when you grant consent to this category.
You can change your cookie preferences at any time:
7. Retention Periods
Form submissions: Up to 3 years from the resolution of the request; longer where retention is required by applicable law.
Spam-protection IP hash: Temporary file with a 10-minute window, then automatically removed. The raw IP is never stored.
Cookie preferences (localStorage): Stored in your browser until you clear them. Advertising/analytics cookies remain active for up to 24 months.
8. Your Rights (KVKK Art. 11 / GDPR)
As a data subject, you have the right to:
Learn whether your personal data is being processed
Request information about the processing if it is
Learn the purpose of processing and whether the data is used in line with that purpose
Know the third parties to whom data is transferred, in Türkiye or abroad
Request correction of incomplete or inaccurate data
Request erasure or destruction of data within the conditions of KVKK Art. 7
Request that erasure / correction be communicated to third parties to whom the data was transferred
Object to an outcome resulting solely from automated processing
Claim compensation for damages caused by unlawful processing
9. Contact and Requests
To exercise the rights above or ask questions about our privacy practices, please write to [email protected] or send a signed letter to Susuz Mahallesi Akıncılar Caddesi 5327. Sokak No:2B Yenimahalle/Ankara.
Requests will be handled within 30 days, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Turkish Personal Data Protection Authority.