İhsan Doğramacı Bilkent University Library Clarification Text On The Personal Data Protection Law
The Personal Data Protection Law No. 6698 (“KVKK”) was adopted to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, and to regulate the obligations of natural and legal persons processing personal data and the procedures and principles to be followed. It was published in the Official Gazette on 7 April 2016 and articles 8, 9, 11, 13, 14, 15, 16, 17 and 18 of the law entered into force on 7 October 2016.
In accordance with KVKK, at İhsan Doğramacı Bilkent University Library (the data processor/controller), personal data collected and/or shared can be processed and retained, when necessary, in a way relevant with, limited to and proportionate to the purposes for which they are processed, and maximum care will be taken for the security of personal data.
As per conditions set in articles 5 and 6 of KVKK, personal data may be collected in verbal, written or electronic media through channels such as registration and application forms to the university library, internet websites and e-mails, mobile applications, library automation system, institutional repository, collected forms, recruitment applications, school and course management systems, remote communication platforms, contracts, applications, proposals, audio and video recordings, required academic communications with educational institutions in Türkiye and abroad, cookies used by computers to recognize persons in website visits, the Registrar’s Office, registry units and other personnel, administrative and academic units, secretariat, reception and security offices, university and program partners in Türkiye and abroad, and companies which provide services to the university.
The purposes and legal base of processing and transfer of personal data at İhsan Doğramacı Bilkent University Library include, maintaining library-users relations, updating contact information, storing and tracking user information in systems, announcing and evaluating educational, fulfilling legal and contractual obligations, providing all services, conducting registration and follow-up activities, fulfilling financial obligations including invoicing, enabling units/departments to contact you, broadcasting announcements and ensuring satisfaction in general, maintaining alumni relations, determining needs based on person’s tastes, habits and requests, safeguarding the library’s and others’ security, protecting public health, determining institutional strategies, carrying out and improving services in line with legal provisions and contractual and technological requirements, undertaking advertising, promotional and educational activities, conducting needs analysis, administering all paper and documents to facilitate electronic and paper-based processing, communicating with schools and universities in Türkiye and abroad about academic requirements of student and library staff exchange, internship programs, graduate and similar programs, fulfilling the data storage, reporting and notification obligations as required by law, regulatory bodies and other authorities.
In line with the purposes listed above, personal data may be transferred to the following persons/institutions: Council of Higher Education (YÖK), institutions and organizations authorized or required by statutory provisions, national and international schools, universities and program partners, affiliated organizations and/or direct or indirect subsidiaries, persons and institutions with whom the library cooperates and has contracted for services, and third parties working with university units for data security measures such as the storage of personal information, prevention of unauthorized access and prevention of illegal processing of personal data.
Pursuant to articles 10 and 11, as well as other relevant articles of KVKK, persons are entitled to contact İhsan Doğramacı Bilkent University Library at any time, and have the right to: access processed personal data, request information about the processing of personal data, learn the purpose of the processing of personal data and whether such data is used for the intended purpose, request information about third parties in the Türkiye or abroad to whom personal data is transferred, request correction of any of personal data which is incomplete or processed inaccurately, request the deletion or destruction of personal data if the reasons for processing of personal data cease to exist, even though the data had been processed in compliance with the law and applicable legal provisions, request notification of third parties to whom personal data was transferred of the use of a person’s right to request the erasure or destruction of personal data, object to the processing of personal data that is analyzed exclusively by automated systems and leads to an unfavorable consequence for you, and seek compensation for any damages arising from the unlawful processing of personal data.