Personal data protection
Privacy Notice
Version 2026-09-08 · Last updated: 8 September 2026
This is an English translation provided for information. In case of any discrepancy, the Turkish text prevails.
This notice explains, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, how your personal data is processed by İpekyolu Uluslararası Öğrenci Derneği as the data controller.
1. Data controller
İpekyolu Uluslararası Öğrenci Derneği — Kayıhan Mh. Kirişçikızı Sk. No:12, Osmangazi, Bursa 16030. Contact: info@bursaipekyolu.org, 0224 220 08 59.
2. Data processed, purposes and legal grounds
| Process | Data | Purpose | Legal ground (KVKK Art. 5) |
|---|---|---|---|
| Membership | Full name, e-mail, password (hash), phone, delivery address, date of privacy consent | Creating the membership, reviews and messaging, coupons and prize-wheel rewards | Conclusion and performance of a contract (Art. 5/2-c); explicit consent (acknowledgement of this notice) |
| Donations | Full name, e-mail, phone, donation note (proxy, shareholder and name details), donation contents and payment status | Recording the donation and delivering it to those in need, proxy and sacrifice notifications, matching bank transfers, record-keeping obligations under the law | Performance of a contract (Art. 5/2-c); legal obligation (Art. 5/2-ç) |
| Reviews | Full name, rating, review text, date | Approving and publishing reviews | Explicit consent; legitimate interest (Art. 5/2-f) |
| Messages | Subject, message content, date | Answering support requests | Performance of a contract; legitimate interest |
| Cookies | Basket, favourites, cookie choice (on your device); member and administrator session cookie | Running the site, keeping you signed in | Legitimate interest; explicit consent for preferences and third-party content |
We do not process special categories of personal data (health, religion, biometric data, etc.); please do not write such information in your notes. Card details are never stored on our site.
3. How the data is collected
Your data is collected electronically and automatically through the membership, donation, application and message forms on the site and through cookies.
4. Transfers of data
- Field teams: names you provide for sacrifice, vow and similar donations are shared with our aid teams only to record the act.
- Bank: to match transfers, the name and donation number on the transfer slip are compared with our bank records.
- Third-party content providers: with your consent, Google Maps is loaded on the contact page; images on the pages come from content delivery networks. These providers may technically process your IP address and may be located abroad; we do not pass your personal data to them.
- Legal authorities: data may be shared with competent authorities where required by law.
5. Retention periods
- Membership data: for the duration of the membership; when you delete your account, your reviews, coupons and messages are deleted.
- Donation records: 10 years as required by foundation and tax legislation; when an account is deleted, the donation record is detached from it.
- Your cookie choice and the basket/favourites on your device stay on your device until you delete them and are not sent to the server.
6. Your rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties it is transferred to; to request correction if it is incomplete or inaccurate; to request its deletion or destruction under KVKK Art. 7; to request that these actions be notified to the third parties it was transferred to; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.
Members can correct their profile, download a copy of their data and delete their account on the My account page.
7. Applications
You can send your requests by e-mail to info@bursaipekyolu.org or in writing to the address above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within 30 days at the latest.