KVKK Privacy Notice
This privacy notice explains the processing and protection of your personal data under the Personal Data Protection Law No. 6698 ('KVKK').
1. Identity of the Data Controller
This Privacy Notice has been prepared by AktEdu (“Platform” or “AktEdu”) under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) for the administrators, teachers, staff, students and parents of the educational institutions we serve.
2. Categories of Personal Data Processed
The following categories of data are processed as part of the SaaS and educational tracking services provided through the AktEdu platform:
| Data Category | Data Elements Processed | Data Subject Group |
|---|---|---|
| Student Identity & School Information | First name, surname, institution reference number (external_no), class/group level, subject stream preference (SAY/SÖZ/EA/DİL). | Student |
| Parent & Contact Details | Parent 1 and Parent 2 full names, mobile phone numbers and email addresses. | Parent |
| Academic & Exam Performance | Mock exam results, correct/incorrect/net scores, learning outcome analysis by subject, scores and rankings, question counts, target exam type (YKS, etc.). | Student |
| Guidance & Progress Tracking | Guidance teacher consultation notes, weekly study schedules, homework tracking records, one-to-one study session records. | Student, Guidance Teacher |
| Staff & Authorisation | Teachers' and administrators' full names, institutional email addresses, phone numbers, subject specialisms and access roles. | Institution Staff |
| Transaction Security & Logs | User session logs, IP address, login time, Athena AI analysis queries, audit trails (audit logs). | All Users |
3. Purposes of Processing Personal Data
- Tracking students' academic progress and analysing mock exam results and net scores.
- Preparation of personalised weekly lesson and study schedules.
- Digital recording of consultation notes and student progress by guidance services.
- Transparent sharing of academic status through student and parent portals.
- Ensuring institutional data isolation, authorisation safeguards and account access controls on the platform.
- Conducting information security processes and fulfilling statutory logging obligations.
4. Methods and Legal Grounds for Data Collection
Your personal data is collected electronically through the AktEdu web application, mobile PWA interface, optical answer sheet/Excel files uploaded by institutions and API integrations.
Our data processing activities rely on the following legal grounds under Article 5/2 of KVKK:
- Performance of the Agreement (Art. 5/2-c): Establishment and performance of the SaaS service agreement between the educational institution and AktEdu.
- Legal Obligation (Art. 5/2-ç): Retention of system access logs in accordance with Law No. 5651 and applicable legislation.
- Legitimate Interest (Art. 5/2-f): Ensuring platform security, preventing data loss and improving service quality, provided that fundamental rights and freedoms are not harmed.
5. Transfer of Personal Data
AktEdu never sells or rents the personal data it processes to third parties for commercial or advertising purposes. Your data may only be transferred to:
- The relevant Educational Institution and Its Authorised Teachers where the student is enrolled (limited to the groups they are authorised to access),
- The student's legal Parent or Guardian (only their own child's report and tracking data),
- Authorised Public Institutions and Organisations in the event of a legal obligation or judicial investigation.
6. Retention and Destruction Periods
Personal data is retained on secure server infrastructure for the duration of the agreement with the educational institution and, following its termination, for statutory limitation and archiving periods (a maximum of 10 years). At the end of this period, data is deleted, destroyed or anonymised in accordance with the KVKK Regulation.
7. Rights of the Data Subject (KVKK Article 11)
Under Article 11 of KVKK, data subjects have the right to learn whether their personal data is processed; request information if it has been processed; learn whether it is used in accordance with its processing purpose; know the third parties to whom data is transferred domestically or abroad; request rectification if it has been processed incompletely or incorrectly; and request its deletion or destruction.
8. Application Procedure and Template
Under Article 13 of Law No. 6698 and the Communiqué on the Principles and Procedures for Applications to the Data Controller, you may prepare your requests with the following information and submit them to info@aktedu.com using your registered email or secure electronic signature:
Depending on its nature, your request will be resolved free of charge within a maximum of 30 (thirty) days from the date it reaches our Company, and you will receive a written or electronic response.