Up Your Life
KVKK ILLUMINATION AND INFORMATION TEXT
ILLUMINATION TEXT WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698
Uplife Academy and Consulting respects your privacy and places importance on data security. Within this scope, this illumination text has been prepared to inform and enlighten you in accordance with the Law on the Protection of Personal Data No. 6698 ("Law," "KVKK") and other relevant legislation.
Information
The Law on the Protection of Personal Data No. 6698 was adopted on March 24, 2016, and entered into force upon its publication in the Official Gazette on April 7, 2016. However, according to Article 32 of the Law titled "Enforcement," Articles 8, 9, 11, 13, 14, 15, 16, 17, and 18 of this Law came into force as of October 7, 2016.
The Law was adopted to protect fundamental rights and freedoms, especially the privacy of private life, and to regulate the obligations and procedures to be followed by real and legal persons who process personal data.
With this text, Uplife Academy and Consulting informs and enlightens visitors/customers.
Uplife Academy and Consulting will process your name, email address, work and home address, phone number, and other personal data submitted through forms on this site by visitors/customers, only for the purpose of processing and within the limits specified in this illumination text and, if consent is given, in the explicit consent text.
DEFINITIONS
| Explicit Consent | Refers to consent given freely, based on information, for a specific matter. |
| Company | Refers to Uplife Academy and Consulting Limited Company located at Caddebostan, Bağdat Cad. No:261 Daire:7, 34728 Kadıköy/İSTANBUL. |
| Cookie | Are small files saved on users' computers or mobile devices that help store preferences and other information about the web pages they visit. |
| Relevant User | Are persons who process personal data within the data controller's organization or based on the authority and instruction received from the data controller, excluding the person or unit responsible for the technical storage, protection, and backup of the data. |
| Destruction | The deletion, destruction, or anonymization of personal data. |
| Contact Person | The natural person notified by the data controller during registration to the Registry for communication with the Authority regarding the obligations of legal entities residing in Turkey and the representative of a data controller legal entity not residing in Turkey, under the Law and secondary regulations based on this Law. (The contact person is not authorized to represent the Data Controller. As the name suggests, they are only assigned to provide “contact” and communication between the data controller and relevant persons and the Authority.) |
| Law/KVKK | The Law on the Protection of Personal Data No. 6698, published in the Official Gazette No. 29677 dated April 7, 2016. |
| Recording Medium | Any medium in which personal data processed entirely or partially by automatic means or as part of a data recording system by non-automatic means is located. |
| Personal Data | Any information relating to an identified or identifiable natural person. |
| Processing of Personal Data | Any operation performed on personal data, such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or blocking of use, whether wholly or partly by automated means or as part of a data recording system by non-automatic means. |
| Anonymization of Personal Data | Making personal data impossible to be associated with an identified or identifiable natural person, even by matching with other data. |
| Deletion of Personal Data | Making personal data inaccessible and unusable for Relevant Users in any way. |
| Destruction of Personal Data | The process of making personal data completely inaccessible, unrecoverable, and unusable by anyone. |
| Board | The Personal Data Protection Board. |
| Special Category Personal Data | Data on a person's race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, dress and attire, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data. |
| Periodic Destruction | The process of deletion, destruction, or anonymization to be performed ex officio at recurring intervals, as specified in the personal data storage and destruction policy, when all conditions for processing personal data no longer exist. |
| Policy | The personal data protection policy created by the Company. |
| Data Processor | The natural or legal person who processes personal data on behalf of the data controller based on the authority given by them. |
| Data Recording System | The recording system in which personal data is structured and processed according to specific criteria. |
| Data Subject/Relevant Person | The natural person whose personal data is processed. |
| Data Controller | The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. |
| Source: | Law on the Protection of Personal Data No. 6698 - Regulation on the Deletion, Destruction, or Anonymization of Personal Data - Regulation on the Data Controllers' Registry - Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Obligation of Illumination - Communiqué on Application to the Data Controller and Procedures and Principles |
DATA CONTROLLER AND CONTACT PERSON
As stated in this Illumination Text, the COMPANY is the data controller in accordance with the KVKK.
i. Data Controller Information
- Full Name: Uplife Academy and Consulting Limited Company (Tax ID: 8930626429)
- Short Name: COMPANY
- Address: Caddebostan, Bağdat Cad. No:261 Daire:7, 34728 Kadıköy/Istanbul
- Website: www.uplifeacademy.com
- Phone: 0216 606 55 88
Reasons for Processing Your Data
Your personal data is processed in accordance with Articles 5 and 6 of the Law for purposes such as ensuring that the products and services provided by our Company can be offered to you, carrying out necessary activities within the company, conducting studies with the relevant business unit and business partners to recommend products and services suitable for your consumption and purchasing motivation, ensuring the rights of natural persons by providing human resource management by our Company, taking necessary steps in giving, implementing, and realizing commercial decisions by our Company, ensuring the legal safety of natural persons with whom we establish business relationships and our Company arising from these relationships, and for similar purposes, without being limited to these.
Your personal data, in its capacity as the Data Controller, may be processed without requiring your explicit consent in the following cases:
- It is explicitly foreseen in the laws;
- It is necessary for the protection of the life or physical integrity of the person or another person, who is unable to explain his/her consent due to actual impossibility or whose consent is not legally valid.
- It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the performance of the contract.
- It is mandatory for us to fulfill our legal obligations as the data controller;
- The data has been made public by the data subject themselves.
- Data processing is mandatory for the establishment, exercise, or protection of a right.
- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Your personal data may be processed for the following purposes:
- Communicating with you and others as part of the business.
- Sending you important information about changes to our terms of service, changes to our electronic services, and other administrative information.
- Providing quality, training, and security improvements (for example, regarding recorded or monitored phone calls to our contact numbers).
- Resolving complaints and processing data access or correction requests.
- Preventing, detecting, and investigating crimes, including fraud and money laundering, and analyzing and managing other commercial risks.
- Complying with applicable laws and regulatory obligations (including those outside your country of residence), complying with legal processes, and responding to requests from official authorities and government agencies (including those outside your country of residence).
- Managing and overseeing our infrastructure and business operations, and complying with internal policies and procedures, including those related to audits, finance and accounting, billing and collections, information technology systems, data and website hosting, business continuity and records, document and print management.
- Establishing and defending legal rights; protecting our operations or the operations of our business partners, our rights, our privacy, our safety, or our property and/or yours or others', and exercising available remedies or limiting our damages.
- Conducting market research and analysis, including satisfaction surveys.
- Enabling your participation in competitions, prize drawings, and similar promotions and managing these activities.
- Facilitating social media sharing functions.
- Personalizing your experience with electronic services by offering you special information and advertisements.
Personal Data We Process
Identity Information: Your name, surname, maiden name, TR identity number, passport number and other passport-related information, old passports, information about visa pages on the passport, salary information, place of military service, place and date of birth, student number, personnel registration number, nationality information, your photos, your passports, criminal record, population registration copy, military service explanatory document, any document regarding financial status, your identity information, marriage certificate, social media usernames, graduated school, mother's name, father's name, parent's place and date of birth, parent's nationality information, spouse-child name and surname, spouse-child nationality information, spouse-child year of birth, name-surname-nationality information of the person to travel with, your or your sponsor's tax plate, signature circular, trade registry gazette extract, bank account statements, letter of guarantee, bank letter, title deeds, lease agreements, salary slips, employment entry statement, service record, document showing the place of duty, duration of service, salary received from the workplace, photocopy of vehicle registration, photocopy of retired card and barcoded retirement information document, duty place document for public officials, consent document given by the mother and father for those under eighteen, and other information provided by you to the Company with your explicit consent.
Contact Information: Your residential address, work address, phone number, and email address, KEP (Registered Electronic Mail) address, and if any, your mobile phone number, fax number, or other contact channels you have informed the Company that you prefer to be contacted through with your consent.
Work and Education Information: Information you have filled out in the application form, registration documents, and/or job application forms sent to the company's official email address info@uplifeacademy.com, or through other online or physical application methods provided by the Company, your identity information, information about your employment status, contact information, and information about your education status (such as “University graduate, master's degree graduate, physics department graduate”) and past graduation information, diploma, transcript, information about courses/seminars you have attended, certificate information, and your national or international exam results, acceptance letters from schools/universities, and payment receipts if an application has been made.
To Whom and for What Purpose Your Personal Data is Transferred
Uplife Academy and Consulting transfers personal data to third parties only for the purposes stated in this Privacy and Personal Data Protection Policy and in accordance with Articles 8 and 9 of the KVKK Law.
Your personal data is transferred to our business partners, educational institutions and schools we are affiliated with, our suppliers, our group companies, our affiliates, companies from which we receive external services to fulfill our contractual or legal obligations (on matters such as security, health, work safety, law, etc.), authorized institutions and organizations, Foreign country Consulates, Embassies and intermediary institutions and organizations authorized by these institutions.
The personal data subject to the transfer mentioned above is protected legally as well, through technical measures to ensure their security, and through KVKK-compliant provisions included in our contracts, taking into account whether the other party to the legal relationship is a data controller or data processor.
When sharing information with countries outside of Turkey as mentioned above, the data is transferred in a way that is compliant with this policy and permitted by the applicable law regarding data protection.
Method and Legal Basis for Personal Data Collection
Uplife Academy and Consulting collects personal data through websites, call centers, official notices from administrative and judicial authorities, and other communication channels, in aural, electronic, or written form, in accordance with the personal data processing conditions specified in the KVKK Law and based on the legal reasons stated in this Privacy/Personal Data Protection Policy.
The data collected by the Company is processed in two different CRM (Customer Relationship Management) systems, and the data in these systems is protected by Kaktüs Yazılım Ve Bilişim Sistemleri Limited Şirket for the Uplife Academy Pro program, and by Tekvita Yazılım Bilgisayar Danışmanlık Reklam Organizasyon Turizm Sanayi ve Ticaret Ltd. Şti. for the program named Planports. The data processed by the company in these systems cannot be viewed by either system provider, and the said system providers are responsible for all damages that may arise if this data is accessed by third parties illegally. The protocol signed between the Company and the two different system providers on this matter is attached for your information. (ANNEX-1: Protocol signed with system providers.)
Your personal data is collected and processed by our Company or data processors appointed by our Company for the duration required for the processing purpose, based on one or more of the following legal reasons, through fully or partially automated or non-automated means; in any verbal, written, or electronic medium; through various documents submitted to our company, job application forms, customer information forms, mail, and emails; call centers, the company's website, social media tools, mobile applications, corporate communication accounts and devices, company IT systems and devices, security cameras;
Through various channels such as group companies from which our Company receives or provides services, business partners, companies from which it procures services/products, and employment companies and job search portals, and limited to the purposes specified in the KVKK Law;
- the explicit consent of the data subject,
- it is explicitly foreseen in the laws,
- the personal data has been made public by the data subject themselves,
- it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
- it is mandatory for our Company to fulfill its legal obligation,
- data processing is mandatory for the establishment, exercise, or protection of a right,
- data processing is mandatory for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the data subjects.
Personal data is also collected physically by sending documents, physically filling out a document provided by the Company, by calling the 0216 606 55 88 lines or other internal numbers of the Company.
Your personal data is also collected through cookies used on the https://www.uplifeacademy.com/ address and its extensions. These cookies are only necessary for the visitor to use the site at full efficiency and are used to remember the visitor's preferences and do not provide any other personal data. You can access our cookie policy at https://www.uplifeacademy.com/cerez-politikasi.
The Company does not carry out any personal data processing activities that fall outside the scope of personal data processing conditions specified in the KVKK.
The personal data processing conditions included in the KVKK are as follows:
- The data subject's explicit consent is present.
- It is explicitly foreseen in the laws.
- It is necessary for the protection of the life or physical integrity of the person or another person, who is unable to explain his/her consent due to actual impossibility or whose consent is not legally valid.
- It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
- It is mandatory for the data controller to fulfill their legal obligation.
- The data has been made public by the data subject themselves.
- Data processing is mandatory for the establishment, exercise, or protection of a right.
- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
For special category personal data, the main processing condition is explicit consent, and the Company does not have a primary purpose of processing special category personal data. However, your special category personal data that we must process due to our activity or that you have consented to with your explicit consent is also processed in a measured manner within the scope of the legislation.
The conditions for processing special category personal data listed in the KVKK are as follows:
- The data subject's explicit consent is present.
- For special category personal data other than health and sexual life, it is explicitly foreseen in the laws.
Personal data related to health and sexual life can be processed only if,
- For the protection of public health,
- Preventive medicine,
- Medical diagnosis,
- The conduct of treatment and care services,
and for the purpose of planning and managing health services and their financing,
- by persons under the obligation of confidentiality or by authorized institutions and organizations without the explicit consent of the data subject.
One or more of the personal data processing conditions that make a personal data processing activity lawful may be present at the same time.
To achieve our stated purposes, it becomes necessary to process your data as mentioned above. When identity information is transferred to our Company, data that is not actually included in our processing purposes may also be transferred to us. Within the scope of administrative and technical measures, we delete and/or anonymize the said data at the end of the periods stipulated in the legislation, but it is not always possible to ensure this. In this case, it is necessary to apply for your explicit consent for the processing of such data.
Rights of the Relevant Person Enumerated in Article 11 of the KVKK
As personal data owners, if you submit your requests regarding your rights to our Company using the methods set out below in this Illumination Text, our Company will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee specified in the tariff determined by our Company will be charged. In this context, personal data owners have the right to:
- Learn whether their personal data is being processed,
- Request information about the processing of their personal data, if it has been processed,
- Learn the purpose of the processing of personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom personal data is transferred domestically or abroad,
- Request the correction of incomplete or incorrect personal data and request that the transaction made within this scope be notified to third parties to whom personal data has been transferred,
- Request the deletion or destruction of personal data in case the reasons for its processing have disappeared, even though it was processed in accordance with the provisions of the KVKK and other relevant laws, and request that the transaction made within this scope be notified to third parties to whom personal data has been transferred,
- Object to the emergence of a result against the person themselves by analyzing the processed data exclusively through automated systems,
- Request the compensation of the damage in case of damage due to the unlawful processing of personal data.
How Can You Use Your Rights?
You can send your request/complaint, which clearly and concisely states your statement, to us via the email address info@uplifeacademy.com or send it physically by cargo/mail to the address Caddebostan, Bağdat Cad. No:261 Daire:7, 34728 Kadıköy/ISTANBUL.
If you submit your request to us using one of the methods shown above, in accordance with KVKK Article 13/2, your request will be evaluated within 30 days at the latest and you will be informed about the matter. If your request is accepted, the necessary procedures will be carried out immediately by the data controller Company.
If the process requires an additional cost, it will be answered in electronic form in exchange for the processing fee determined by the Personal Data Protection Board.
We kindly inform you that you can apply to our Data Controller Company, Uplife Academy and Consulting Limited Company, on all these matters.
Address: Caddebostan, Bağdat Cad. No:261 Daire:7, 34728 Kadıköy/ISTANBUL
Phone: 0216 606 55 88
Email Address: info@uplifeacademy.com
Website: https://www.uplifeacademy.com/
The above matters are presented for your information in fulfillment of our obligation to inform about personal data. We ask you to know that permission is obtained for all personal data processing operations other than those permitted by the Legislation to be processed (including transfers) without obtaining explicit consent from the relevant person, and no unauthorized processing is performed.
(ANNEX-1: Protocol signed with system providers.)
