1. Identity of the Data Controller
Pursuant to GDPR and the Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by the DEÜ Events Platform acting as the Data Controller, as described below. Our platform exclusively provides event services for Dokuz Eylül University and its student community.
2. Personal Data Being Processed
During the process of creating an event registration, obtaining a digital ticket, or subscribing to notifications on the Platform, the following categories of personal data relating to students may be processed:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | First Name, Last Name, Student Number, University / Department | Via registration form |
| Contact Data | Email address | Via registration form |
| Transaction / Participation Data | Event registration history, digital ticket code, attendance status | Automatically during platform transactions |
| Security / Log Data | Connection and transaction timestamps, anonymised system access records | Automatically by the system |
Note: Special categories of personal data (race, religion, health information, etc.) are never processed by our platform under any circumstances.
3. Purposes & Legal Bases for Processing
Data processing activities provided to students are carried out for the following purposes and legal bases under Article 5 of the KVKK / Article 6 of GDPR:
- →Event registration and digital ticket issuance: Verification of your participation application and generation of a digital entry ticket. (Performance of contract — Art. 5/2-c KVKK / Art. 6(1)(b) GDPR)
- →Notification and communication: Delivery of event changes, schedule updates and participation confirmation messages. (Performance of contract — Art. 5/2-c KVKK / Art. 6(1)(b) GDPR)
- →Security and auditing: Prevention of unauthorised access and preservation of digital infrastructure integrity. (Legitimate interest — Art. 5/2-f KVKK / Art. 6(1)(f) GDPR)
4. Data Retention Period & Deletion
Student data is stored securely for as long as required by the processing purpose in accordance with GDPR/KVKK principles, and is automatically anonymised or deleted once that period expires.
5. Transfer of Personal Data
Your personal data is never shared with any third-party for advertising or marketing purposes. Data is transferred to our international infrastructure and communication partners—who maintain high security protocols—only as necessary to operate the platform, under binding confidentiality commitments.
6. Rights of the Data Subject under Article 11
Under Article 11 of the KVKK and Chapter III of GDPR, you have the following rights regarding your personal data:
Right to Information
To learn which personal data about you is being processed.
Right to Rectification
To request correction of incomplete or inaccurately processed personal data.
Right to Erasure / Anonymisation
To request deletion of your personal data once the processing purpose has ceased.
Right to Object to Processing
To object to personal data processed on the basis of legitimate interest.
7. How to Submit a Request
To exercise the above rights, you may submit a request by email. Your request will be responded to as soon as possible and within a maximum of 30 (thirty) days.
Via Email: info@deuetkinlikleri.com
Location: İzmir, Türkiye