1) Data Controller
Bursa Artvin Foundation (the "Foundation") — Address: Demirtaşpaşa, İnönü Cd. Yuvam İş Hanı No: 113 Floor: 2, 16220 Osmangazi/Bursa, Türkiye — E-mail/Registered E-mail (KEP): bilgi@artvinvakfi.org.tr — Phone: +90 224 360 98 08. In its capacity as data controller, the Foundation processes your personal data as set out below.
2) Personal Data Processed
• Identity data (full name, Turkish ID number, place/date of birth, gender, parents' names, civil registry information),
• Contact data (address, e-mail, telephone),
• Education data (school, university, year of study, transcript, etc.),
• Financial data (bank details/IBAN, household income status, payroll statements),
• Visual data (photograph),
• Transaction security data (IP address, browser and device information, interaction behaviour on the form — see Section 9),
• Special categories of personal data: criminal record certificate, biometric photograph
3) Purposes of Processing
Receiving and evaluating the scholarship application; verifying the identity of the applicant and the accuracy of the statements provided; carrying out scholarship allocation and payment processes; notifying applicants of the results; protecting the application form against automated and malicious submissions and ensuring information security; fulfilling legal obligations and maintaining records.
4) Legal Basis
Your ordinary personal data are processed under Article 5 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Your transaction security data are processed without your explicit consent, pursuant to Article 5/2-(f) of the KVKK, on the basis of our legitimate interest in ensuring the security of the form. Your special categories of personal data (criminal record certificate and, where applicable, biometric data) are processed solely on the basis of your EXPLICIT CONSENT pursuant to Article 6 of the KVKK. Your separate explicit consent is obtained for the cross-border transfer arising from the security verification, pursuant to Article 9 of the KVKK.
5) Method of Collection
Your data are collected electronically through the application form on our website and the documents you upload. Your transaction security data are collected by automated means only while you visit our form pages, and only to the extent necessary for the security verification.
6) Transfers
Your data may be shared, solely for the purpose of conducting the scholarship process, with the authorised units of the Foundation and, where mandatory, with competent public authorities; and, on a limited basis, with our service provider for the purpose of maintaining the technical infrastructure. The identity, contact, education, financial, visual and special category data you declare in the application form ARE NOT TRANSFERRED ABROAD. Only the technical data falling within the scope of the security verification described in Section 9 are transferred to servers located abroad, as required by the nature of that service. Your data are not shared with any other third parties.
7) Retention Period
Your data are retained for the period required by the purpose of processing and for the periods prescribed by applicable legislation. If your application is unsuccessful, your data are erased/destroyed within one year at the latest; if a scholarship is granted, your data are erased/destroyed within one year following the termination of the scholarship relationship and the expiry of the statutory retention obligations. The technical data collected for the security verification are not stored by the Foundation; the retention period for such data is subject to the service provider's own policies.
8) Your Rights under Article 11 of the KVKK
You have the right to learn whether your personal data are being processed; to request information if they have been processed; to learn the purpose of the processing and whether the data are used in accordance with that purpose; to request rectification if the data are incomplete or inaccurate; to request erasure or destruction if the data have been processed in breach of the KVKK; to request that the processing be stopped; and to claim compensation if you suffer damage. You may submit your requests to the Foundation at bilgi@artvinvakfi.org.tr.
9) Security Verification (Google reCAPTCHA) and Use of Cookies
The forms on our website are protected by the "Google reCAPTCHA" service provided by Google Ireland Limited / Google LLC, in order to guard against fraudulent, high-volume and malicious submissions made by automated software (bots).
This service does not run across our entire website; it is executed ONLY on pages containing a form, and solely for the purpose of security verification. No data are collected in this context when you visit pages other than our forms.
During the verification, technical data such as your IP address, browser and operating system information, device and screen characteristics, the time you spend on the page, and your mouse and keyboard movements are collected automatically and transmitted to Google's servers for analysis, in order to determine whether you are a genuine user or a bot. As a result of this analysis, the Foundation receives only the information as to whether the verification was successful. The Foundation does not access the content of such technical data, does not store it on its own systems, and does not use it for profiling, advertising, marketing or analytics purposes.
The cookies used in this context are STRICTLY NECESSARY (mandatory) cookies, required for the secure delivery of the service you have requested (submission of the form). Pursuant to the Guidelines on Cookie Practices issued by the Turkish Personal Data Protection Authority, explicit consent is not required for strictly necessary cookies; this matter is hereby brought to your attention by means of this notice. If you block these cookies through your browser settings, the security verification cannot be completed and you will therefore be unable to submit the form.
This verification requires the transfer of data to Google's servers located abroad, and such transfer is based on your explicit consent pursuant to Article 9 of the KVKK.
You may find detailed information on Google reCAPTCHA's data processing practices at the following links:
• Google Privacy Policy: https://policies.google.com/privacy
• Google Terms of Service: https://policies.google.com/terms
EXPLICIT CONSENT DECLARATION
I have read and understood the privacy notice above. I give my EXPLICIT CONSENT to the processing, storage and — within the limits stated above — transfer of my personal data, including my identity, contact, education, financial and visual data as well as my SPECIAL CATEGORY data (my criminal record certificate and, where applicable, my biometric data), for the purposes set out above and within the scope of Articles 5 and 6 of the KVKK.
Furthermore, I give my EXPLICIT CONSENT to the processing of my technical data, including my IP address and device/browser information, as described in Section 9, within the scope of the Google reCAPTCHA service used to ensure the security of the form, and to the transfer of such data abroad pursuant to Article 9 of the KVKK.
This is an unofficial translation provided for information purposes only.
In case of any discrepancy, the Turkish version shall prevail.