1. Introduction
İstanbul Enstitüsü ("we", "our institution", "Company", "Institute" or "Our Foundation") places great importance on the privacy of our users and the protection of their personal data. This Privacy Policy has been prepared to explain how your personal data is collected, used, protected, and shared when you visit the istanbulenstitusu.com website ("Website") or make use of our services. This policy has been drafted in full compliance with the European Union General Data Protection Regulation (GDPR), the UK GDPR, the Personal Data Protection Law (KVKK), and the relevant local data protection legislation of the global regions in which we operate.
2. Personal Data Collected
In order to provide and improve the services offered through our website, we may collect the following data:
Contact Information: Name, surname, email address, phone number.
Transaction and Course Information: Purchased courses (A1-C2 general Turkish, sectoral programs), preferred language levels, and educational background preferences.
Communication and Support Data: Messages, requests, and correspondence transmitted via the contact form or WhatsApp line.
Technical Data: IP address, browser type, operating system, in-site navigation information, and cookies data.
3. Methods of Data Collection and Legal Basis
Your personal data is collected electronically via registration forms, contact forms, cookies preferences, email correspondence, and digital channels such as WhatsApp on our website. The primary legal bases for processing your data are: the establishment and performance of a contract, compliance with legal obligations, your explicit consent, and our legitimate interests.
4. Purpose of Data Processing
Your collected personal data is processed for the following purposes:
Ensuring the organization and management of language courses, sectoral programs, and individual lessons.
Executing purchase and registration transactions, and sending informative emails.
Responding to customer support requests and communicating via WhatsApp or email.
Improving the functionality of the website, personalizing the user experience, and ensuring its security.
Fulfilling obligations under GDPR, UK GDPR, KVKK, CCPA, PIPL, PIPA, and other international regulatory frameworks.
5. Sharing of Data
İstanbul Enstitüsü does not sell or rent your personal data to third parties. Your data may only be shared in the following circumstances:
With authorized business partners and infrastructure providers from whom services are procured for payment processing infrastructure and technical operations.
With authorized public institutions and organizations within the framework of legal obligations.
6. Cookies
Our website uses cookies to enhance your site experience, analyze site traffic, and gather statistical data. When you first visit our site, you can manage your cookies preferences or grant consent via the cookies banner that appears. You may reject or delete cookies at any time through your browser settings; however, please note that certain features of the site may not function properly in this case.
7. Data Security and Retention Period
Appropriate technical and administrative measures are taken to ensure the security of your personal data. Our website is protected with SSL encryption technology, and security measures in compliance with international standards are implemented against unauthorized access, loss, or leaks.
Your personal data is retained by our foundation for the period necessary for the purposes of processing, subject to the statutory retention periods prescribed by the national laws of the countries where we operate or where our users are located (including GDPR, UK GDPR, KVKK, CCPA, PIPEDA, PIPL, PIPA, APPI, PDPL, POPIA, and relevant local legislation). Upon the elimination of the legal or operational grounds requiring data retention, your data is deleted, destroyed, or anonymized.
8. Your Rights (Rights under Global Data Protection)
As a user—including our users in the European Union, the United Kingdom, the Americas, Asia, the Middle East, Africa, and other international regions—you have the following rights regarding your personal data pursuant to applicable national and international legislation (GDPR, UK GDPR, KVKK, CCPA, PIPL, PIPA, etc.): the right of access, the right to rectification or erasure (Right to be Forgotten), the right to object to processing, data portability, and the right to request restriction of processing. To exercise these rights or withdraw your consent, you may contact us at office@istanbulenstitusu.com.
9. Policy Amendments
This Privacy Policy may be updated when necessary to maintain compliance with the GDPR, UK GDPR, KVKK, and global regulatory frameworks. The updated text becomes effective as of the date it is published on the website.
10. Contact
For any questions and inquiries regarding our Privacy Policy or our data protection practices within the scope of global data protection regulations (GDPR, KVKK, UK GDPR, CCPA, PIPL, PIPA, PDPL, POPIA, etc.), you can write to us at office@istanbulenstitusu.com.