PRIVACY AND PERSONAL DATA PROTECTION POLICY
Data Controller Information
· Company Title: SPÄ°N TURÄ°ZM KONGRE ULAÅžIM KONAKLAMA GÄ°RİŞİMLERÄ° VE YATIRIMLARI SAN TÄ°C LTD ÅžTÄ°
· Trade Name / Brand: Sky Medical Academy
· Website: www.skymedicalacademy.com
· Address: ATATÜRK MAH. ANAFARTALAR CAD. GÜZÄ°N SOK. C BLOK NO:19/1 DAÄ°RE:12, 34530 BÜYÜKÇEKMECE / Ä°STANBUL
· E-Mail: info@skymedicalacademy.com
· Phone: +90 501 105 36 28
· MERSIS No: 0781-0509-4105-9324
1. Introduction
At Sky Medical Academy ("Company" or "We"), we attach great importance to the security and privacy of your personal data. This policy has been prepared to explain, in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), for which purposes your data is processed, how it is collected, stored, and protected. Your visit to our website or purchase of any of our services implies your acceptance of the terms of this policy.
2. What Data is Collected?
To effectively provide our services to you, we may collect the following personal data:
· Identity and Contact Information: Name, surname, Turkish ID number (limited to legal obligations such as invoicing), email address, phone number, billing and delivery address.
· Demographic and Professional Information: Date of birth, graduation information, field of expertise, institution of employment, title (for the purpose of certification, congress registration, and directing you to suitable training programs).
· Financial Data: Your payment information (credit/debit card details) is processed by our payment service provider, Iyzico Ödeme ve Elektronik Para Hizmetleri A.Åž. ("Iyzico"), within the framework of its own privacy policy and the highest security standards (PCI-DSS). This sensitive data is never stored on our servers. You can review Iyzico's privacy policy at https://www.iyzico.com/gizlilik-politikasi.
· Educational and Career Data: Training and internship programs you applied for, courses you attended, your exam results, certificate information, resume (CV) information.
· Technical and Transaction Data: Your IP address, browser type and language, operating system, hardware information, on-site navigation times and behavior, cookie data, order and service history.
3. How and Why is Your Data Processed?
Your personal data is processed for the following purposes:
· To receive, evaluate, and execute all your education and event applications, such as online courses, certificate programs, onsite training, congresses, symposia, clinical/hospital/laboratory observations, fellowships, and internship programs.
· To deliver the physical (books) or digital (e-books, online course access) products you have purchased and to issue invoices.
· To make your accommodation and transportation reservations.
· To securely collect your payments (via Iyzico).
· To conduct marketing communication via email or SMS regarding scientific announcements, new training programs, campaigns, and updates (based on your explicit consent or within the scope of our legitimate interest).
· To improve the functionality of our website, enhance your user experience, and increase our customer service quality.
· To fulfill legal and regulatory requirements (e.g., tax legislation, health legislation).
4. Transfer of Your Data
Your personal data may be transferred, limited to the purposes stated above and in accordance with the KVKK, to:
· Payment Institutions (Iyzico): To securely execute your payment transaction.
· Cargo Companies: To deliver the physical products you have purchased.
· Accommodation and Transportation Companies: To make your reservations.
· Certifying Institutions, Universities, or Partner Healthcare Institutions: To manage your certification processes, facilitate your admission to internship/fellowship programs, and fulfill the requirements of our contracts with these institutions.
· Legally Authorized Public Institutions and Organizations: In case of a legal obligation (e.g., Tax Office, courts).
5. Cookies
Our website uses cookies to improve your user experience, analyze site traffic, remember your preferences, and show you personalized content. You can control the collection of this data by rejecting cookies or setting your browser to notify you when a cookie is sent.
6. Data Security
We take all necessary technical and administrative measures (encryption, access controls, firewalls) to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Particularly, your payment information is encrypted through Iyzico's secure infrastructure, and all associated risks and liabilities belong to Iyzico.
7. Your Rights as a Data Subject
In accordance with Article 11 of the KVKK, regarding your personal data, you have the right to:
· Learn whether your data is being processed.
· Request information if your data has been processed.
· Learn the purpose of processing and whether it is used in accordance with its purpose.
· Know the third parties to whom your data is transferred, domestically or abroad.
· Request rectification if your data is incomplete or inaccurate.
· Request deletion or destruction of your data within the framework of the conditions set forth in the KVKK.
· Request notification of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom your data has been transferred.
· Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.
· Request compensation for any damage arising from the unlawful processing of your data.
8. Method for Exercising Your Rights
You can exercise your rights listed above by submitting a written request to info@skymedicalacademy.com or to our address at ATATÜRK MAH. ANAFARTALAR CAD. GÜZÄ°N SOK. C BLOK NO:19/1 DAÄ°RE:12, 34530 BÜYÜKÇEKMECE / Ä°STANBUL, with a subject line "Information Request under the Law on Protection of Personal Data" and including documents verifying your identity. Your request will be evaluated and finalized as soon as possible, within the legal timeframe.
9. Changes
We reserve the right to update this Privacy Policy at any time by publishing it on our website. Changes become effective on the date they are published on the site.