This notice has been prepared to provide information about the main personal-data processing activities carried out through the website under Article 10 of Turkish Personal Data Protection Law No. 6698. A privacy notice is not a request for approval or explicit consent; where a separate activity requires consent, that choice is presented separately.
Data controller
Your personal data is processed by Erişir Eğitim Hizmetleri Ltd. Şti. / Amerikan Kültür Avcılar as data controller.
Address: Demir Plaza, Cihangir Mah. E-5 Yanyol, Kaptan Sk. Üzeri No:1, 34315 Avcılar/İstanbul, Türkiye
Telephone: (0212) 695 09 19
Data and processing purposes
Contact and enquiry forms may process a name, telephone number, optional email, message, programme preference and preferred contact time. Level tests may process answers, a result and provisional placement. Campaigns and prize draws may process participation and prize records. A saved personalised programme suggestion may include age range, occupation, availability and interests.
This information is used to answer requests, present education options, prepare a level or programme suggestion, follow up an enquiry, apply campaign conditions and maintain information security and abuse prevention.
Collection and legal grounds
Information is collected electronically through website forms, level tests, cookie preferences and telephone or WhatsApp contact initiated by you.
Depending on the activity, processing may rely on the legal grounds in Article 5 of Law No. 6698 concerning steps directly related to establishing or performing a contract, compliance with a legal obligation, the establishment or protection of a right, or legitimate interests that do not prejudice fundamental rights. Where analytics, advertising measurement or a separate personalisation activity requires explicit consent, that choice is requested separately.
Data transfers
Information may be shared to the extent necessary with providers supporting data hosting, notification email, bot verification and consented analytics measurement. These may include Supabase, Resend, Cloudflare and, where permission is granted, Google services.
The precise scope, purpose and applicable international-transfer safeguard must be assessed according to the provider, technical arrangement and legislation in force. Personal information entered in forms is not sent directly to analytics platforms for advertising targeting.
Retention and security
Personal data is retained for the period necessary for the processing purpose and applicable legal obligations, and is then deleted, destroyed or anonymised.
Measures include role-controlled administrative access, server-side validation, request rate limiting, audit records and transport security.
Your rights under KVKK
Under Article 11, you may ask whether your personal data is processed, request information, learn the processing purpose and recipients, request correction of inaccurate or incomplete data, request deletion or destruction where the conditions apply and exercise the other rights set out by law.
Requests and contact
You may send a request through the channels on our contact page or in writing to the address above. Information needed to verify your identity and the subject of the request may be requested. Applications are reviewed using the procedures and periods set by applicable law.
Pre-publication review: The legal entity name, formal application channel, retention periods and international-transfer safeguards must be confirmed by the data controller or its legal adviser.