Legal Information

Data Protection Notice

Information about your rights and the processing of your personal data under Turkish Personal Data Protection Law No. 6698.

Last Updated: 7 March 2026

Effective Date: 1 January 2024

Law: Law No. 6698 (KVKK)

At Derin Akademi Eğitim Teknolojileri A.Ş. we take the security and privacy of your personal data seriously. This notice has been prepared pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698.

1. Data Controller

Your personal data is processed by our company, whose contact details appear below, acting as data controller within the framework of Turkish Personal Data Protection Law No. 6698 (“KVKK”):

Company	Derin Akademi Eğitim Teknolojileri A.Ş.
Address	İçerenköy Mah. Topçu İbrahim Sokak Quick Tower Sitesi No:8-10D, Ataşehir / İstanbul 34752, Türkiye
Email	derin@derinakademi.net
Phone	+90 533 019 31 34

2. Personal Data Processed

The following categories of personal data are processed when you use our services:

Identity data: first name, surname, national ID number (when a certificate is issued)
Contact data: email address, phone number
Account data: username, password (hashed), profile information
Financial data: purchase history and invoice details (payment card details are not stored by us)
Usage data: course progress, sign-in logs, IP address
Technical data: cookie data, device and browser information

3. Purposes of Processing and Legal Bases

Purpose	Legal basis
Creating an account and providing the service	Formation and performance of a contract (Art. 5/2-c)
Providing access to training content	Performance of a contract (Art. 5/2-c)
Invoicing and accounting records	Legal obligation (Art. 5/2-ç)
Personalised learning experience	Legitimate interest (Art. 5/2-f)
Platform security and fraud prevention	Legitimate interest (Art. 5/2-f)
Marketing and newsletter delivery	Explicit consent (Art. 5/1)
Customer service	Performance of a contract (Art. 5/2-c)

4. Transfer of Personal Data

Within the framework of Articles 8 and 9 of the KVKK, and limited to the purposes stated above, your personal data may be transferred to:

Payment infrastructure providers (to process payments)
Email and SMS infrastructure providers (for communication)
Cloud storage providers (for technical infrastructure)
Legal advisors (for compliance and dispute resolution)
Authorised public institutions (where legally required)

Transfers abroad are made only to countries declared by the Turkish Personal Data Protection Board to provide adequate protection, or on the basis of your explicit consent.

5. How Data Is Collected

Your personal data is collected by the following means:

Forms you complete on our website and mobile applications
Account registration and sign-in
Course purchase and usage
Customer service requests
Cookies and analytics tools
Social sign-in integrations (Google, GitHub, LinkedIn)

6. Your Rights as a Data Subject

Under Article 11 of the KVKK you have the following rights:

Right	Description
To be informed	Learn whether your personal data is being processed
To request information	Obtain information about the data processed
To learn the purpose	Learn the purpose of processing and whether it is used accordingly
To learn about transfers	Learn the third parties to whom the data has been transferred
To rectification	Request correction of incomplete or inaccurate data
To erasure	Request deletion of the data within the framework of data protection law
To notification of transfers	Request that rectification or erasure be notified to the parties the data was transferred to
To object	Object to an adverse outcome produced by automated analysis
To compensation	Request compensation for damage arising from unlawful processing

7. How to Make a Request

You can exercise your rights through the channels below. After your identity has been verified, your request will be concluded within 30 days at the latest:

Email: derin@derinakademi.net (from your registered address or with a secure electronic signature)
Post or in person: İçerenköy Mah. Topçu İbrahim Sokak Quick Tower Sitesi No:8-10D, Ataşehir / İstanbul 34752, Türkiye (with a wet-signed petition)

If you are not satisfied with the response to your request, you have the right to lodge a complaint with the Turkish Personal Data Protection Board (www.kvkk.gov.tr).