Privacy Policy

KVKK · Privacy and Data Security

Privacy Policy

Sivas Cumhuriyet University Erasmus+ Institutional Coordination Office attaches importance to the privacy and protection of personal data of users visiting its website. This policy explains the scope within which information obtained during the use of the website is evaluated, the general principles regarding data security, and the rights of users.

Data Protection Compliance with KVKK (Personal Data Protection Law)
Security Limited and Purposeful Processing
Security Administrative and Technical Measures
Your rights KVKK Article 11

Privacy policies and GDPR information texts are different.

This Privacy Policy sets forth the general privacy principles regarding the use of the website.

When personal data is processed within the scope of Erasmus+ applications, mobility, communication, document submission, surveys or other processes, the processing activity must be specific to that activity. Personal Data Protection Law (KVKK) information texts It also applies. In cases where explicit consent is required, the explicit consent process is conducted separately from the related obligation to inform.

General Information

Scope of Policy

This Privacy Policy has been prepared to provide general information to individuals visiting the Erasmus+ Institutional Coordinator's website or using the electronic services offered through the website.

DATA CONTROLLER

Sivas Cumhuriyet University

In accordance with the Law No. 6698 on the Protection of Personal Data, Sivas Cumhuriyet University is responsible for data processing activities related to this subject.

WEBSITE

Erasmus+ Services

This website is used to provide information, announcements, guides, forms, documents, and other electronic services related to the Erasmus+ Program.

CONTACT PERSONS

Users and Participants

This policy applies to site visitors, Erasmus+ candidates and participants, and other stakeholders who conduct transactions through the website.

Data Protection

Our Basic Privacy Principles

The processing of personal data takes into account the fundamental data protection principles stipulated in the current legislation.

Compliance with the Law and Principles of Honesty

Personal data is processed in accordance with applicable legislation and principles of fairness.

Specific and Legitimate Purpose

Data is processed for clearly defined and legitimate purposes related to the performance of public service.

Limitation and moderation

Personal data processed must be relevant to the purpose, limited, and proportionate.

Accuracy and Timeliness

Where necessary, measures are taken to ensure that personal data is accurate and up-to-date.

Storage for the Required Time

Personal data is retained for the period stipulated by law or for the period necessary for the purpose for which it is processed.

Data Security

Appropriate measures are implemented to protect personal data against unauthorized access, loss, alteration, or unlawful processing.

Information that can be processed

Data that can be processed via the website

Depending on the nature of the service used, information may be processed in the following categories. Not all data categories are processed for every service.

IDENTITY

Identity Information

Identity data such as name, surname, student or staff information may be processed if required by the relevant form or Erasmus+ process.

CONTACT

Contact

Your email address, phone number, and other contact information required for the application may be processed.

EDUCATION

Student and Academic Information

Student information, program details, department information, grades, foreign language skills, and mobility information may be processed for the purpose of carrying out Erasmus+ procedures.

EMPLOYEE

Professional Information

In personnel mobility applications, information regarding duties, units, titles, and professional details related to the mobility process may be processed.

PROCESS

Application and Mobility Information

Information relating to application, evaluation, placement, grant, contract, mobility, and document submission processes can be processed.

TECHNICAL

Transaction Security Information

To ensure the security of the website, connection and access logs, time information, and similar technical data may be recorded by the systems.

Do not share unnecessary personal data.

It is recommended that personal data, and especially sensitive personal data, that is not necessary for the transaction to be completed, should not be shared in the free text fields or contact forms on the website.

Data Acquisition

How can this information be obtained?

Electronic Forms

Data can be obtained through information entered by users into electronic forms such as communication, application, document submission, survey, or similar processes.

Technical Systems

Technical logs may be generated via servers and security systems as part of the website's operation and information security.

Cookies

Cookies may be used to operate the website, remember user preferences, and for other permitted purposes.

Processing Purposes

For what purposes can personal data be processed?

  • Managing Erasmus+ application and mobility processes,
  • Processing student and staff mobility applications.,
  • Conducting the announcement, evaluation, selection, and placement processes.,
  • Handling document, contract and grant processing,
  • Responding to communication requests,
  • Fulfillment of corporate responsibilities and public service,
  • Fulfilling record-keeping, archiving, and reporting obligations arising from legislation.,
  • Statistical evaluation and improvement of service quality,
  • Ensuring the security of the website and information systems,
  • Preventing and investigating unauthorized use and information security incidents.,
  • Meeting lawful requests from authorized public institutions and organizations.
Data Transfer

Sharing Personal Data

Personal data may only be transferred to the extent required by the relevant process, where a legal basis exists, and where sharing with authorized parties is necessary.

Authorized Public Institutions

Data sharing may be carried out with authorized public institutions and organizations within the scope of obligations arising from legislation or legally compliant requests.

Erasmus+ Institutions

To the extent necessary for the implementation of the mobility program, the Turkish National Agency may share data with the relevant systems of the European Commission and the higher education institutions involved in the mobility program.

Authorized University Units

Personal data necessary for the execution of Erasmus+ procedures may be shared with authorized units within the University.

The nature of international mobility.

Because the Erasmus+ Programme inherently involves international mobility, sharing necessary data with host institutions or relevant Erasmus+ information systems abroad may be required to facilitate these mobility activities. Such processes are evaluated within the framework of applicable personal data legislation.

Internet Technologies

Cookies and Similar Technologies

The website may use cookies to ensure the site functions securely and properly, and to manage user preferences.

COMPULSORY

Mandatory Cookies

Cookies may be used as necessary for purposes such as ensuring the basic functions of the website, providing security, and remembering the user's cookie preferences.

OPTIONAL

Other Cookies

The use of non-essential cookies may be carried out at the user's preference or with their explicit consent where required by law.

You can manage your cookie preferences.

You can manage your preferences regarding non-essential cookies through the cookie preference panel provided on the website. You can also change cookie settings through your internet browser.

External Services

Third-Party Websites

The Erasmus+ website may contain links to third-party websites to provide users with access to official or useful resources.

External websites have their own privacy policies.

When a user switches to a website belonging to another institution or service provider, that website's own privacy, cookie, and personal data processing practices apply.

Users are advised to review the privacy and data protection policies of the relevant website before sharing personal data.

Data Security

Protection of Personal Data

In order to ensure the security of personal data, appropriate administrative and technical measures are implemented within the framework of the University's information security and personal data protection regulations.

Authority Limitation

Access to personal data is restricted to the extent required by the duties and responsibilities of the position.

Technical Security

Appropriate technical security measures are implemented to protect information systems against unauthorized access and security breaches.

Corporate Processes

Data processing, access, storage, and destruction are carried out in accordance with relevant corporate policies and procedures.

Storage and Disposal

Personal Data Retention Period

Personal data is not stored indefinitely. The retention period is determined according to the nature of the data, the purpose of processing, Erasmus+ program rules, project and financial document obligations, archival regulations, and other relevant legal regulations.

When the storage purpose ends

When the retention periods stipulated in the relevant legislation expire and the reasons requiring the processing of personal data cease to exist, the data will be deleted, destroyed, or anonymized in accordance with applicable legislation and the University's personal data retention and destruction regulations.

KVKK Article 11

Your Rights Regarding Your Personal Data

Under the Law No. 6698 on the Protection of Personal Data, data subjects can exercise their rights stipulated in Article 11 of the Law by applying to the data controller.

  • To find out whether your personal data is being processed,
  • You have the right to request information regarding the processing of your personal data.,
  • To learn the purpose for which your personal data is processed and whether it is being used in accordance with its purpose,
  • Knowing the third parties to whom your personal data is transferred, domestically or internationally,
  • Requesting the correction of personal data if it has been processed incompletely or inaccurately.,
  • You can request the deletion or destruction of personal data if the conditions stipulated in the law are met.,
  • Requesting that third parties to whom the data has been transferred be notified of correction, deletion, or destruction operations.,
  • The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.,
  • Kişisel verilerin kanuna aykırı işlenmesi nedeniyle zarara uğranması hâlinde zararın giderilmesini talep etme

İlgili kişi başvuruları

Kişisel verilerinize ilişkin taleplerinizi, Sivas Cumhuriyet Üniversitesinin ilgili kişi başvuru usulleri doğrultusunda Üniversiteye iletebilirsiniz.

KVKK Kaynakları

Protection of Personal Data

Ayrıntılı aydınlatma metinleri, kurumsal politikalar ve ilgili kişi başvuru süreçleri için aşağıdaki kaynakları inceleyebilirsiniz.

Contact

Erasmus+ Institutional Coordinator

Erasmus+ süreçlerine ilişkin genel bilgi ve yönlendirme talepleri için aşağıdaki iletişim kanalları kullanılabilir. Kişisel verilere ilişkin resmî başvuruların ise Üniversitenin KVKK başvuru usullerine uygun olarak yapılması gerekmektedir.

TELEFON

+90 (346) 487 5160

Extension: 5160

E-POSTA

erasmus [at] cumhuriyet.edu.tr

Erasmus+ Kurum Koordinatörlüğü genel iletişim adresidir.

ADRES

International Relations Office

Yenişehir Mh. Cumhuriyet Üniversitesi Yerleşkesi Sk. No:73, 58140 Merkez / Sivas, Türkiye

Frequently Asked Questions

Gizlilik Politikası Hakkında

Bu politika KVKK aydınlatma metni yerine geçer mi?

Hayır. Bu politika internet sitesine ilişkin genel gizlilik esaslarını açıklamaktadır. Kişisel veri işlenen belirli bir Erasmus+ işlemi için ilgili aydınlatma metni ayrıca uygulanır.

İnternet sitesinde çerez kullanılıyor mu?

İnternet sitesinin temel işlevlerinin yürütülmesi ve kullanıcı tercihlerinin yönetilmesi amacıyla çerezler kullanılabilir. Zorunlu olmayan çerezlere ilişkin tercihler site üzerindeki çerez yönetim aracı üzerinden düzenlenebilir.

Başka internet sitesine geçtiğimde bu politika geçerli mi?

Hayır. Haricî bir internet sitesine geçildiğinde ilgili internet sitesinin kendi gizlilik ve kişisel veri politikaları uygulanır.

Kişisel verilerim hakkında bilgi talep edebilir miyim?

Evet. 6698 sayılı Kanunun 11. maddesi kapsamında düzenlenen haklarınızı Üniversitenin ilgili kişi başvuru usullerine uygun şekilde kullanabilirsiniz.

Kişisel veriler süresiz mi saklanır?

Hayır. Kişisel verilerin saklanma süreleri ilgili mevzuat, işleme amacı ve kurumsal saklama ve imha düzenlemelerine göre belirlenir.

Politika Güncellemeleri

Gizlilik Politikasında Değişiklikler

Politika gerektiğinde güncellenebilir

Mevzuatta, Erasmus+ süreçlerinde, Üniversitenin kişisel veri politikalarında veya internet sitesinin teknik yapısında meydana gelebilecek değişikliklere bağlı olarak bu Gizlilik Politikası güncellenebilir.

Güncel sürüm internet sitesinde yayımlanır.

Son Güncelleme: 14 Ağustos 2026

Bu Gizlilik Politikası, Sivas Cumhuriyet Üniversitesi Erasmus+ Kurum Koordinatörlüğü internet sitesinin gizlilik ve kişisel veri koruma uygulamalarına ilişkin genel bilgilendirme amacıyla yayımlanmıştır.