Call Us: 
PERSONAL DATA PROTECTION INFORMATION NOTICE
1.DATA CONTROLLER
This Information Notice has been prepared by:
NTSS Eğitim Danışmanlık Basım Yayın İnşaat Ticaret Limited
Şirketi
Address: Beştepe Mah. Nergiz Sok. Via Flat Business
Centre Office No: 27-28 Yenimahalle / Ankara – Türkiye
Website: www.ntss.com.tr
Online Learning Platform:
E-mail: [email protected]
Telephone: +90 (312) 911 55 66
acting in its capacity as the data controller under the
Turkish Personal Data Protection Law No. 6698 (“KVKK”).
2.PERSONAL DATA PROCESSED
Personal data processed by NTSS may include the following:
Identity and Personal Information
·
First name
·
Surname
·
ID Number
·
Passport details
·
Date of birth
·
Gender information
·
Nationality information
·
Signature records
Contact Information
·
E-mail address
·
Telephone number
·
Mobile phone number
·
Postal address
·
Billing address
Professional and Corporate Information
·
Company details
·
Organisation details
·
Job title / position
·
Professional information
·
Department information
Training and Certification Information
·
Training
registration records
·
Attendance records
·
Certificate
information
·
Examination
results
·
Assessment records
·
Training
progression records
·
LMS usage records
·
Digital assessment
records
·
Certification
process records
Financial Information
·
Invoice information
·
Payment details
·
Bank transfer records
·
Collection records
Transaction Security and System Records
·
IP address
·
Log records
·
System usage records
·
Login and logout records
·
Browser and device information
·
Cookie records
·
Session information
Visual and Audio Data
·
Online meeting recordings
·
Camera recordings
·
Audio recordings
·
Training session recordings
3.PURPOSES OF PROCESSING PERSONAL DATA
Your personal data may be processed for the following
purposes:
·
delivery of training and consultancy services
·
provision of online learning services
·
management of LMS processes
·
administration of training registration
processes
·
participant verification procedures
·
administration of examination and assessment
processes
·
management of certification processes
·
administration of accreditation processes
·
management of digital learning services
·
monitoring of training progression records
·
provision of technical support services
·
management of customer relationship processes
·
administration of sales and after-sales services
·
management of accounting and finance processes
·
invoicing procedures
·
management of information security processes
·
ensuring system security
·
user verification procedures
·
compliance with legal and regulatory obligations
·
fulfilment of legal responsibilities
·
handling enquiries, complaints, and appeals
·
evaluation of job applications
·
management of corporate communication activities
·
provision of course and event notifications
·
statistical and operational analysis activities
·
improvement of service Quality
·
administration of audit and reporting activities
4.METHODS AND LEGAL BASIS FOR COLLECTING PERSONAL DATA
Your personal data may be collected electronically or
physically through:
·
websites
·
online learning platforms
·
LMS systems
·
membership forms
·
training registration forms
·
agreements and contracts
·
electronic communication channels
·
e-mail correspondence
·
telephone communications
·
online meeting systems
·
cookies
·
payment systems
·
examination and assessment platforms
·
physical application forms
·
corporate communication processes
Your personal data is processed based on the legal grounds
specified under Articles 5 and 6 of KVKK, including:
·
where explicitly provided by law
·
where necessary for the establishment or
performance of a contract
·
fulfilment of legal obligations
·
establishment, exercise, or protection of legal
rights
·
legitimate interests of the data controller
·
explicit consent
5.TRANSFER OF PERSONAL DATA
Your personal data may be shared with the following parties
within the scope of:
·
applicable legislation
·
accreditation and certification requirements
·
service delivery processes
·
legal obligations
including:
·
accreditation bodies
·
certification bodies
·
authorised public institutions and authorities
·
legally authorised private entities
·
payment service providers
·
cloud service providers
·
LMS service providers
·
examination and assessment platforms
·
technical infrastructure providers
·
business partners and suppliers
·
audit and consultancy service providers
For the purposes of international accreditation,
examination, certification, and training processes, your personal data may also
be shared with relevant overseas accreditation and certification organisations.
International data transfers are carried out in accordance
with the relevant provisions of KVKK.
6.COOKIES AND DIGITAL TRACKING TECHNOLOGIES
NTSS websites, online learning platforms, and LMS systems
may use cookies and similar digital technologies for purposes including:
·
improving user experience
·
managing security processes
·
ensuring system Performance
·
session management
·
maintaining training progression records
Detailed information regarding cookies is separately
provided within the Cookie Policy.
7.STORAGE AND SECURITY OF PERSONAL DATA
NTSS implements appropriate technical and administrative
measures to ensure the security of personal data.
These measures may include:
·
access control systems
·
logging systems
·
network security measures
·
antivirus systems
·
firewalls
·
encryption
·
backup systems
·
authorisation controls
·
intrusion prevention systems
·
user access management
·
data loss prevention systems
NTSS manages information security processes in line with the
principles of the ISO/IEC 27001 Information Security Management System
approach.
Personal data is retained for the periods prescribed by
applicable legislation or for as long as necessary for the relevant processing
purposes.
User activities carried out through online learning
platforms, training progression records, examination transactions, assessment
records, and system usage activities may be monitored and retained for the
administration of training and certification processes.
Where applicable, NTSS fulfils its VERBIS obligations in
accordance with the relevant legislation.
8.RIGHTS OF THE DATA SUBJECT
Under Article 11 of KVKK, data subjects have the right to:
·
learn whether their personal data is being
processed
·
request information regarding processing
activities
·
learn the purpose of processing
·
learn the third parties to whom personal data is
transferred domestically or internationally
·
request correction of incomplete or inaccurate
data
·
request deletion or destruction of personal data
under KVKK
·
request notification of such actions to third
parties
·
object to adverse outcomes resulting from
automated processing systems
·
request compensation for damages arising from
unlawful processing
9.APPLICATION PROCEDURE
Requests within the scope of KVKK may be submitted to NTSS
in writing or through other methods specified under applicable legislation
using the contact details below:
NTSS Eğitim Danışmanlık Basım Yayın İnşaat Ticaret Limited
Şirketi
Address: Beştepe Mah. Nergiz Sok. Via Flat Business
Centre Office No: 27-28 Yenimahalle / Ankara – Türkiye
E-mail: [email protected]
Telephone: +90 (312) 911 55 66
Applications shall be evaluated and concluded within the
periods specified under the relevant legislation.
10.AMENDMENTS AND EFFECTIVE DATE
NTSS reserves the right to amend this Information Notice
where deemed necessary.
The updated version shall become effective as of the date of
publication