1. Data Controller
Under the General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by ScholaEdit.AI as the data controller. This notice has been prepared in accordance with Article 13 and 14 of the GDPR and Article 10 of the KVKK.
2. Data Categories Processed
The following categories of personal data are processed through our platform:
| Data Category | Description |
|---|---|
| Identity Data | Full name, national ID (when required) |
| Contact Data | Email, phone number, address |
| Professional Data | Institution, title, academic field |
| Transaction Security | IP address, log records, session data |
| Financial Data | Billing information, payment history |
3. Lawful Basis for Processing
Your personal data is processed based on the following lawful bases under GDPR Article 6:
- Consent: Marketing and profiling activities
- Performance of Contract: Service delivery and account management
- Legal Obligation: Tax, accounting, and regulatory reporting requirements
- Legitimate Interest: Service improvement, security, and analytics
4. Data Transfers
Your personal data may be transferred to the following parties:
- Business Partners: Payment service providers, cloud infrastructure providers
- Regulatory Authorities: Public institutions and organizations where legally required
- International Transfers: Under cloud services, to countries providing adequate protection or with appropriate safeguards (Standard Contractual Clauses)
5. Data Retention
Your personal data is retained for the duration required by the processing purpose and within legal retention periods. Retention periods mandated by applicable regulations: commercial books and documents for 10 years, e-commerce data for 3 years, and log records for 2 years. After expiration, data is deleted, destroyed, or anonymized.
6. Your Rights Under GDPR
Under GDPR Articles 15-22 and KVKK Article 11, you have the following rights:
- Right to know whether your personal data is being processed
- Right to request information about the processing
- Right to know the purpose of processing and whether data is used accordingly
- Right to know the third parties to whom data is transferred
- Right to request rectification if data is incomplete or inaccurate
- Right to request erasure or destruction of data
- Right to request that rectification, erasure or destruction be notified to third parties
- Right to object to outcomes arising from automated analysis of data
- Right to claim compensation for damages resulting from unlawful processing
7. How to Submit a Request
To exercise the rights listed above, you may contact us through the following methods:
Email: gdpr@scholaedit.com
Subject: With the statement "Personal Data Request"
Address: Istanbul, Turkey
Your request will be processed free of charge within a maximum of 30 days. If the process requires additional costs, fees may be charged according to the tariff determined by the Personal Data Protection Authority.