BOĞAZİÇİ UNIVERSITY

BUCampus Mobile Application Privacy and Personel Data Protection Policy

Last Updated: 04.04.2023

About Application:

BUCampus application has been developed for Boğaziçi University academic personnel, students and administrative personnel to be able to use the university online systems through the mobile application. Prospective students and other users can also use the application without logging into the system.

The application works on iOS and Android operating systems.

We show maximum sensitivity to the privacy and security of your personal data. Your personal data is processed and stored in accordance with the Personal Data Protection Law (KVKK) No. 6698.

In accordance with the KVKK, all kinds of information and documents such as the name/surname, education status/information, photo, all kind of data identifying a person and the evaluation notes of the relevant unit about the candidate are within the scope of personal data of the user in the mobile application.

Your personal data mentioned above; can be processed by "BOĞAZİÇİ UNIVERSITY" (hereinafter referred to as "UNIVERSITY") as a "Data Controller" in line with the information described below:

By installing this application on your mobile device, you are deemed to have accepted the privacy policy and terms of use contained in this text. If you do not accept these terms, do not install this application on your mobile device.

App Permissions:

Location: Location permission is requested from the user in order to show location on maps and to verify security in QR system.

Camera: Camera permission is requested from the user in order to be able to read the QR code system. It is not used without user knowledge.

Gallery: Access to the photo gallery is requested to change the profile photo shown in the app. The photo uploaded here will be stored on the user's device and will not be shared outside the device.

Contacts: Access to the contacts is required in order to save the contacts from the university personnel directory to the phone within the mobile app.

Internet: Internet access is required for active use of application services. These permissions are not used to transfer any information from your phone without user knowledge.

Notification: Notification permission is requested in order for the user to receive instant notifications from categories within the application.

Purpose of Processing Personal Data:

Your personal data will be processed only by analyzing and updated in order to fulfill the requirements of the services offered by the UNIVERSITY in a best way, to ensure that these services can be accessed and utilized by you at the maximum level, to develop the services in line with your needs and to bring you together with wider service providers within legal frameworks, in order to fulfill the obligations arising from the law (upon request, sharing personal data with judicial and administrative authorities) in accordance with its purpose and in a measured manner during the contract and service.

To Whom The Processed Personal Data can be Transferred and for What Purpose:

Your personal data processed by the UNIVERSITY are stored on the servers of the UNIVERSITY, in a way that you can see only after you log into the system by entering your user name and password, and will not be shared with any real or legal third parties, except the authorities authorized by law to request personal data in order to fulfill the UNIVERSITY’s legal obligations.

Method and Legal Reason for Personal Data Collection:

Within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK Law, personal data is collected via mobile application based on your explicit consent and the legal reason that data processing is mandatory for the establishment, use or protection of a right.

Data Owner's Rights Specified in Article 11 of the KVKK Law:

Pursuant to Article 11 of the Law; by applying to the UNIVERSITY with the methods determined by the Secure Data Management Commission, personal data owners have the right to request:

· To know whether personal data is processed or not,

· The information about the details if personal data has been processed,

· To know the purposes of processing personal data and whether they are used in accordance with its purposes,

· To know the third parties to whom personal data is transferred in the same country or abroad,

· The correction of personal data in case of incomplete or incorrect processing and requesting the third parties to whom the personal data has been transferred to be notified regarding the correction process within this scope,

· The deletion or destruction of personal data in case the reasons requiring it to be processed disappear despite the fact that it has been processed in accordance with the provisions of the Law No. 6698 and other relevant laws, and requesting the third parties to whom the personal data has been transferred to be notified regarding the process within this scope,

· To object to the emergence of a result against the person herself/himself by analysis of the processed data through automated systems exclusively,

· The compensation of the damage in case of loss due to unlawful processing of personal data.

In order to be able to exercise your rights mentioned above, you can submit your request, including the necessary information to determine your identity and your explanations regarding your right that you request to exercise from the rights specified in Article 11 of the Personal Data Protection Law; by completely filling out the “Application Form” at BOUN website by sending a wet signed copy of the form to “Boğaziçi University 34342 Bebek-Beşiktaş/ İstanbul” along with the documents identifying your identity by hand or by post or by using other methods specified in the Personal Data Protection Law.

Your requests in your application will be finalized by the UNIVERSITY as soon as possible and within thirty days at the latest, depending on the nature of the request.

Pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698, titled “Data Controller's Obligation to Clarify”, I have read and understood this clarification text prepared on my rights in the Article 11 of the Law, in the context of that my personal data will be processed by whom and for what purpose, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data; and I have been informed in detail by the UNIVERSITY, which has the title of “Data Controller”.

Contact:

You are completely free to accept or reject the processing of your personal data, which is only necessary, in accordance with this privacy and personal data processing policy, in order to make analyzes to serve you better. If you continue to use the site/mobile application, we will assume that you have accepted he privacy policy and terms of use. For more detailed information, please do not hesitate to contact us via the e-mail address bucampus@boun.edu.tr.