1. Data controller
This notice is provided under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Obligation to Inform.
IAU Blockchain and IoT Club is a student club operating within Istanbul Aydın University. The data controller for personal data processed through club activities is: [Name and address of the data controller: to be confirmed with the university’s data protection office].
Send any data protection question about the club to: iaublockchainandiot@gmail.com
2. What personal data do we process?
Only what club activities need:
- Identity and contact: your name, your email address and, optionally, your phone number (on the application and contact forms, or when you write to us on WhatsApp or by email).
- Study details: your department and year.
- Application and message content: your area of interest, any note you choose to add to an application, and the subject and message you send through the contact form.
- Images: photos of club members on the team page and photos or videos taken at events.
- Security records: technical logs our server keeps when you visit the site (IP address, browser details, time of access) and an irreversible hashed form of your IP address used to prevent abuse. On the contact and application forms, the Cloudflare Turnstile check that confirms a person is sending also processes your IP address and browser details.
Your theme and cookie choices are stored only in your own browser and are never sent to us or to a server. See the Cookie Policy for details.
3. Why do we process it?
- To receive, review and decide on club applications.
- To contact members about events, projects and announcements.
- To plan events, organise attendance and meet our obligations to the university.
- To present the club’s work (team page, event photos).
- To keep the website secure and running.
4. Legal grounds and how we collect it
We process your data on these grounds from Article 5 of the KVKK:
- It is directly related to establishing and maintaining your club membership (Art. 5/2-c).
- The club’s legitimate interest, provided it does not harm your fundamental rights, for example event announcements and site security (Art. 5/2-f).
- Compliance with obligations arising from university regulations (Art. 5/2-ç).
- Your explicit consent for team page photos and promotional photos or videos (Art. 5/1). You can withdraw consent at any time.
Data is collected partly by automated means through the application and contact forms on this site, WhatsApp, email and event registration forms. When you submit a form your details are stored in the database on the club’s server and are only viewed by the club managers responsible for them, using authorised accounts.
5. Who may receive it?
- The relevant units of Istanbul Aydın University (such as the office responsible for student clubs), as far as membership and events require.
- Authorised public bodies, when a legal obligation arises.
- The hosting and communication providers we use (the server running the site and database, the Cloudflare content delivery network and its Turnstile check, WhatsApp and email services). The server running the site and database is in Istanbul, Türkiye. Site traffic passes through Cloudflare’s content delivery network; Cloudflare’s and the communication services’ servers may be abroad. Transfers to these services follow the conditions in Article 9 of the KVKK, under [basis, e.g. standard contractual clauses].
We do not sell your personal data or share it with third parties for advertising or marketing.
6. How long do we keep it?
We keep data for as long as the purpose requires. Membership details are kept while your membership lasts; applications that do not lead to membership are kept for at most [period, e.g. 6 months] and contact form messages for at most [period, e.g. 1 year]. Server access logs are deleted after [period, e.g. 14 days]. After that, data is deleted, destroyed or anonymised.
7. Your rights
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is processed,
- request information about that processing,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom it is transferred,
- ask for incomplete or inaccurate data to be corrected,
- ask for deletion or destruction under the conditions in Article 7,
- ask for corrections, deletions and destructions to be notified to recipients,
- object to a result against you that arises solely from automated analysis,
- claim compensation for damage caused by unlawful processing.
8. How to contact us
Send your request in writing with enough information for us to verify your identity. Under the Communiqué on Application Procedures to the Data Controller, we will respond free of charge within 30 days at the latest.
Address for requests: iaublockchainandiot@gmail.com
We may update this notice when needed; the current version is always on this page.