Campus AtlantisTürkçeCORPORATE USE AND DATA RESPONSIBILITY UNDERTAKING
The customer establishes lawful purposes, fields, recipients and bases for processing it determines, informs participants and obtains valid consent where necessary. Minimise data and provide appropriate safeguards for children.
Where the Operator is a processor, a separate agreement must define subject/duration, data and persons, instructions, confidentiality, security, subprocessors, transfers, incidents, rights-request assistance and return/destruction on termination.
Each party remains responsible for its own conduct and legal obligations. There is no blanket “customer alone is liable” clause. Proven, legally recoverable losses caused by customer breaches are addressed under applicable law.
Obtain separate commercial communication permissions and follow applicable IYS requirements. Participation or receiving a privacy notice is not marketing consent. Export data only with authority and a lawful purpose; no general instruction requires exporting all records before deletion.
Where the Operator is a processor, a separate agreement must define subject/duration, data and persons, instructions, confidentiality, security, subprocessors, transfers, incidents, rights-request assistance and return/destruction on termination.
Each party remains responsible for its own conduct and legal obligations. There is no blanket “customer alone is liable” clause. Proven, legally recoverable losses caused by customer breaches are addressed under applicable law.
Obtain separate commercial communication permissions and follow applicable IYS requirements. Participation or receiving a privacy notice is not marketing consent. Export data only with authority and a lawful purpose; no general instruction requires exporting all records before deletion.