Campus AtlantisTürkçeMEMBERSHIP PRIVACY NOTICE
The Operator is the controller for account administration, service delivery, support and account security purposes it determines. Roles for customer-created games, courses, events and forms depend on the actual processing. Acting on a customer's documented instructions does not remove the Operator's duties for its own activities.
Name and email collected at registration are used to establish and provide the account under Article 5(2)(c) of Turkish Law No. 6698. Authentication should use secure password verification records; confirm the implementation before making technical assurances.
Records necessary to establish, exercise or defend rights may be retained under Article 5(2)(e); specific statutory duties may justify Article 5(2)(ç). Necessary security processing may rely on Article 5(2)(f) following an actual balancing assessment. [Confirm IP/device/time data recorded.] Support information is used to resolve the request and protect relevant contractual rights.
Do not collect telephone, demographics, education or professional details merely because they appeared in an example. Establish each additional field's purpose, necessity, legal basis and recipients first.
Data is obtained electronically through forms, service interactions and support. Actual hosting, email, technical support and payment providers may receive only data necessary for their roles; competent authorities may receive data as legally required. [Confirm actual recipient categories and purposes.]
Before personal data is sent to overseas AI or cloud providers, identify the provider, categories, purpose and applicable Article 9 transfer mechanism. A general membership acceptance alone does not legalise routine international transfers.
Keep data only while needed for its purpose and lawful basis, then delete, destroy or anonymise under applicable rules. [Complete separate schedules for accounts, participation, security, support, financial records and backups.] No universal 24-hour deletion promise is made.
Article 11 rights include learning whether data is processed, requesting information, learning purposes and recipients, seeking correction and legally applicable erasure/destruction, notification of those actions to recipients, objecting to adverse outcomes based exclusively on automated analysis, and compensation for unlawful processing.
Submit requests through legally valid methods to the verified controller contact. Requests are resolved promptly and within 30 days; charges apply only as permitted by law. Statutory complaint and judicial remedies remain available. This notice is not blanket consent.
Name and email collected at registration are used to establish and provide the account under Article 5(2)(c) of Turkish Law No. 6698. Authentication should use secure password verification records; confirm the implementation before making technical assurances.
Records necessary to establish, exercise or defend rights may be retained under Article 5(2)(e); specific statutory duties may justify Article 5(2)(ç). Necessary security processing may rely on Article 5(2)(f) following an actual balancing assessment. [Confirm IP/device/time data recorded.] Support information is used to resolve the request and protect relevant contractual rights.
Do not collect telephone, demographics, education or professional details merely because they appeared in an example. Establish each additional field's purpose, necessity, legal basis and recipients first.
Data is obtained electronically through forms, service interactions and support. Actual hosting, email, technical support and payment providers may receive only data necessary for their roles; competent authorities may receive data as legally required. [Confirm actual recipient categories and purposes.]
Before personal data is sent to overseas AI or cloud providers, identify the provider, categories, purpose and applicable Article 9 transfer mechanism. A general membership acceptance alone does not legalise routine international transfers.
Keep data only while needed for its purpose and lawful basis, then delete, destroy or anonymise under applicable rules. [Complete separate schedules for accounts, participation, security, support, financial records and backups.] No universal 24-hour deletion promise is made.
Article 11 rights include learning whether data is processed, requesting information, learning purposes and recipients, seeking correction and legally applicable erasure/destruction, notification of those actions to recipients, objecting to adverse outcomes based exclusively on automated analysis, and compensation for unlawful processing.
Submit requests through legally valid methods to the verified controller contact. Requests are resolved promptly and within 30 days; charges apply only as permitted by law. Statutory complaint and judicial remedies remain available. This notice is not blanket consent.