Disclosure Obligation Under Personal Data Protection Law No. 6698
Pursuant to Personal Data Protection Law No. 6698 ("KVKK"), Tercih Robotu, in its capacity as data controller, wishes to inform you about how your personal data is processed, stored, and transferred lawfully and in accordance with the principle of good faith, within the scope of the purposes described below.
This Information Notice has been prepared in accordance with Article 10 of the KVKK and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Disclosure Obligation.
This document aims to transparently explain how the personal data of candidate students, parents, educators, and all visitors using our platform is collected, on what legal grounds and for what purposes it is processed, to whom it may be transferred, and the rights of data subjects.
Pursuant to Article 3 of the KVKK, the data controller is the natural or legal person who determines the purposes and means of processing personal data. Within the scope of our platform, the data controller is:
Through our platform, your personal data in the following categories may be collected and processed by automated or non-automated means depending on the nature of the service:
Your collected personal data is processed in line with the following purposes, adhering to the principles of proportionality and data minimization:
Personalizing the university preference algorithm, score calculation, ranking estimation, and providing AI advisory services.
Creating user accounts, identity authentication, session management, and ensuring account security.
Responding to user requests, system notifications, important updates, and preference calendar reminders.
Measuring platform performance, improving user experience, and conducting anonymous statistical analyses.
Maintaining traffic data under Law No. 5651, responding to lawful requests from official authorities, and conducting audit processes.
Your personal data is processed based on the following legal grounds specified in Article 5 of the KVKK:
Your explicit consent (creating preference lists, AI advisory)
Direct relevance to the establishment or performance of a contract (membership agreement)
The data controller's fulfillment of its legal obligation (Law No. 5651)
Legitimate interests, provided they do not harm the fundamental rights and freedoms of the data subject (platform development, security)
Your personal data may be transferred to the parties listed below, only for the stated purposes and in accordance with Articles 8 and 9 of the KVKK:
Supabase (database), Vercel (hosting), Google Cloud (authentication) — for the technical sustainability of the service.
Google Gemini — for the purpose of providing advisory services using only anonymous chat data.
In the event of a court order or legal obligation, within the scope of relevant legislation.
Google AdSense (website) and Google AdMob (mobile application) — device identifiers and usage signals are processed for personalized or contextual ads only after your explicit consent (Google Consent Mode v2).
Your profile data, preference list, and AI chat history are not shared with advertisers. Advertising cookies are only processed with your consent, within the limits described above.
Your personal data is retained for the period required by the purpose of processing and within the statutory limitation periods stipulated by relevant legislation:
| Data Category | Retention Period |
|---|---|
| Identity and Contact | Until account deletion + 1 year |
| Education Data | Until account deletion |
| Transaction Security (Logs) | 2 years per Law No. 5651 |
| Cookie Data | Session duration or up to 1 year |
| AI Chat History | Until account deletion |
Data whose retention period has expired is deleted, destroyed, or anonymized within the scope of periodic destruction processes.
Pursuant to Article 12 of the KVKK, the following technical and administrative measures are implemented to prevent unlawful processing and access to your personal data and to ensure its preservation:
The platform uses cookie technology to improve user experience and manage sessions. Types of cookies used:
Advertising cookies are blocked by default; no third-party advertising cookies load until you explicitly grant consent via "Accept All" or "Manage Preferences" in the cookie banner.
Pursuant to Article 11 of the KVKK, as the data subject, you have the following rights:
To exercise the rights mentioned above, you may apply through the following methods:
Email: Written application to kvkk@tercih-robotu.com with documents proving your identity.
Contact Form: Application via the contact form on the platform with the subject "KVKK Application".
Applications are concluded as soon as possible depending on the nature of the request, and at the latest within 30 days, free of charge. If the operation requires additional cost, the fee determined by the Personal Data Protection Authority's tariff may be charged.
You can contact us for all your questions and requests regarding the protection of your personal data.