Privacy Notice (KVKK) and Privacy Policy

1. Data controller

Your personal data is processed by Student Apply Eğitim Teknoloji Danışmanlık Ltd. Şti. ("TasselWay", "we") as the data controller.

Address: [YER TUTUCU] Adres satırı, İlçe / İl, Türkiye · Email: info@tasselway.com · Phone: [YER TUTUCU] Telefon

2. Personal data we process

We do not ask for special categories of personal data such as health, religion or ethnic origin; please do not include such information in the documents you upload.

• Identity: first name, last name, date of birth, nationality, passport number and passport copy.
• Contact: email address, phone / WhatsApp number; for agencies, company name, contact person, country, city and website.
• Education: diploma, transcript, grade, language certificates, preferred country, university, program and intake.
• Image: the ID photo uploaded for the application.
• Application process: application number, status and history, university application number, admission and enrolment details, notes and correspondence.
• Financial (agencies): service fees, commissions, payment and invoice records.
• Transaction security: session data, login records, IP address and server logs.

3. Purposes of processing

• Receiving and assessing university applications made individually or through an agency, and forwarding them to the chosen university,
• Carrying out admission, visa, language preparation and enrolment processes and communicating with you,
• Informing you of your application status via the tracking page and email,
• Assessing partnership applications, establishing and managing relationships with agencies, and handling service fees, commissions and invoices,
• Ensuring information security, preventing misuse, meeting legal obligations and protecting rights in possible disputes.

4. Legal grounds

Your personal data is processed by automated means (web forms and our management system) on the following legal grounds under KVKK Article 5(2):

• Processing is directly related to the conclusion or performance of a contract (Art. 5(2)(c)): receiving your application and forwarding it to the university; our relationship with agencies.
• Compliance with our legal obligations (Art. 5(2)(ç)): obligations under commercial, tax and accounting law.
• Establishment, exercise or protection of a right (Art. 5(2)(e)).
• Our legitimate interests, provided they do not harm your fundamental rights and freedoms (Art. 5(2)(f)): information security and service quality.

5. Transfer of personal data

Your personal data is transferred only for the purposes above and only to the extent necessary, to:

• The universities you apply to: universities in Türkiye and universities in the People's Republic of China (abroad).
• The partner agency that referred you or applied on your behalf (only data of its own students).
• Our service providers: web hosting (Vercel Inc., USA), database (Neon, data centres in the European Union), file storage (Cloudflare R2) and email delivery service.
• Competent public authorities and courts, upon request.

6. Transfers abroad

Transfer to the university abroad that you apply to is necessary to make the application you chose, and is carried out occasionally under KVKK Article 9(6) for the performance of the service relationship between you and us.

Transfers to our service providers abroad are made with appropriate safeguards under KVKK Article 9(4) (standard contracts announced by the Personal Data Protection Board).

The legal system of recipients abroad may not provide the same level of protection as in Türkiye; please contact us if you have any questions about this.

7. How we collect data

Your personal data is collected electronically through the individual application, tracking and partnership forms on our website; information entered by partner agencies into the agency portal; and email and phone correspondence.

When an agency applies on your behalf, the agency is responsible for providing you with this notice and for having a valid legal basis to share your data.

8. Retention and security

Your personal data is kept for as long as required by the purpose of processing and the limitation and retention periods set by law; afterwards it is deleted, destroyed or anonymised.

Your documents are stored in non-public storage accessed over encrypted connections; only our authorised staff and the relevant agency can see them. Access is logged.

9. Cookies

We only use cookies that are strictly necessary for the service: a cookie that remembers your language and a session cookie for agency / admin login. Your choice to pause animations is stored in your browser.

We do not use advertising, marketing or third-party analytics cookies.

10. Your rights (KVKK Article 11)

By applying to the data controller, you may:

• learn whether your personal data is processed and request information about it,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate,
• request deletion or destruction under the conditions of KVKK Article 7,
• request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
• object to a result against you arising exclusively from automated analysis,
• claim compensation if you suffer damage due to unlawful processing.

11. How to apply

You can send your requests, with information verifying your identity and in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, by email to info@tasselway.com or in writing to [YER TUTUCU] Adres satırı, İlçe / İl, Türkiye.

Your request will be concluded free of charge within 30 days at the latest, depending on its nature. If an additional cost arises, the fee set by the Board may apply.