Clarification Text

CLARIFICATION TEXT ON THE PROCESSING OF MEMBERS' PERSONAL DATA

This clarification text hereby (“Clarification Text”) is prepared by Utarit Bilisim Hizmetleri Sanayi ve Ticaret A.S. (“SoliClub”) in its capacity as data controller in order to enlighten our users, who are data subjects, on their processed personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”) and the Communiqué on Principles and Procedures to be Followed in Fullfillment of the Obligation to Inform, and other relevant legislation.

1. HOW IS YOUR PERSONAL DATA PROCESSED?

a. Membership Registration

For the purpose of establishing a SoliClub membership, your personal data below is processed automatically on the basis of the legal reasons that “it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the execution or performance of the contract" and “it is necessary to process the data for the legitimate interests of the data controller, provided that it will not harm the fundamental rights and freedoms of the data subject”:

· Information of the University Studied

· Student/Registration Number

· Telephone Number

- T.R. ID No.

b. Application Use

With matching through Kampuskart (Campuscard), if available, upon completion of your member registration procedures, You can log in to the SoliClub application by entering your password and your student number, student registration number or T.R. ID number. Your personal data consisting of your name, surname, mobile phone number and e-mail address, other than your data processed during registration in order to create your profile after you log in to the application, are automatically processed based on the legal reasons “it is necessary to execute or process a contract” and “it is necessary to process data for the legitimate interests of the data controller, provided that it will not harm the fundamental rights and freedoms of the person concerned".

If you add your Kampuskart or Bank/Credit card according to your preference in order to benefit from fast payment and fast transit transactions, the relevant data is processed by a third party that provides payment system service, and in this context, your card information is not seen or processed by SoliClub. Similarly, in the event that money transfer or invoice payment is made through the application, a transaction is made through the user ID created on your behalf, and your card information is not processed by SoliClub due to the transactions performed.

In the case that you benefit from the Attendance and Social Facility sections of the application, your attendance information and information on your membership and course records provided in the social facilities are taken from the systems of your school and processed based on the legal reason that “it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the execution or performance of a contract” in order to ensure that you benefit from our services regarding the relevant part of the application.

Within the scope of the campaign processes we have made with our business partners in the SoliClub application, your personal data consisting of the name, surname and customer transaction information due to your membership and your request to benefit from the relevant campaign will be processed by SoliClub in full automatic ways based on the legal reasons that “it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the execution or performance of a contract” and “it is necessary to process the data for the legitimate interests of the data controller, provided that it will not harm the fundamental rights and freedoms of the data subject” in order to ensure that you can benefit from the relevant services and campaign, and this data can be transferred to our business partner within the scope of the campaign.

Furthermore, under the option “Your Movements”, your dining hall, campus access and bank statement information is processed based on the legal reason that “it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the execution or performance of a contract” in order to enable you to benefit from our services in this section.

c. Commercial Electronic Messages

Within the scope of the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages dated July 15, 2015, your communication data (e-mail address and phone number) will be processed based on your consent to SoliClub for sending commercial electronic messages to you as a service provider and it will continue to be processed until you exercise your right to reject receiving commercial electronic messages.

The consent you will give for receiving commercial electronic messages is considered as your explicit consent, which you can take back at any time and without any limitation, pursuant to the 1st paragraph of the Article 5 of the Law. Besides, your contact details will be transferred to the Message Management System based on the legal reason “explicitly stipulated by law” in the item (a) of the 2nd paragraph of the Article 5 of the Law in order to provide information to authorized persons, institutions and organizations.

2. HOW IS YOUR PERSONAL DATA TRANSFERRED?

Your personal data is transferred to your school and the service provider to ensure that you benefit from the relevant service only for the purpose of performing the relevant transaction, based on the legal reasons that “it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the execution or performance of a contract” and “it is necessary to process the data for the legitimate interests of the data controller, provided that it will not harm the fundamental rights and freedoms of the data subject”.

3. EXERCISE OF YOUR RIGHTS AS DATA SUBJECT

Within the scope of the Article 11 of the Law regulating the rights of the data subjects; you can send your following requests:

1) learning whether the Company processes your personal data;
2) asking information from the Company if the Company has processed your personal data;
3) learning the purpose of processing your personal data and whether they are used for that purpose;
4) learning whether your personal data have been transferred domestically or abroad and to whom if yes;
5) demanding correction of your personal data if incomplete or incorrectly processed;
6) requesting your personal data to be deleted, destroyed or anonymized pursuant to the conditions set out in the Article 7 of the Law;
7) request for notification of the transactions made on your request including correction due to incomplete or incorrect processing and/or if your data is deleted or destroyed pursuant to the conditions set out in the Article 7 of the Law, to the third parties to whom your personal data were transferred;
8) objecting if any result occurs against you by analyzing your processed personal data exclusively through automated systems; and
9) requesting the compensation of the damage if you suffer damage due to the unlawful processing of your personal data

to SoliClub at soliclub@utarit.com in accordance with the Communiqué on the Procedures and Principles for Applying to the Data Controller.

CLARIFICATION TEXT ON THE PERSONAL DATA YOU TRANSMIT THROUGH THE SUGGESTION/REQUEST FORM

CLARIFICATION TEXT ON CAMPAIGN PROCESSES

CLARIFICATION TEXT ON THE PERSONAL DATA YOU TRANSMIT THROUGH THE SUGGESTION/REQUEST FORM

This clarification text is prepared by Utarit Bilisim Hizmetleri Sanayi ve Ticaret A.S. (“SoliClub”) in its capacity as data controller within the scope of the Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”) and the Communiqué on Principles and Procedures to be Followed in Fullfillment of the Obligation to Inform.

Your data regarding the name, surname, e-mail address and the content subjecting to your message will be processed automatically by SoliClub based on your explicit consent for the purposes of evaluating user opinions/suggestions, conducting complaint processes and conducting communication activities in accordance with the legislation by filling in the Suggestion/Request form under the Communication title.

You can submit your requests under the Article 11 of the Law on the Protection of Personal Data, which regulates the rights of the data subjects, to SoliClub in accordance with the Communiqué on the Procedures and Principles for Applying to the Data Controller.

CLARIFICATION TEXT ON CAMPAIGN PROCESSES

You can forward your requests under your rights set out in the Article 11 of the Law on the Protection of Personal Data, which regulates the rights of the data subjects, to SoliClub in accordance with the Law and the Communiqué on the Procedures and Principles for Applying to the Data Controller.