Protection of personal data.

This notice has been prepared by Gençlik Zeka Oyunları ve Kodlama Derneği (KOZ-DER) as data controller, under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK").

Our association runs Erasmus+ and European Solidarity Corps (ESC) projects, local youth events and volunteering activities. We process your personal data within the scope of those activities, as described below.

• — Data controller: Gençlik Zeka Oyunları ve Kodlama Derneği (KOZ-DER)
• — Address: Kazım Karabekir Mahallesi, İstiklal Caddesi No: 33D, 79000 Kilis / Türkiye
• — Email: bilgi@kozder.com · Phone: +90 551 197 29 97

Depending on the nature of our relationship, the categories below may be processed. Not every category applies to everyone; we collect only what the relevant activity requires.

• — Identity: first and last name, date of birth, nationality; passport or ID details for mobility abroad
• — Contact: phone, email, address, social media account
• — Application and participation: motivation letter, CV, language level, education and volunteering history, project preference
• — Travel and logistics: visa paperwork, flight and accommodation details, travel insurance, emergency contact
• — Financial: expense receipts and bank/IBAN details so that reimbursements can be made
• — Visual and audio: event and project photographs and videos; volunteer experience pieces published on this site
• — Transaction security and usage: the IP address and browser information generated when you visit the site, and anonymous visit statistics
• — Special categories of data: only where strictly necessary (e.g. health insurance, dietary or accessibility needs) and with your explicit consent

• — Receiving and assessing project and event applications and running selection processes
• — Planning Erasmus+ / ESC mobilities and arranging visas, travel, accommodation and insurance
• — Concluding and performing participant agreements and running payment and reimbursement processes
• — Meeting reporting and documentation obligations towards programme authorities and partner organisations
• — Organising and announcing events and communicating with participants
• — Promoting the association's work and, where you have given explicit consent, publishing your photographs and experience pieces
• — Responding to requests, questions and complaints
• — Meeting obligations arising from legislation and exercising the right of defence against legal claims
• — Operating the website securely and improving it using anonymous usage statistics

Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:

• — Directly related to the conclusion or performance of a contract (Art. 5/2-c) — application, participation and mobility processes
• — Compliance with the data controller's legal obligations (Art. 5/2-ç) — associations legislation, financial legislation, programme reporting
• — Necessary for the establishment, exercise or protection of a right (Art. 5/2-e)
• — Our legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f) — site security and anonymous statistics
• — Your explicit consent (Art. 5/1 and Art. 6/2) — photo and experience sharing, promotional messages, and processing of special categories of data

Where processing is based on explicit consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out up to that point.

Your personal data is collected by automated or partly automated means through application forms (hosted on Google Forms), email, phone, WhatsApp, social media messages, event registrations, in-person meetings and your visits to our website.

Your personal data may be transferred to the following parties, limited to the purposes set out above:

• — The Turkish National Agency, the European Commission and related programme authorities (for reporting and audit obligations)
• — Host and partner organisations in Europe where the projects take place
• — Providers of travel, accommodation, insurance and visa services
• — Our website hosting and infrastructure providers
• — Authorised public institutions and judicial authorities (upon request and as required by legislation)

Given the nature of Erasmus+ and ESC projects, some of your data is transferred abroad. Such transfers are carried out in line with the conditions set out in Article 9 of the KVKK — an adequacy decision, appropriate safeguards, or your explicit consent.

Your personal data is kept for as long as the purpose of processing requires and until the end of the limitation and retention periods set out in the relevant legislation. Documents relating to Erasmus+ and ESC projects are retained for a set period after project closure, in line with the audit and archiving rules of the programme authorities.

Once the period expires or the reason for processing no longer applies, your data is deleted, destroyed or anonymised.

Our site does not use cookies for advertising or profiling. The following services are involved when you visit:

• — Vercel — hosting for the site, plus aggregate visit statistics that use no cookies and do not identify individuals (Vercel Analytics)
• — GoatCounter — provides cookie-free pageview analytics and the total visitor counter; it processes limited technical information and does not permanently store IP addresses
• — Google Maps — only the map on the Contact page; when the map loads, your IP address is sent to Google

Our application forms are hosted on Google Forms; when you fill in a form, Google's own privacy policy also applies.

Event and project photographs and volunteer experience pieces are published on our site and social media accounts only with the explicit consent of the person concerned.

If you want a published photograph or piece removed, simply write to bilgi@kozder.com; your request will be acted on without delay.

Under Article 11 of the KVKK, you have the following rights, which you may exercise by applying to the data controller:

• — To learn whether your personal data is being processed
• — To request information if it has been processed
• — To learn the purpose of processing and whether the data is used in line with that purpose
• — To know the third parties to whom the data is transferred, in Türkiye or abroad
• — To request correction if the data is incomplete or inaccurate
• — To request erasure or destruction within the conditions set out in the KVKK
• — To request that correction, erasure and destruction be notified to the third parties the data was transferred to
• — To object to an outcome against you produced solely by automated analysis
• — To claim compensation if you suffer loss because of unlawful processing

You can submit your requests, together with information verifying your identity, either in writing to the address above or by email to bilgi@kozder.com from the address you previously gave us and that is on record in our system.

Your application is concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process incurs an additional cost, the fee set out in the tariff determined by the Board may be charged.

If your application is rejected, the response is inadequate, or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and in any case within sixty days of the date of application.

This notice may be updated in line with changes in legislation or developments in our activities. The current text is always published on this page.