Privacy Policy

1. Data Controller Information

In accordance with the Turkish Law on the Protection of Personal Data (KVKK Law No. 6698) and the European Union General Data Protection Regulation (GDPR), the data controller is Erciyes University, Department of Korean Language and Literature ("KDE E-Book Platform", "we", "us", or "our").

2. Categories of Processed Personal Data

We collect and process the following categories of personal data to deliver our educational e-book services:

• Identity & Contact: Full name, institutional email address, user role (student, professor, or admin), and account password hashes.
• Academic & Platform Activity: Document reading duration, page numbers accessed, active reading progress logs, quiz scores, spelling exercise attempts, and question option selections.
• Billing & Subscriptions: Active package parameters (Semester Pass, Annual Pass), payment dates, and transactional history. No raw credit card details are stored on our servers; they are processed by secure third-party payment gateways.

3. Legal Grounds and Purposes of Processing

We process your personal data on the following legal bases under KVKK Article 5 and GDPR Article 6:

• Performance of Contract: Managing account creation, authenticating users, managing subscription credentials, and granting access to Korean text books.
• Legitimate Interest & Academic Performance: Providing reading statistics, duration metrics, and quiz scores directly to course professors for grading, monitoring course attendance, and verifying curriculum compliance.
• Consent: Storing browser configurations and local storage parameters to personalize user experience and tutorial progress.

4. Transfer and Sharing of Personal Data

We strictly limit the sharing of your personal data:

• Your reading duration, activity history, and evaluation scores are shared directly with authorized instructors and professors of the Erciyes University Department of Korean Language.
• Data may be processed by cloud storage systems or payment platforms in compliance with cross-border data transfer rules under GDPR and KVKK.

5. Data Retention & Security

Personal data is stored securely using technical and organizational safety measures. We retain academic logs, reading statistics, and quiz metrics as long as your user account is active, or as required by the academic retention rules of Erciyes University.

6. Your Rights under GDPR and KVKK

As a data subject, you have the following rights under GDPR Articles 15-22 and KVKK Article 11:

• Right to confirm if your personal data is processed and request relevant details.
• Right to request corrections of inaccurate or incomplete personal files.
• Right to request erasure ("Right to be Forgotten") or restriction of data processing.
• Right to object to automated decision-making and request data portability.
• Right to withdraw consent at any time for consent-based actions.

To exercise your rights, please submit a formal request to our Data Protection representative at dpo@erciyes.edu.tr or contact support using the support widget in the dashboard.