Privacy Notice

This English translation is provided for convenience. In case of any discrepancy, the Turkish text prevails.

Data controller

This privacy notice has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK). Your personal data is processed by Sova Akademi, in its capacity as data controller, within the scope described below.

Contact: akademisova@gmail.com

What data we collect

Through the forms on our site, we collect only what you submit.

Contact form: full name, email address, message subject, and your message. If you choose to submit a payment notification, the payment receipt or payment screenshot you upload. This document may contain bank and transaction information.

Corporate inquiry form: institution name, full name, email address, phone number (optional), team size, and the description of your needs that you submit.

Resource request form: your email address.

Our site does not contain cookie-based tracking, advertising pixels, or analytics tracking.

For what purposes we process it

• To respond to your questions and requests
• To complete your course registration and send attendance information
• To verify that your payment has arrived and confirm your registration
• To prepare a scope and a quote for corporate inquiries
• To send the free resource you requested
• If you give explicit consent, to announce our new courses

Our legal basis

Data relating to course registration and payment verification is necessary for the establishment and performance of the contract under Article 5(2)(c) of the KVKK. Responding to questions and requests is based on our legitimate interest under Article 5(2)(f). Promotional emails are sent only with your explicit consent under Article 5(1); not giving consent does not prevent your request from being fulfilled.

Where your data is transferred

Form submissions are received and stored through the infrastructure of Netlify, where our site is hosted. Netlify is a service provider headquartered in the United States of America; for this reason your data is transferred abroad. By submitting the form you consent to this transfer.

Beyond this, your data is not shared with third parties, sold, or transferred for marketing purposes.

How long we keep it

• Contact and inquiry records: at most 2 years after they are answered
• Payment receipts: for the period required by the applicable financial legislation
• Email list records: until you ask to be removed

Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of the processing, to request its correction if it has been processed incompletely or inaccurately, to request its erasure or destruction, to object to the consequences of the processing, and to claim compensation if you suffer damage.

To exercise these rights, you can write to akademisova@gmail.com. Your request is concluded within thirty days at the latest.

BİLSİM training platform

The BİLSİM platform used in our courses processes the following data, separately from the forms on the site.

When signing in with a session password: the name you enter (it may be a nickname), sign-in time, device type (browser and operating system), and your work content (exercise answers, submissions, feedback written to you).

When signing in with a personal account: in addition to the above, your email address, your name, and a hash of your password. Your password is not stored as plain text; your email is used only to match you against the participant list of the course you are registered for and to verify your account.

From the training team: the email address, name, and sign-in records of instructors and administrators. The training team (instructors and administrators) can see the allowlists prepared for personal-account sign-in — the email and name lists of all course cohorts; only administrators change these lists.

Purpose: to run the session (advancing the slide, opening the exercise), to receive your submissions and give feedback, to make your work available to you again after the course, and to record attendance. The legal basis is the performance of the training contract (Article 5(2)(c) of the KVKK).

Transfer: The platform runs on Google Firebase infrastructure. Authentication records are kept in the United States of America, and session data in a database in Belgium (European Union); for this reason your data is transferred abroad. By signing in to the platform you accept this transfer.

Retention: Session data is deleted six months after the room closes. Those who sign in with a session password can take their work at the end of the session with "Çalışmamı indir" (Download my work); those with a personal account see a warning before the period expires and can download their work.

Your rights: The "Your rights" section above also applies to BİLSİM data; you can send your request to akademisova@gmail.com.