🔒 Privacy Policy

1. Introduction

This Privacy Policy explains how we, the On Eğitim Digital Education Platform ("Platform", "We", "Service"), collect, use, store, and protect our users' personal data. We act in accordance with our obligations under the Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

2. Data Collected

a) Identity and Contact Information: First name, last name, email address, phone number, Turkish national ID number (optional).

b) Education Information: School, grade level, university, department, subject, years of experience.

c) Usage Data: Platform login dates, purchased packages, exams taken, appointment history.

d) Technical Data: IP address, browser type, device information (for analytics purposes).

3. Purposes of Using Data

Your personal data is processed for the following purposes:

• Providing Platform services and matching students with teachers
• Carrying out lesson reservations and payment transactions
• Identity verification and ensuring account security
• Fulfilling legal obligations
• Delivering notifications and announcements related to the Platform

4. Sharing of Data

Your personal data is not shared with third parties without your explicit consent, except where legally required. Subcontractors from whom we receive services (payment infrastructure, SMS provider) are bound by a data processing agreement under the KVKK.

5. Cookies

The Platform uses HttpOnly JWT cookies for authentication purposes. These cookies are required for session management and do not serve any advertising or tracking purpose. For details, see our Cookie Policy.

6. Data Retention Periods

Your personal data is stored in a two-tier system: transactional logs (access records, security logs, messaging logs, etc.) are kept in the active database for 90 to 365 days depending on the data type, after which they are moved to an accessible archive and retained there indefinitely. Data subject to legal retention requirements, such as invoice and order records, is retained for the period required by the relevant legislation. When you delete your account, your personal data is anonymized in accordance with the KVKK; records subject to legal retention obligations continue to be stored linked to the anonymized account.

7. Data Security

Technical and administrative measures are applied to protect your data against unauthorized access, including TLS/SSL encryption in transit, role-based access control, and two-factor authentication (2FA). For details, see our Information Security Policy.

8. Your Rights Under the KVKK

Under Article 11 of the Turkish Law No. 6698 on the Protection of Personal Data (KVKK), you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To request correction or deletion of the data
• To learn the third parties to whom the data has been transferred
• To request compensation for damages if the processing is unlawful

For a detailed list of your rights, see our KVKK Disclosure Notice. For applications: iletisim@onegitim.tv

9. Contact

For questions about our privacy policy:
Email: iletisim@onegitim.tv
Address: Melikgazi / Kayseri, Turkey