Privacy Policy and KVKK Disclosure Text
At Medimpus, we regard the security of your personal data as our highest priority. This text has been prepared in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698).
Who Is the Data Controller?
The data controller within the scope of the Turkish Personal Data Protection Law (KVKK No. 6698) is the following company.
Company Name
Medimpus Digital Education Technologies Inc.
Tax Number
—
MERSİS Number
—
Address
Turkey
info@medimpus.com
KVKK Application Address
kvkk@medimpus.com
What Data Do We Collect?
| Data Type | Example | Why Is It Collected? | Legal Basis |
|---|---|---|---|
| Identity | First name, last name | Account creation | Performance of contract |
| Contact | Email address | Notifications and support | Performance of contract |
| Academic | Exam results, learning data | Learning analytics and AI recommendations | Explicit consent / Contract |
| Technical | IP address, device info | System security | Legitimate interest |
| Behavioural | Video watch time | AI recommendation system | Explicit consent |
Identity
- Example
- First name, last name
- Why Is It Collected?
- Account creation
- Legal Basis
- Performance of contract
Contact
- Example
- Email address
- Why Is It Collected?
- Notifications and support
- Legal Basis
- Performance of contract
Academic
- Example
- Exam results, learning data
- Why Is It Collected?
- Learning analytics and AI recommendations
- Legal Basis
- Explicit consent / Contract
Technical
- Example
- IP address, device info
- Why Is It Collected?
- System security
- Legal Basis
- Legitimate interest
Behavioural
- Example
- Video watch time
- Why Is It Collected?
- AI recommendation system
- Legal Basis
- Explicit consent
Medimpus does not collect health data. No data entered on the platform constitutes a medical record.
For What Purposes Do We Process Your Data?
-
check_circle
To provide and maintain the platform service
-
check_circle
To carry out assessment and evaluation operations
-
check_circle
To provide AI-powered personalised learning recommendations
-
check_circle
To fulfil legal obligations
-
check_circle
To ensure system and information security
AI systems operate solely for educational performance analysis purposes; they do not serve any medical diagnosis or treatment purpose.
Who Is Data Shared With?
-
dns
Hosting and infrastructure providers (domestic servers)
-
cloud
Cloud services (under data processing agreement)
-
school
Affiliated university (where a corporate agreement exists, only the relevant student's data)
-
gavel
Official authorities (only where legally required)
Data is never sold or rented to third parties for commercial purposes.
Our Data Security Measures
Industry-standard technical and administrative measures are applied to protect your data.
SSL/TLS
End-to-end secure connection
Data Encryption
AES-256 encryption infrastructure
Role-Based Access
Authorised access only
Domestic Servers
Data is stored in Turkey
Security Testing
Regular penetration testing
Your data is stored in encrypted systems on domestic servers. Personal data is not transferred abroad.
Applications and Contact
For KVKK applications and questions regarding privacy, please contact us at the addresses below.