Privacy and Data Security

Privacy Policy and KVKK Disclosure Text

At Medimpus, we regard the security of your personal data as our highest priority. This text has been prepared in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698).

Data Controller Information

Who Is the Data Controller?

The data controller within the scope of the Turkish Personal Data Protection Law (KVKK No. 6698) is the following company.

apartment

Company Name

Medimpus Digital Education Technologies Inc.

receipt

Tax Number

numbers

MERSİS Number

location_on

Address

Turkey

mail

Email

info@medimpus.com

shield_person

KVKK Application Address

kvkk@medimpus.com

Data Collected

What Data Do We Collect?

Identity

Example
First name, last name
Why Is It Collected?
Account creation
Legal Basis
Performance of contract

Contact

Example
Email address
Why Is It Collected?
Notifications and support
Legal Basis
Performance of contract

Academic

Example
Exam results, learning data
Why Is It Collected?
Learning analytics and AI recommendations
Legal Basis
Explicit consent / Contract

Technical

Example
IP address, device info
Why Is It Collected?
System security
Legal Basis
Legitimate interest

Behavioural

Example
Video watch time
Why Is It Collected?
AI recommendation system
Legal Basis
Explicit consent
warning

Medimpus does not collect health data. No data entered on the platform constitutes a medical record.

Processing Purposes

For What Purposes Do We Process Your Data?

  • check_circle

    To provide and maintain the platform service

  • check_circle

    To carry out assessment and evaluation operations

  • check_circle

    To provide AI-powered personalised learning recommendations

  • check_circle

    To fulfil legal obligations

  • check_circle

    To ensure system and information security

psychology

AI systems operate solely for educational performance analysis purposes; they do not serve any medical diagnosis or treatment purpose.

Data Sharing

Who Is Data Shared With?

  • dns

    Hosting and infrastructure providers (domestic servers)

  • cloud

    Cloud services (under data processing agreement)

  • school

    Affiliated university (where a corporate agreement exists, only the relevant student's data)

  • gavel

    Official authorities (only where legally required)

block

Data is never sold or rented to third parties for commercial purposes.

Our Data Security Measures
Technical Security

Our Data Security Measures

Industry-standard technical and administrative measures are applied to protect your data.

https

SSL/TLS

End-to-end secure connection

encrypted

Data Encryption

AES-256 encryption infrastructure

admin_panel_settings

Role-Based Access

Authorised access only

dns

Domestic Servers

Data is stored in Turkey

security

Security Testing

Regular penetration testing

verified

Your data is stored in encrypted systems on domestic servers. Personal data is not transferred abroad.

Official Contact

Applications and Contact

For KVKK applications and questions regarding privacy, please contact us at the addresses below.