- Identity of the Data Controller
As ARI TEKNOKENT PROJE GELİŞTİRME PLANLAMA ANONİM ŞİRKETİ (TIN: 0740264905) (“İTÜ ARI Teknokent ” or “Company”) located at “Reşitpaşa Mah. Katar Cad. No:4 İç Kapı No:1101 Sarıyer/İstanbul”, acting in the capacity of data controller and as a service provider within the scope of the Regulation on Commercial Communication and Commercial Electronic Messages (“Regulation”), we show the utmost sensitivity to the confidentiality and security of your personal data. In this regard, all personal data collected through the Investor Application Form available on our website are processed and stored in accordance with the Law on the Protection of Personal Data No. 6698 (“PDPL” or the “Law”), the secondary legislation (regulations, communiqués, etc.) enacted pursuant to the Law, and the binding decisions of the Personal Data Protection Board. This text has been prepared to inform you regarding the processing of your personal data.
- Categories and Types of Personal Data Processed
| Identification | Name, last name |
| Contact Information | E-mail address, phone number, LinkedIn profile (URL) information (if applicable)* |
| Personal and professional experience | Company name, title/position, previous positions, investment history, sectoral experience information. |
- Method and Activity through which Personal Data are Collected
| Your personal data are collected through a semi-automated method via the investor application form that you fill out on our website. |
- Purposes and Legal Basis for Processing Personal Data
| Category | Purposes of Processing | Legal Basis |
| Identification, Contact, Professional Experience | · To create the investor membership record,
· To verify the identity of the investor through their contact information, · To provide information regarding the application process and ensure necessary guidance, · To carry out risk management processes and ensure the security of the data controller’s operations, · To carry out the Company’s operational processes. |
Article 5/2/c-f of the Law;
If the processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, If the processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject. |
| Contact | · Obtaining the necessary consent under the Regulation for sending commercial electronic messages | Article 5/1 of the Regulation;
Based on your consent |
- Transfer of Personal Data and Purposes of Transfer
| Transfer Channel | Purpose of Transfer | Legal Basis | ||
| Public institutions and organizations legally authorized to obtain information | Fulfilling legal reporting obligations, conducting regulatory and audit activities, managing complaints and legal processes | Article 8/2(a) of the PDPL; Where it is mandatory for the data controller to fulfil its legal obligations | ||
| Authorized service providers and suppliers acting as data processors | Carrying out statutory reporting, conducting regulatory and supervisory activities, and managing complaint and legal processes. | Article 8/2(a) of the PDPL; Where the transfer of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract, or where the transfer is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject | ||
|
Carrying out the mentoring process, creating mentor profiles on İTÜ ARI Teknokent platforms, using third-party service providers’ systems, operational security, access management, and system performance | Pursuant to Article 9/4/c if the existence of a standard contract published by the Board, containing information such as data categories, purposes of the data transfer, recipients and recipient groups, technical and organizational measures to be taken by the data importer, and additional measures for special categories of personal data; | ||
| Message Management System (MMS) and the relevant private legal entity | Fulfilling obligations arising from the Law No. 6563 on the Regulation of Electronic Commerce and its secondary legislation | Article 8/2(a) of the PDPL; Where it is explicitly provided for by law or where it is mandatory for the data controller to fulfil its legal obligations |
- Rights of the Data Subjects Under the Law
You may apply to İTÜ ARI Teknokent at any time and request to exercise your rights arising from the Article 11 of the PDPL: “a) to learn whether your personal data has been processed, b) to demand for information if your personal data have been processed, c) to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose, ç) to know the third parties to whom your personal data are transferred in country or abroad, d) to request the rectification of the incomplete or inaccurate data e) to request the erasure or destruction of your personal data under the conditions referred to in Article 7, f) to request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom your personal data have been transferred, g) to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems, ğ) to claim compensation for the damage arising from the unlawful processing of your personal data”. You may submit your requests regarding your rights and the enforcement of the Law by filling and signing out the application form that you can obtain from us or from www.itucekirdek.com;
- Send it with wet-ink signature “Reşitpaşa Mah. Katar Cad. No:4 İç Kapı No:1101 Sarıyer/İstanbul” via notary public, by registered mail with return receipt requested at your discretion for ease of proof or by your personal application,
- By sending your application via e-mail to ariteknokent@hs03.kep.tr using the registered electronic mail (KEP) address assigned to your name,
- By sending an e-mail to kisiselverilerim@ariteknokent.com.tr using the e-mail address notified to the Company by you and registered in the company system.
As the personal data owner, in the application you will make to exercise your rights mentioned above and which contains the explanations regarding the right you have request to exercise; the requested matter needs to be clear and understandable, the subject needs to be related to yourself and in case you are acting on behalf of someone else, you will need to submit your special power of attorney certified by the notary in this regard.
In accordance with the “Communiqué on The Principles and Procedures for the Request to Data Controller“, it is mandatory to include name-surname, signature, Turkish Identification (“ID”) number (for foreigners, nationality, passport number or ID number if any), residential or workplace address for notice, e-mail address, telephone and fax number and the subject of the request in your applications. Applications that do not fulfill such elements will be rejected by İTÜ ARI Teknokent or directed to the valid application channels.
İTÜ ARI Teknokent reserves the right to make changes in this Data Protection Statement, due to the Law, secondary legislations and committee resolutions.
CONSENT STATEMENT REGARDING COMMERCIAL ELECTRONIC MESSAGE COMMUNICATIONS
- Within the scope of the Regulation on Commercial Communication and Commercial Electronic Messages, I hereby declare and acknowledge that I give my consent to the sending of commercial electronic messages to me via e-mail for the purpose of being contacted electronically.
By filling out the form available on the website and submitting it by checking the approval box, it shall be deemed that you have given your consent for this activity. You may withdraw the consent you have given at any time and contact the Company representatives for further information.
This text has been last updated on 03.03.2026.
