Privacy notice and parental consent

Data controller

The data controller is the teacher giving the lessons, Yeşim Ceylan. Contact: iletisim@mathyesim.com.

The platform's technical side is run by a data processor acting on the controller's behalf and only on her instructions.

What data we process

Identity and contact: the student's and parent's names, email address or the student's username.

Education: the student's grade, class times, attendance, the teacher's class summaries and notes, homework given and the solutions the student uploads (notebook photos or PDFs), and shared lesson materials.

Video classes and whiteboard: video, audio and chat messages are transmitted live during class; what is written on the whiteboard is deleted after 3 days. Classes are not recorded by default; if a class is to be recorded, the parent is asked first.

Technical: session data needed for secure login and server logs (e.g. IP address).

Why, and on what legal basis

To plan and hold lessons, follow the student's progress, keep the parent informed and keep accounts secure. Legal bases: entering into and performing the lesson agreement (KVKK art. 5/2-c), the controller's legitimate interest in account security (art. 5/2-f), and the parent's explicit consent for transfers abroad (art. 9).

Data is never sold, used for advertising or shared for purposes other than the lessons.

How it is collected

Electronically: through the teacher's invitation, what you enter when registering, and your use of the platform.

The contact form on the home page

You can write to us through the form on the home page without having an account. In that case your name, email address and message are processed only to answer you. The legal basis is the explicit consent you give when sending the form (KVKK art. 5/1; art. 9 for transfers abroad).

Your message is forwarded to the teacher as an email and is not stored in the platform's database. It is deleted when you ask for it.

Service providers

To run the platform we work with technical providers for hosting, the database, video classes, file storage and email. Data is shared with them only as far as the service needs it.

These providers are in the European Union and the USA; the consent you give at registration covers this transfer. You can ask for the current list at iletisim@mathyesim.com.

How long it is kept

As long as the account is open. When you ask for the account to be closed, the data is deleted within 30 days and drops out of the encrypted nightly backups automatically at most 30 days later.

Security

Connections are encrypted, passwords are stored irreversibly hashed, backups are encrypted and access is limited to the people who need it.

Artificial intelligence

No AI-assisted features are used at the moment. If they are introduced, you will be told in advance and asked for separate consent.

Your rights (KVKK art. 11, GDPR)

You can ask whether your data is processed, get information about it, learn its purpose and recipients, have it corrected or deleted, object, claim compensation for damage, and withdraw your consent.

Send requests to iletisim@mathyesim.com; you will get an answer within 30 days.