Privacy Policy and Personal Data Processing Notice
Privacy Policy and Personal Data Processing Notice
Qimi Hawiyati Foundation Website
This Policy explains how Qimi Hawiyati Foundation collects, uses, protects, and shares personal data when you visit www.hawiatey.com, use its forms, create an account, or communicate with us. It also explains your rights and the choices available to you. Your use of the website after this Policy is made available is subject to its terms, without limiting any rights granted to you by law.
1 Who We Are and the Data Controller
The data controller responsible for processing personal data is Qimi Hawiyati Foundation, an organization specializing in values education, identity, curricula, training programs, and educational and institutional consulting.
• Website: www.hawiatey.com
• Email: info@hawiatey.com
• Telephone: +90 507 464 37 24
• Address: İstanbul, Türkiye.
2 Scope of This Policy
This Policy applies to data collected through the website, its Contact Us form, and any account or login function that is used. It also applies to communications connected with our services through email, telephone, or WhatsApp. It does not apply to third-party websites or services linked from our website, which are governed by their own privacy policies.
3 Personal Data We May Collect
• Contact data that you provide directly, including your first name, last name, email address, message content, and any contact, organization, or request information that you choose to include.
• Account data, if you create an account or use the login function, including your name, email address, membership information, and account-related activity. We do not ask you to send passwords through our contact forms.
• Technical and usage data, including your Internet Protocol address, device and browser type, operating system, pages visited, visit time, referral source, and cookie or session identifiers.
• Correspondence and request data received through email, telephone, or WhatsApp, including contact details, the nature of your enquiry, and the service requested.
• Information provided by a school or partner organization in connection with a project or program, subject to applicable agreements, instructions, and legal requirements.
Sensitive data: Because our content relates to values, religion, and education, information voluntarily included in a message may reveal religious beliefs or other sensitive personal information. Please do not send official identity documents, health or financial information, passwords, or other sensitive data that is not necessary. Where processing sensitive data is necessary, we will process it only as permitted by law and subject to the required safeguards and consents.
The current Contact Us form does not request payment card data. If a payment service or online store is added in the future, we will update this Policy and the relevant notices before collecting such data.
4 How We Collect Personal Data
• Directly from you when you complete a form, create an account, subscribe to a service, or contact us.
• Automatically when you use the website through cookies and measurement or tracking technologies, subject to your cookie choices.
• From a school, organization, or authorized partner when necessary to provide a program or service and when an appropriate legal basis exists.
5 Purposes and Legal Bases for Processing
We process personal data for the purposes listed below. Depending on the circumstances, processing is based on explicit consent where required, performance of a contract or steps taken at your request before entering into a contract, compliance with a legal obligation, protection of legal rights, or our legitimate interests where those interests do not override your fundamental rights and freedoms.
• Responding to enquiries, cooperation requests, and service requests, and communicating about them.
• Managing accounts, memberships, programs, courses, and events when these functions are enabled.
• Providing products, curricula, training, consulting, follow-up, and support.
• Operating and securing the website, preventing misuse, and identifying technical or security risks.
• Measuring website performance and improving content and user experience.
• Measuring and improving advertising campaigns through Google and Meta tools after obtaining any consent required for non-essential cookies.
• Sending marketing communications when separate consent or another lawful basis exists, with the option to unsubscribe at any time.
• Complying with legal and regulatory requirements, responding to lawful requests, and protecting legal rights.
6 Cookies and Measurement Tools
The website uses cookies necessary to operate Wix services, secure sessions, and provide website functions. Subject to the website settings and your choices, it may also use non-essential technologies for analytics, advertising, and conversion measurement, including Google Ads or Google Tag and Meta Pixel. The website may also use embedded or connected services such as Google Maps, YouTube, and social media platforms.
When you first visit the website, you may use the cookie banner to accept, reject, or customize non-essential cookie categories. Rejecting non-essential cookies does not affect the website’s core functions, although it may limit some features or measurement accuracy. You may later change your choices through the privacy or cookie settings available on the website and through your browser settings.
Third parties may place cookies and collect data under their own policies. We recommend reviewing the privacy policies of Wix, Google, Meta, and any relevant embedded service.
7 Sharing Personal Data
We do not sell your personal data. We may share only the minimum data necessary with the following recipients:
• Authorized employees, collaborators, and advisers on a need-to-know and confidential basis.
• Wix as the provider of website hosting, management, forms, accounts, and technical services.
• Google, Meta, and providers of analytics, advertising, and conversion measurement services, subject to the relevant consent and settings.
• Email, communication, WhatsApp, or operational service providers used to respond to your request.
• Schools or partner organizations where sharing is necessary to provide a requested service or agreed program and an appropriate legal basis exists.
• Public, regulatory, or judicial authorities where disclosure is legally required or necessary to protect rights and safety.
8 International Transfers
Some services used by the website, including Wix, Google, Meta, and communication or hosting services, may rely on servers or companies located outside Türkiye. Where personal data is transferred internationally, we seek to use an appropriate lawful transfer mechanism and apply the safeguards required under Turkish Personal Data Protection Law No. 6698 and any other applicable law.
9 Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law. As an operational standard, we use the periods below unless the law or an ongoing dispute requires a longer period.
Data category
Target retention period
Enquiries and contact forms
Up to 24 months after the request is closed or the last substantive communication
Account data
While the account remains active and for up to 12 months after closure, unless longer retention is required
Marketing data
Until consent is withdrawn or after 24 months of inactivity, whichever occurs first
Technical and security logs
Up to 12 months or in accordance with service-provider, security, and legal requirements
Contractual and financial records
For the periods required by applicable legal, accounting, and tax obligations
After the retention period ends, we securely delete or destroy the data or anonymize it, unless continued retention is legally required.
10 Children and Students Data
Some Foundation programs serve schools, parents, and students, including persons under 18 years of age. We do not seek to collect children’s data directly through the general contact form without appropriate supervision. A child’s or student’s data should be submitted only by a parent, school, or legally authorized person and only to the extent necessary. Schools and partner organizations are responsible for confirming that they have the necessary authority and consents before sharing data with us.
If we learn that a child’s data was collected without the required lawful basis or consent, we will take reasonable steps to delete it. A parent or guardian may contact us at info@hawiatey.com to request review or deletion.
11 Data Security
We apply reasonable technical and organizational measures to protect personal data against loss, unauthorized access, unlawful use, alteration, or disclosure, and we restrict access to authorized persons. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee protection against every risk.
12 Your Rights
Under Article 11 of Turkish Personal Data Protection Law No. 6698, and depending on the law’s application, you may have the right to:
• Learn whether your personal data is being processed.
• Request information about the processing if your data has been processed.
• Learn the purpose of the processing and whether the data is used in accordance with that purpose.
• Learn the third parties to whom personal data has been transferred in Türkiye or abroad.
• Request correction of incomplete or inaccurate data and, where applicable, notification of the correction to recipients.
• Request deletion or destruction when the reasons for processing no longer exist and, where applicable, notification to recipients.
• Object to a result that is unfavorable to you and is produced solely through automated analysis.
• Claim compensation for damage caused by unlawful processing.
You may also withdraw consent to marketing or non-essential cookies at any time without affecting the lawfulness of processing carried out before withdrawal.
13 How to Submit a Privacy Request
You may send your request to info@hawiatey.com with “Personal Data Request” in the subject line, or write to the postal address stated in this Policy. The request should include your name, a suitable contact method, and a clear description of the right you wish to exercise. We may request limited information to verify your identity and protect your data, but we will not ask for your password.
We will review and respond to the request within the period required by law. If we cannot fully or partly fulfill the request, we will explain the reason to the extent permitted by law.
14 External Links and Services
The website may contain links to or content from external websites and services. We do not control those parties’ privacy practices. Please review their policies before providing personal data or using their services.
15 Changes to This Policy
We may update this Policy when website services, measurement tools, or legal requirements change. We will publish the revised version on this page and update the “Last updated” date. If a change is material, we will provide an appropriate notice through the website or an available communication channel.
16 Contact Us
For questions or requests about this Policy or the processing of your personal data, contact us at info@hawiatey.com or +90 507 464 37 24