Data Protection Statement For The Application Form | 20TH Innogate UK Cohort | 2026
- Identity of the Data Controller
ARI TEKNOKENT PROJE GELİŞTİRME PLANLAMA ANONİM ŞİRKETİ (TIN: 0740264905) (“İTÜ ARI Teknokent” or “ Company“), as the data controller, attaches the utmost importance to the security of your personal data. In this context, the personal data of real persons with whom we interact is processed and stored in accordance with the Personal Data Protection Law No. 6698 (“PDPL” or “Law”), secondary regulations enacted under the Law (regulations, circulars, etc.) and the binding decisions of the Personal Data Protection Board. This information notice has been prepared to inform you about your personal data processed within the scope of the Data Protection Statement for the Application Form | 20th Innogate UK Cohort | 2026 you filled out on our website www.innogate.org.
- Categories and Types of Personal Data Processed
| Identification | Name, last name. |
| Contact Information | Email address, phone number. |
| Personal and Professional Experience | Company name. |
| Other | UK visa information* (if available). |
- Activities for which personal data is collected and obtained
| Data Category | Activity from which data is obtained |
| Identification | Semi-automatic method; By filling out the Application Form | 20th Innogate UK Cohort | 2026 on the website and submitting it to the Company. |
| Contact Information | |
| Personal and Professional Experience | |
| Other |
- Purposes and Legal Basis for Processing Personal Data
| Data Category | Purpose of Processing | Legal Ground |
Identification
| · Verification of identity credentials of the user completing the form for participation in Innogate, · Registration of the application into the system and identification of the applicant, · Compilation of participant lists for the relevant program, event, or meeting, · Planning of services (training, mentorship, information sessions) to be provided within the scope of the program or event, · Arrangement of organizational capacity based on participant density, · Ensuring system security and detection of fraudulent attempts or misuse. |
Article 5/2/c-f of the Law; If the processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, If the processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject. |
| Contact | · Transmission of mandatory notifications regarding the application process (date, time, venue, requirements, etc.), · Requesting and associating additional documentation that may be required during the application process, · Resolution of technical issues and provision of support regarding the application process. | |
| Personal and Professional Experience | · Evaluation of competence, experience, or application criteria, · Verifying the applicant’s authority to represent the institution/company based on their information. | |
| Other | · Ensuring business continuity activities, · Event and activity management, · Conducting the application processes. |
- Transfer of Personal Data and Transfer Purposes
| Transfer to 3rd Parties | Purpose of Transfer | Legal Ground |
| Service provider business partners and suppliers authorized by us in the capacity of data processor | Carrying out customer relationship management processes and activities for customer satisfaction, responding to requests and complaints. | Pursuant to Article 8/2/a of the Law; If the processing of personal data of the parties of a contract is necessary, if it is directly related to the establishment or performance of the contract. |
| Service providers acting as data processors abroad that host the Company’s contracted servers | To carry out technical infrastructure management, system maintenance, and operational continuity of the online application platform, to ensure the information security, integrity, and confidentiality of data, including the implementation of technical and organizational security measures, to manage and improve the functionality and reliability of the application and evaluation systems used within the scope of the Innogate UK Cohort Program. | Pursuant to Article 9/4(c) of the Law; the transfer of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract and that a standard contract published by the Board exists, containing information such as data categories, purposes of the data transfer, recipients and recipient groups, technical and organizational measures to be taken by the data importer, and additional measures for special categories of personal data; furthermore, the transfer of personal data is mandatory for the legitimate interests pursued by the data controller, provided that such transfer does not violate the fundamental rights and freedoms of the data subject. |
| Authorized public institutions and organizations, if necessary | Providing information to authorized persons, institutions, and organizations and ensuring the security of the operations of the data controller. | Pursuant to Article 8/2/a of the Law; If the processing of personal data necessary for compliance with a legal obligation to which the data controller is subject. |
Rights of the Data Subjects Under the Law
You may apply to İTÜ ARI Teknokent at any time and request to exercise your rights arising from the Article 11 of the PDPL: “a) to learn whether your personal data has been processed, b) to demand for information if your personal data have been processed, c) to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose, ç) to know the third parties to whom your personal data are transferred in country or abroad, d) to request the rectification of the incomplete or inaccurate data e) to request the erasure or destruction of your personal data under the conditions referred to in Article 7, f) to request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom your personal data have been transferred, g) to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems, ğ) to claim compensation for the damage arising from the unlawful processing of your personal data”. You may submit your requests regarding your rights and the enforcement of the Law by filling and signing out the application form that you can obtain from us or from www.innogate.org.
- Send it with wet-ink signature “Reşitpaşa Mah. Katar Cad. No:4 İç Kapı No:1101 Sarıyer/İstanbul” via notary public, by registered mail with return receipt requested at your discretion for ease of proof or by your personal application,
- By sending your application via e-mail to [email protected] using the registered electronic mail (KEP) address assigned to your name,
- By sending an e-mail to [email protected] using the e-mail address notified to the Brand by you and registered in the brand system.
As the personal data owner, in the application you will make to exercise your rights mentioned above and which contains the explanations regarding the right you have request to exercise; the requested matter needs to be clear and understandable, the subject needs to be related to yourself and in case you are acting on behalf of someone else, you will need to submit your special power of attorney certified by the notary in this regard. In accordance with the “Communiqué on The Principles and Procedures for the Request to Data Controller“, it is mandatory to include name-surname, signature, Turkish Identification (“ID”) number (for foreigners, nationality, passport number or ID number if any), residential or workplace address for notice, e-mail address, telephone and fax number and the subject of the request in your applications. Applications that do not fulfill such elements will be rejected by İTÜ ARI Teknokent or directed to the valid application channels.
İTÜ ARI Teknokent reserves the right to make changes in this Data Protection Statement, due to the Law, secondary legislations and committee resolutions.
This data protection statement has been updated on 12.02.2026.

