Personal Data Protection and Processing Policy

1. Introduction

This Personal Data Protection and Processing Policy ("Policy") explains how Musichool ("we", "us", or "our") collects, processes, stores, and protects your personal data in accordance with applicable data protection laws, including the Turkish Law on Protection of Personal Data No. 6698 ("KVKK") and the General Data Protection Regulation ("GDPR").

2. Data Controller

Company Name: Musichool
Address: [Company Address]
Email: info@musichool.co
Website: https://musichool.co

3. Categories of Personal Data We Process

We process the following categories of personal data:

Identity Information: Name, surname, date of birth, nationality, ID number
Contact Information: Email address, phone number, postal address
Account Information: Username, password (encrypted), profile picture
Educational Information: Course enrollments, progress, certificates, instructor qualifications
Financial Information: Payment history, billing information, bank account details (for instructors)
Technical Information: IP address, browser type, device information, cookies
Communication Data: Messages, support tickets, feedback, reviews

4. Purposes of Processing Personal Data

We process your personal data for the following purposes:

Providing and managing our online education platform services
Creating and managing user accounts
Processing course enrollments and payments
Delivering educational content and managing learning progress
Communicating with users about courses, updates, and support
Ensuring platform security and preventing fraud
Complying with legal obligations and regulations
Improving our services and user experience
Sending marketing communications (with consent)
Managing instructor accounts and payments

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to fulfill our contractual obligations
Legal Obligation: Processing required to comply with legal requirements
Legitimate Interest: Processing necessary for our legitimate business interests
Consent: Processing based on your explicit consent (e.g., marketing communications)

6. Data Sharing and Disclosure

We may share your personal data with:

Service Providers: Payment processors, cloud hosting providers, email service providers
Business Partners: Other instructors (for enrolled courses only)
Legal Authorities: When required by law or to protect our rights
Third Parties: With your explicit consent

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Policy or as required by law. For specific retention periods, please refer to our Data Retention Policy.

8. Your Rights as a Data Subject

Under applicable data protection laws, you have the following rights:

Right to access your personal data
Right to rectify inaccurate or incomplete data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with supervisory authorities

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Employee training on data protection
Incident response procedures

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. We ensure that such transfers comply with applicable data protection laws through appropriate safeguards, such as Standard Contractual Clauses.

11. Children's Privacy

Our services are not intended for children under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children without parental consent.

12. Changes to This Policy

We may update this Policy from time to time. We will notify you of any material changes by posting the new Policy on our website and updating the "Last Updated" date below.

13. Contact Us

If you have any questions about this Policy or wish to exercise your data subject rights, please contact us at:

Email: info@musichool.co
Data Protection Officer: dpo@musichool.co

Last Updated: November 25, 2025