Privacy Policy
Last updated: 2026-08-27
This Privacy Policy explains what personal data SEP ("the Platform") collects when you use its app and website, how it is processed, and what your rights are. The Platform is a training and certification service for healthcare institution staff; your account is created by your institution's administrator.
1. Data Controller
Your data is processed on behalf of the healthcare institution that registered you on the Platform ("institution administrator"). For questions about your data, contact your institution administrator or reach us using the contact details below.
2. Data We Collect
During account creation and use of the Platform, the following data is processed: full name, email address, national ID number (optionally used as a login identifier), institution/department, password (stored irreversibly hashed), profile photo (if you upload one), your preferred language, training progress, exam results, certificates you earn, survey responses, and meeting attendance records. If you use the mobile app, an anonymous device push-notification token is also stored so we can send you notifications.
3. How We Use Your Data
Your data is used only for: authentication and session management, delivering the trainings assigned to you and tracking your progress, exam grading and certificate issuance, pass/fail reporting for institution administrators, survey and meeting management, and (where enabled) mobile push notifications. Your data is never used for advertising or sold.
4. Data Security & Retention
Your data is stored in an access-restricted database; your password is kept using an irreversible hash and is never viewable in plain text by the Platform. Data is retained until your account is deleted by your institution or until any applicable legal retention period expires.
5. Data Sharing
Your data is shared only with your institution's authorized administrators and reporting units. For mobile notifications, only your device token is passed to a third-party push notification service — no personal identifying information is shared with it. Your data is never shared with other third parties or advertising networks except where legally required.
6. Your Rights
Depending on your jurisdiction (including Turkey's KVKK and, where applicable, GDPR), you have the right to access, correct, and request deletion of your data, and to object to its processing. To exercise these rights, contact your institution administrator or use the contact details below.
7. Cookies
The Platform uses only a strictly necessary, browser-inaccessible (httpOnly) session cookie to keep you signed in. No advertising or tracking cookies are used.
8. Changes
This policy may be updated from time to time. Material changes will be posted on this page.
9. Contact
For privacy-related questions, contact: admin@saglikegitimplatformu.com.tr