EDUROUTA legal and compliance documents
Data Retention and Destruction Policy
We keep personal data only as long as its purpose requires. This policy explains what we keep, for how long, how it is destroyed afterwards and who is responsible.
Operator and official contact details
This platform is operated under the EDUROUTA brand by ROUTA EĞİTİM VE DANIŞMANLIK ANONİM ŞİRKETİ. EDUROUTA is not a separate legal entity: the company below is the service provider, the data controller and the party to the agreement. The corporate details are published from verified operator records.
- Legal name
- ROUTA EĞİTİM VE DANIŞMANLIK ANONİM ŞİRKETİ
- Country of establishment
- Türkiye
- Registered address
- Haseki Sultan Mah. Müni̇fpaşa Sk. No: 66 İç Kapı No: 1, Fatih / İstanbul
- Trade registry office
- İstanbul Ticaret Sicil Müdürlüğü
- Registration number
- 1164543 (İstanbul Ticaret Sicil Müdürlüğü)
- MERSİS number
- 0735237591100001
- Tax number
- Beyazıt V.D. 735 237 5911
- Privacy contact
- info@edurouta.com
- Customer support
- info@edurouta.com
Retention periods
Advice and application records: 2 years after the process closes.
Application and housing documents: while the process is open and for no more than 12 months afterwards; rejected applications are deleted as soon as possible.
Accounting and invoice records: 10 years (Turkish Commercial Code and Tax Procedure Law).
Data-subject requests and replies: 2 years.
Server and access logs: 12 months.
Site analytics: aggregated and anonymised, without a time limit.
At the end of the period data is deleted, destroyed or anonymised; records under a statutory duty are kept for that period.
How we destroy data
Electronic data is deleted or irreversibly destroyed; magnetic and optical media are securely destroyed. Paper records are destroyed irrecoverably. Every destruction is recorded and applied to backups as well.
Responsibility and audit
The data controller's representative is responsible for retention and destruction. Periods are reviewed at least once a year, destruction records are kept, and access rights are audited regularly.
Deletion on request
On request, data without a statutory retention duty is deleted within 30 days. Where a statutory period still runs, the request is declined with the reason and the date the data will be deleted.
Have a question about your personal data? Contact us