Middle East Technical University, as "Data Controller", gives utmost importance to the security of personal data processed within the scope of the Personal Data Protection Law No. 6698 (KVKK). To provide this, all kinds of technical and administrative measures are taken and necessary audits are performed. Personal data is retained for as long as the data processing purpose is valid. The necessary security measures are taken to ensure that the retained and recorded data are not lost, not to be accessed by unauthorized persons and to prevent unlawful use.

It is abided by the principles of being in compliance with the law and the rules of honesty, being accurate and up-to-date when necessary, being processed for certain, clear and legitimate purposes, being connected, limited and restrained to the purpose for which they were committed, being retained as long as the period stipulated in the relevant legislation or the period required for the purpose for which they were processed.