Sharing children’s photos at school and KVKK
Which KVKK articles apply when a school shares children’s photos, what a permission text contains, what to do when a parent withdraws. Not legal advice.
The last week of June. The end-of-year show is over and the class teacher’s phone holds hundreds of photos. The person who runs social media wants to post the best ones on the school’s Instagram account. One parent writes in the class WhatsApp group: "Could you send ours too?" Another tells the principal: "I do not want my daughter’s photo shared anywhere." Three requests, the same photos.
This article is about sharing children’s photos at school under KVKK, Turkey’s data protection law: why a photo is personal data, which articles of the law to look at, what a permission text contains, and what to do when a parent withdraws permission. At the end we say plainly what inTusell does and does not do here.
This article is not legal advice. It does not interpret the legislation, does not tell your school what to do and gives no compliance guarantee. We cite articles only to help you find the topic; read the current text from the official source and ask your legal advisor about your own situation.
Short answer
For a child who can be recognized in it, a photo is personal data (Law No. 6698, Article 3). The school’s decision to share is made with an advisor within the law’s general principles (Article 4), processing conditions (Article 5) and duty to inform (Article 10). In practice a good setup has three parts: a written permission that asks about each place of sharing, a team that knows who has not given permission, and a withdrawal route written down from the start. inTusell has no feature specific to children’s photo permission; you can have a parent sign your own permission text on their phone as a general consent form.
Why is a photo personal data?
Article 3 of Law No. 6698 on the Protection of Personal Data defines personal data as "any information relating to an identified or identifiable natural person". A photo of a child whose face is visible, whose name is written underneath, or who can be recognized by class or uniform falls within that definition. Who can be recognized in a crowded stage photo is a separate question; writing the school’s general rule is easier than weighing it photo by photo.
The same article also defines explicit consent: consent that is specific, informed and freely given. Those three words give you three questions to ask yourself while writing a permission text: What am I asking permission for? What did I tell the parent? What happens if the parent says no?
Which articles to look at
The table below is not a checklist; it is a list of questions to put on the table when you talk to your advisor.
| Article | Subject | Question for the school |
|---|---|---|
| Art. 3 | Definitions: personal data, explicit consent | Can the child be recognized in the photo? Is the permission about a specific matter? |
| Art. 4 | General principles: specified, explicit and legitimate purpose; relevant, limited and proportionate processing; kept only as long as necessary | What am I using the photo for, and how long will it stay up? |
| Art. 5 | Conditions for processing personal data | Which condition does this sharing rely on? |
| Art. 7 | Erasure, destruction and anonymization | What happens to earlier posts once permission is withdrawn? |
| Art. 9 | Transfer abroad | If the platform I post on keeps its servers abroad, does that count as a transfer? |
| Art. 10 | Duty to inform | Did I tell the parent who shares, for what purpose and where? |
| Art. 11 | Rights of the data subject | If a parent asks where the photo is used, is my answer ready? |
| Art. 13 | Applications to the data controller | How and when will I answer a parent’s request? |
The ministry and provincial education directorates may also have their own instructions about school posts. Check with your advisor which ones are current.
Questions that change with the place of sharing
The same photo raises different questions in different places:
| Where | Who sees it | Question to answer first |
|---|---|---|
| The school’s Instagram account and website | Everyone | Does the permission ask about this channel separately? How long will the photo stay up? Will the child’s name appear under it? |
| Printed brochures and posters | Anyone outside the school | Was the parent told it cannot be recalled once printed? |
| The class WhatsApp group | Every parent in the group | Are photos of other children circulating there too? Who runs the group? |
| One-to-one to a parent | Only that parent | Are other children in the photo? |
| A teacher’s personal account | The teacher’s followers | Does the school have a written rule on this? |
Class groups need particular care: every parent in the group sees the other parents’ numbers and every photo shared. Sending a photo only to that child’s parent shrinks the number of people who see it.
What a good permission text contains
This list is not a legal assessment; it is a practical skeleton:
- Each place of sharing separately. Website, social media, printed material, in-class announcements. A parent should be able to say yes to one and no to another.
- What will be shared. Will the face be visible, will the name be written, only group photos?
- Duration. How long does a post stay up, and what happens at the end of the school year?
- A withdrawal route. How does a parent withdraw permission? When they do, does new sharing stop, are earlier posts taken down?
- Kept apart from the enrollment contract. Article 3 defines explicit consent as freely given. Ask your advisor whether a general clause embedded in a contract meets that.
- Who signs. One parent, both parents, or the student’s own view depending on age: settle this with your advisor.
When a parent withdraws permission
What helps on the day permission is withdrawn is the preparation done beforehand:
- A list of places of sharing. If every place the school posts photos is on one list, you know what to check.
- A list of those who have not given permission. Teachers and the social media lead need to know whose photos are not shared. That list is personal data too; only the people who need it should see it.
- Stopping new sharing. No new posts after the moment of withdrawal.
- Your own rule for earlier posts. Apply what your permission text says.
- A record. Write down when the request came and how it was answered.
Where inTusell fits
To be plain: inTusell does not manage photo sharing. It does not know what goes on the school’s Instagram account, website or class group, does not blur faces and does not track posts. It has no feature specific to children’s photo permission. What it does:
- A general consent form. You add your own permission text to the "Consent and intake forms" card in Settings and send the parent a link from the contact card. The parent reads the text on their phone and signs with a finger; the signed PDF lands in the contact file. The signature is bound to the text it was given for: if you change the text later, the old signature is not attributed to the new one. The link is single-use and valid for 14 days. You write the text; inTusell supplies no ready-made consent text. The form is general-purpose: it does not record which photo is shared where, and it does not remove posts for you when permission is withdrawn.
- Message consent is not photo permission. Consent records in inTusell are per person, channel and purpose and are about messaging: they decide whether promotional messages reach a parent. When a parent replies STOP, promotional messages stop; that is not a preference record about photo sharing. Keep photo permission in a separate document so the two are never confused.
- Answers to parents from your text. If you write your photo policy into the knowledge base, the AI answers "Do you share photos at school?" from that text. If you do not, it states no school-specific rule and leaves the question to your team.
- A removal request is your team’s job. If a parent asks in chat for a photo to be taken down, you or your team take over the conversation and answer according to your written policy.
- Bulk updates go one-to-one. Bulk updates sent from inTusell go to each parent as a separate message; unlike a class group, parents never see each other’s numbers. This is not a photo sharing tool; it keeps numbers from circulating in announcements.
What it is not
- Not legal advice. Neither this article nor the product interprets the legislation; the framework is set by the school and its advisor.
- Not a photo archive or sharing tool. inTusell does not publish or track the school’s photos.
- Not a children’s photo permission module. The consent form is general-purpose; the school writes the text and the rule.
- Not a compliance guarantee. The setup described here brings discipline; it does not replace a compliance document.
- Not a simple chatbot. inTusell is an AI sales assistant and CRM that answers messages arriving on WhatsApp, Instagram and web chat, opens appointments and orders, and follows each customer through the sales flow.
Frequently asked questions
Is a child’s photo at school personal data?
If the child can be recognized in it, yes: Article 3 of Law No. 6698 defines personal data as any information relating to an identified or identifiable natural person. Settle with your legal advisor which condition the sharing relies on.
Can photo permission sit inside the enrollment contract?
The same article defines explicit consent as consent that is specific, informed and freely given. Ask your advisor whether a general clause embedded in a contract meets that. In practice, a separate text that asks about each place of sharing is clearer for parents.
What should I do if a parent withdraws permission?
Stop new sharing, apply the rule your permission text sets for earlier posts and record the request. How a parent’s application is answered is set out in Article 13 of the Law; settle the details with your advisor.
Does inTusell have a children’s photo permission feature?
No. You can add your own permission text as a general consent form and have a parent sign it on their phone; the signed PDF lands in the contact file. The form does not track where photos are shared and does not remove posts for you.
If a parent replies STOP, is photo permission withdrawn too?
In the system STOP only halts promotional messages to that parent; it is not a record about photo permission. Keep photo permission in a separate document, and if the parent’s intent is unclear, ask them.
Can the AI explain our photo policy to parents?
If you have written it in your knowledge base, yes, from your text. If not, it states no school-specific rule and leaves the question to your team.
Next step
The detail of message consent, STOP requests and one-to-one sending is in parent communication and data protection. For a prospective parent’s first minutes see the first 5 minutes with a prospective parent, and for enrollment season the early enrollment message pile-up. The sector overview is on the education solution page.
Let the AI answer parents from your own text. See the pricing page for plans, or write to us if you would like to set up your school together.
You read the blog. Now see it live.
Test inTusell live with your own sector scenario in a 20-minute demo.
