Privacy Notice on the Processing of Personal Data
Brightland processes only the personal data necessary to provide its services, fulfil its legal obligations and maintain secure operations. Personal data is not sold. It is shared with authorised recipients only where necessary to provide the relevant service, fulfil a legal obligation or otherwise as permitted by law. Requests concerning rights under the KVKK may be submitted to Brightland using one of the application methods described in Section 16 of this notice.
This summary does not replace the detailed Privacy Notice below.
Under Türkiye's Law No. 6698 on the Protection of Personal Data (the “KVKK”), your personal data is processed by the following entity in its capacity as data controller:
Brightland Eğitim
Danışmanlık ve Yönetim Hizmetleri Anonim Şirketi
Tax Identification Number: 1871621497
Address: Tuna Mahallesi, Salah Birsel Sokak, No: 48, Türemenler Apartmanı, Apartment No: 1, Karşıyaka, İzmir, Türkiye
Website: www.brightlandcorp.com
Email: info@brightlandcorp.com
The company is referred to in this notice as “Brightland” or the “Company.”
This notice has been prepared to inform you about the purposes and legal grounds for processing your personal data, the methods used to collect it, the persons to whom it may be transferred and the purposes of such transfers, and your rights under the KVKK.
Specific privacy notices provided for particular services or data-collection points supplement this general notice. Where necessary, activity-specific information will be provided for student applications, events, international programmes, human resources, CCTV and similar processing activities.
Depending on the nature of the services provided by Brightland and the scope of your relationship with us, the following categories of personal data may be processed:
Name, surname, date of birth, nationality, identification or passport information and other information that may be necessary for identity verification.
Telephone number, email address, contact address and communication preferences.
Educational background, school and university information, department or programme information, diplomas, certificates, academic achievement records, foreign-language information, curriculum vitae information and other professional information necessary for providing the relevant service.
Information concerning the services requested from Brightland, application information, consultancy records, preferences, requests, application documents and other information necessary for providing the service.
Travel, accommodation, transportation and related organisational information, only where required by the relevant service or event.
Invoice, payment and collection information, bank-account information and other information necessary for conducting financial transactions.
Photographs, video recordings and, where necessary, audio recordings obtained in connection with events, programmes, meetings or similar activities.
Records of meetings, applications, requests, emails and other communications conducted with Brightland.
IP address, technical website-use records, access and log information, device and browser information, and technical data required to maintain information security.
Information necessary for conducting legal proceedings, fulfilling legal obligations and ensuring regulatory compliance.
Brightland processes personal data only to the extent that it is necessary, proportionate and relevant to the applicable processing activity and its stated purpose.
Under the KVKK, special categories of personal data include information relating to health, biometric and genetic data, race, ethnic origin, political opinions, philosophical beliefs, religion, religious denomination or other beliefs, appearance and clothing, membership of associations, foundations or trade unions, criminal convictions and security measures, and sexual life.
Brightland processes special categories of personal data only where required by the relevant service or activity and where one of the processing conditions specified in Article 6 of the KVKK applies.
For example, it may be necessary to provide information concerning allergies, intolerances or health conditions in connection with certain educational services, events or consultancy activities. Depending on its nature, such information may constitute special-category personal data.
Brightland applies the appropriate and necessary administrative and technical safeguards required under the KVKK and applicable secondary legislation when processing special categories of personal data.
Your personal data may be processed for one or more of the following purposes, limited to the relevant processing activity:
Your personal data will not be processed for general, uncertain or unforeseeable purposes unrelated to those described in this notice.
Brightland processes personal data on the legal ground applicable to the relevant activity under Articles 5 and 6 of the KVKK.
The processing purpose and the legal ground are distinct elements. The principal processing activities and applicable legal grounds are therefore set out below:
| Processing activity or purpose | Relevant data categories | Legal ground |
|---|---|---|
| Providing the requested education and consultancy service | Identity, contact, education, service and application information | KVKK Article 5(2)(c): Processing is necessary for the establishment or performance of a contract |
| Managing applications and university or educational processes | Identity, contact, education and application information | KVKK Article 5(2)(c), and other applicable processing conditions depending on the activity |
| Managing contracts and customer relationships | Identity, contact, service and transaction information | KVKK Article 5(2)(c) |
| Conducting invoicing and accounting processes | Identity, financial and transaction information | KVKK Articles 5(2)(a) and 5(2)(c) |
| Fulfilling obligations arising from legislation | Relevant identity, financial, transaction and legal information | KVKK Article 5(2)(a) |
| Conducting legal proceedings and protecting rights | Identity, contact, transaction and other necessary information | KVKK Article 5(2)(e) |
| Maintaining information and system security | Technical data, transaction-security records and logs | KVKK Article 5(2)(f) |
| Preventing unauthorised access and misuse | Technical and transaction-security data | KVKK Article 5(2)(f) |
| Processing data made public by the individual for a relevant purpose | Relevant personal-data categories | KVKK Article 5(2)(d) |
| Processing based on explicit consent | Relevant data categories | KVKK Article 5(1) and, where applicable, Article 6 |
| Lawful marketing and promotional activities | Contact information and communication preferences | The applicable condition under Article 5 according to the activity and, where necessary, explicit consent |
The special processing conditions set out in Article 6 of the KVKK also apply to special categories of personal data.
Important: Where more than one legal ground may appear to be relevant, Brightland relies on the ground appropriate to the circumstances and nature of the particular processing activity.
The obligation to provide information and the process of obtaining explicit consent are separate. Where processing relies on explicit consent, providing this notice does not replace that consent. Explicit consent is obtained separately and in accordance with applicable law.
Depending on the nature of the processing activity, your personal data may be collected through:
Personal data may be collected orally, in writing, physically or electronically. It may be processed wholly or partly by automated means or by non-automated means where it forms part of a data-recording system.
Where personal data is not obtained directly from the individual, Brightland complies with the timing and information requirements established under the KVKK and applicable legislation.
Your personal data may be transferred to the following recipient groups, limited to the relevant processing activity and only where the conditions prescribed under the KVKK are satisfied:
Universities, schools and other educational institutions for the purpose of managing applications, admissions, registrations, education and consultancy processes.
Technology, software, cloud, communications, event-management, travel and similar service providers engaged by Brightland or used in delivering Brightland's services, solely to the extent necessary to perform the relevant service.
Accountants, certified public accountants, independent auditors, legal advisers and similar professional service providers for conducting financial, legal and regulatory-compliance processes.
Relevant banks and payment-service providers for processing payments, collections and other financial transactions.
Authorised public institutions and bodies for fulfilling legal obligations or responding to legally valid requests from competent authorities.
Courts and other competent judicial authorities for conducting legal disputes and establishing, exercising or protecting rights.
Your personal data is not sold or rented to third parties unless a valid legal processing or transfer condition exists.
Your personal data may be transferred outside Türkiye where the technology, software, cloud, communication or other service infrastructure used by Brightland is located abroad, or where a service provider is established abroad.
International transfers are conducted in accordance with the current transfer regime prescribed by Article 9 of the KVKK.
Depending on the nature of the transfer, one of the following mechanisms may apply:
Subject to the conditions prescribed by law, appropriate safeguards may include standard contractual clauses and binding corporate rules. Where a transfer relies on standard contractual clauses, the applicable notification requirements are also fulfilled.
Where an exceptional international transfer must rely on explicit consent, that consent is obtained separately after the individual has been appropriately informed.
Brightland conducts international transfers in accordance with applicable legislation, considering the relevant service, data categories, recipient and transfer mechanism.
Your personal data is retained only for:
When the applicable retention period ends or the legal ground requiring processing ceases to exist, personal data is deleted, destroyed or anonymised in accordance with applicable legislation.
Brightland applies a data-category and purpose-based retention and disposal schedule covering application records, customer contracts, student and travel documentation, financial records, CCTV footage, marketing permissions, and visual and audio records. Where no specific statutory period applies, the retention period is determined by considering the processing purpose, proportionality, contractual needs and possible legal claims.
Under Article 12 of the KVKK, Brightland takes the necessary technical and administrative measures to prevent the unlawful processing of and unlawful access to personal data and to ensure that personal data is securely retained.
Depending on the nature of the processing activity, these measures may include:
Nevertheless, no transmission of data over the internet or electronic system can provide an absolute guarantee of security.
Photographs and videos may be recorded during education programmes, meetings, events or other activities organised by Brightland.
Where an applicable processing condition exists, resulting visual and audio records may be processed for:
The applicable legal grounds are assessed separately where photographs or videos are to be used for promotional purposes or published on social media, Brightland's website or other publicly accessible channels. Explicit consent is obtained where required.
Where required for promotional visual and audio records, Brightland applies a separate consent process based on free choice. Individuals may decline promotional uses that are not necessary for participation in the service or may withdraw previously granted consent in accordance with applicable law.
Where CCTV is used in Brightland's offices or other physical premises, a separate and appropriate privacy notice concerning camera surveillance is made accessible to relevant individuals. Brightland does not rely solely on this general notice for CCTV processing.
Brightland's website may use cookies and similar technologies to operate and secure the website, improve the user experience and, where permitted by law, conduct analytics, preference-management or marketing activities.
Processing conducted through cookies and similar technologies is evaluated according to the nature of the technology and applicable legislation.
Detailed information about the types, purposes, durations and third-party providers of cookies is available in the Brightland Cookie Policy. Non-essential analytics, preference or marketing cookies are activated according to the user's selection through the cookie-management panel where such consent is required.
Commercial electronic communications sent by Brightland through SMS, email, telephone or other electronic communication channels are managed in accordance with Law No. 6563 on the Regulation of Electronic Commerce, applicable secondary legislation and the Commercial Electronic Message Management System (“İYS”).
Where applicable law requires consent or approval for commercial electronic communications, the necessary permission is obtained and the relevant procedures are managed through İYS.
Explicit consent under the KVKK and consent to receive commercial electronic communications have different legal characteristics and purposes. Where necessary, they are therefore presented as separate and understandable choices. Marketing consent that is not necessary for providing a service is not made a condition for receiving that service.
Withdrawal of consent or refusal to receive commercial electronic communications does not prevent Brightland from sending communications necessary to provide a service or fulfil a legal obligation.
Due to the nature of Brightland's education and consultancy services, it may be necessary to process personal data belonging to individuals under the age of 18.
In such circumstances, Brightland may communicate with the parent or legal guardian and verify authority or age to the extent necessary according to the processing activity and applicable legislation.
Children's personal data is processed only to the extent necessary for the relevant service or activity.
Under Article 11 of the KVKK, you have the following rights concerning the processing of your personal data:
To exercise your rights under the KVKK, you may submit an application to Brightland:
Applications may be submitted using the following contact details:
Brightland Eğitim
Danışmanlık ve Yönetim Hizmetleri Anonim Şirketi
Address: Tuna Mahallesi, Salah Birsel Sokak, No: 48, Türemenler Apartmanı, Apartment No: 1, Karşıyaka, İzmir, Türkiye
Email: info@brightlandcorp.com
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, an application must include:
Additional information may be required to verify your identity or assess the nature of your request. Information requested for identity verification will be limited to what is necessary to verify the applicant's identity and authority securely.
Applications will be concluded as soon as possible and no later than 30 days, depending on the nature of the request.
Applications are generally processed free of charge. Where responding to an application results in an additional cost, the fee schedule and principles established under the KVKK, applicable legislation and the tariff determined by the Personal Data Protection Board may apply.
Brightland may update this notice following changes to its personal-data processing activities, technology, services, applicable legislation or operational processes.
The updated notice will be published on Brightland's website with its effective date. It will also be communicated separately to relevant individuals where necessary.
For questions concerning this notice or the processing of your personal data, you may contact Brightland using the following details:
Brightland Eğitim
Danışmanlık ve Yönetim Hizmetleri Anonim Şirketi
Address: Tuna Mahallesi, Salah Birsel Sokak, No: 48, Türemenler Apartmanı, Apartment No: 1, Karşıyaka, İzmir, Türkiye
Email: info@brightlandcorp.com
Website: www.brightlandcorp.com
Effective Date: 7 September 2026