Privacy Notice (KVKK)

Last updated: 19 August 2026

This privacy notice has been prepared by BADE Institute in its capacity as data controller, in accordance with Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK“) and the associated Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform.

1. Identity of the Data Controller

Legal name	BADE Institute Arge Eğitim ve Danışmanlık Hizmetleri Limited Şirketi
Address	Ayazağa Mah., Kemerburgaz Cad., Vadi İstanbul Park Sitesi, 7A Blok, No: 7b, Interior door no: 4, Sarıyer / İstanbul 34396, Türkiye
E-mail	info@badeinstitute.com
Website	www.badeinstitute.com

Referred to below as “we”, “us” or “BADE Institute”.

2. What Personal Data Do We Process?

Depending on the nature of your relationship with us, the following personal data may be processed:

2.1. General personal data

Identity data: first name, surname
Contact data: e-mail address, telephone number, postal address
Request/complaint data: the subject you select and the message you send through the contact form
Customer transaction data: course registration details, attendance records, invoice and payment information
Professional experience data: title, institution and field of work you provide in connection with academic consultancy and training services
Transaction security data: IP address, browser and device information, site usage logs, cookie records
Marketing data: contact details and preferences you provide when subscribing to our newsletter

2.2. Special categories of personal data

When you enquire about our psychological counselling, couple and family counselling, EMDR, cognitive behavioural therapy, group counselling and supervision services, health data may be processed, which constitutes a special category of personal data under Article 6 of the KVKK. This may include the reason for your enquiry, statements relating to your mental health, information you share during the counselling process, and process records.

Special categories of personal data are processed only where you have given explicit consent or where another condition provided by law applies. You do not need to share detailed information about your mental health through the contact form; describing your request in general terms is sufficient.

3. For What Purposes Do We Process Your Personal Data?

Receiving, assessing and responding to your requests regarding our consultancy, training, analysis and research services
Establishing and performing the service agreement, and managing appointment and registration processes
Planning and conducting psychological counselling processes
Planning training programmes, keeping attendance records and issuing certificates of attendance
Carrying out finance, accounting and invoicing operations
Following up requests and complaints and conducting communication activities
Sending newsletters, announcements and promotional content where you have given explicit consent
Ensuring the security and continuity of the website and analysing usage statistics
Conducting analysis with anonymised or pseudonymised data in our scientific research and project activities
Fulfilling our legal obligations and providing information to authorised public authorities

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:

Directly related to the establishment or performance of a contract (Art. 5/2-c) — your service request, your registration and the delivery of the service
Necessary for compliance with a legal obligation of the data controller (Art. 5/2-ç) — tax, accounting and retention obligations
Necessary for the establishment, exercise or protection of a right (Art. 5/2-e)
Necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed (Art. 5/2-f) — site security, improving service quality
Your explicit consent (Art. 5/1 and Art. 6/2) — processing of health data, sending commercial electronic messages, non-essential cookies, and transfers abroad where these rest on explicit consent

5. How Do We Collect Your Personal Data?

Your personal data is collected by automated or partly automated means through:

The enquiry and contact forms on our website
Correspondence you initiate by e-mail
Messages you send through our social media accounts
In-person or online meetings
Course and event registration forms
Cookies and similar technologies during your visits to the website

6. Transfer of Your Personal Data

6.1. Transfers within Türkiye

In line with the conditions set out in Article 8 of the KVKK and only to the extent necessary, your personal data may be transferred to:

The specialist counsellors, trainers and academics involved in delivering the service
Our financial adviser and accounting service provider
Our hosting, information technology and technical support providers
Authorised public institutions, on request and to the extent required by law

6.2. Transfers abroad

In operating our website and communication infrastructure we use service providers whose servers or processing activities may be located outside Türkiye. Your personal data may therefore be transferred abroad in connection with the following services:

E-mail and communication infrastructure services
Newsletter delivery (Mailchimp — only if you subscribe)
Website traffic analysis (only if you consent to the relevant cookies)
Online meeting platforms (Zoom — only if you choose an online session)

Transfers abroad are carried out under Article 9 of the KVKK: to countries for which the Personal Data Protection Board has issued an adequacy decision; or, where no adequacy decision exists, on the basis of appropriate safeguards such as standard contractual clauses, binding corporate rules or written undertakings; or, where none of these is available, on the basis of your explicit consent.

Your health data is not transferred abroad. Records relating to psychological counselling processes are stored within Türkiye.

7. Retention Periods

Your personal data is retained for as long as the purpose of processing requires, taking into account the limitation and retention periods prescribed by the applicable legislation:

Enquiry and contact form records that did not result in a service	Maximum 1 year
Client and participant records where a service relationship was established	10 years from the end of the service relationship
Accounting and invoice records	10 years (under the Tax Procedure Law and the Turkish Commercial Code)
Newsletter subscription records	Until your subscription ends; then 3 years for evidentiary purposes
Website traffic and cookie records	Maximum 2 years

Once the period expires or the purpose of processing ceases to exist, your personal data is deleted, destroyed or anonymised.

8. Cookies

Our website uses cookies that are strictly necessary for the site to function, together with performance, analytics and marketing cookies that run only with your consent. Non-essential cookies are activated only if you consent to them. You can delete or block cookies at any time through your browser settings; some functions of the site may then not work correctly.

9. Your Rights Under the KVKK

Under Article 11 of the KVKK you may apply to us as data controller and exercise the following rights:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing and whether the data is used in accordance with that purpose
To know the third parties within or outside Türkiye to whom your personal data has been transferred
To request correction where your personal data has been processed incompletely or inaccurately
To request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK
To request that actions taken under the two points above be notified to the third parties to whom your data was transferred
To object to a result adverse to you arising from analysis of your data exclusively by automated systems
To claim compensation where you suffer loss because your personal data has been processed unlawfully

You may also withdraw your explicit consent at any time in respect of data processed on that basis. Withdrawal does not affect the lawfulness of processing carried out up to the date of withdrawal.

10. How to Apply

You may submit requests relating to the rights listed above, in accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller:

In writing — with documents verifying your identity, signed in wet ink and sent to Ayazağa Mah., Kemerburgaz Cad., Vadi İstanbul Park Sitesi, 7A Blok, No: 7b, Interior door no: 4, Sarıyer / İstanbul
By e-mail — from the e-mail address you have previously notified to us and which is registered in our systems, to info@badeinstitute.com

Your application should include your name and surname, your signature (for written applications), your Turkish ID number if you are a Turkish citizen, your address for notification, your e-mail address, telephone and fax number if applicable, and the subject of your request.

Your request will be concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature. Where the process incurs an additional cost, the fee set in the tariff determined by the Personal Data Protection Board may be charged.

If your application is rejected, if you find our response insufficient, or if we do not respond within the period, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and in any case within sixty days of the date of application.

11. Changes

This privacy notice may be updated in line with changes in legislation or in our data processing activities. The current version is always published on this page. You can identify the version in force from the “last updated” date at the top of the text.

This is an English translation provided for information. In the event of any discrepancy, the Turkish text of the KVKK Aydınlatma Metni prevails.