01Our commitment
We welcome young people from all over the world, and we treat their personal data with care. This policy applies to everyone whose data we process, and in particular to people in the European Union, the European Economic Area and the United Kingdom, where the GDPR gives specific rights.
02Principles we follow
We process personal data lawfully, fairly and transparently; only for clear purposes; limited to what we need; kept accurate and up to date; stored no longer than necessary; and protected with appropriate security. We are accountable for following these principles.
03Your rights
Access: ask for a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your data where there is no reason for us to keep it.
Restriction: ask us to limit how we use your data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
Withdraw consent: where we rely on consent, you can withdraw it at any time, without affecting earlier processing.
Scholarship and selection decisions are made by people, not by automated systems.
04How to make a request
Email [email protected] with the subject "GDPR request" and tell us which right you want to use. We may ask you to confirm your identity.
We respond within one month. For complex requests this can be extended by up to two further months, and we will tell you if that happens. Requests are free of charge unless they are clearly unfounded or excessive.
05Unsubscribing
Every email we send includes an unsubscribe link. You can also write to [email protected] and we will stop sending you marketing emails.
06Service providers and transfers
Our service providers process data only on our instructions and under data processing agreements. Where data is transferred outside the EEA, we use safeguards such as the EU Standard Contractual Clauses. Our Privacy Policy lists the providers we use.
07Data breaches
If a breach affects personal data, we will notify the competent supervisory authority within 72 hours where the law requires it, and inform affected people without delay when there is a high risk to their rights.
08Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the data protection authority in the country where you live or work. In Türkiye, this is the Personal Data Protection Authority (KVKK).
09Contact
Data protection contact: [email protected]
Postal address: Agoglu Maslak A-108, Sariyer, Istanbul 34485, Turkey