Introduction

This Privacy Policy describes how Prof. Dr. Zayde Ayvaz ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website at zaydeayvaz.com. This policy complies with the Turkish Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and other applicable data protection regulations.

Data Controller (Veri Sorumlusu)

The data controller for this website is:

Prof. Dr. Zayde Ayvaz
Canakkale Onsekiz Mart University (COMU)
Faculty of Marine Sciences and Technology
Department of Fisheries and Fish Processing Technology
Email: zaydealcicek@gmail.com

Information We Collect

We may collect the following types of personal data:

  • Contact Information: Name, email address, and message content when you use our contact form.
  • Newsletter Subscription: Email address and language preference when you subscribe to our newsletter.
  • Usage Data: Anonymous analytics data such as page views, referral sources, browser type, device information, and IP address (anonymized) through Google Analytics.
  • Cookie Data: Cookie identifiers and preferences stored on your device.
  • AI Chat Data: Messages you send to our Zizi AI assistant (processed in real-time, not permanently stored).

Legal Basis for Processing (KVKK Article 5)

We process your personal data based on the following legal grounds:

  • Explicit Consent (Acik Riza): For newsletter subscriptions, cookie usage, and analytics tracking. You may withdraw consent at any time.
  • Legitimate Interest: For website security, performance optimization, and improving user experience.
  • Contractual Necessity: For responding to your contact form inquiries.

How We Use Your Information

  • To respond to your inquiries and messages
  • To send newsletter updates (with your explicit consent)
  • To improve our website and content through analytics
  • To display relevant advertisements through Google AdSense
  • To provide AI-powered assistance through our Zizi chatbot
  • To ensure website security and prevent abuse

Data Processors and Third-Party Services

We use the following third-party data processors:

  • Google LLC (Analytics): Website traffic analysis. Google may collect cookies and usage data. Data may be transferred to the United States. Google Privacy Policy
  • Google LLC (AdSense): Displaying advertisements. Google may use cookies to serve ads based on your prior visits. Opt out of personalized ads
  • MailerLite (UAB MailerLite): Email newsletter delivery and subscription management. Data processed in the EU. MailerLite Privacy Policy
  • Cloudflare, Inc.: Website hosting, CDN, DNS services, and API proxy for our AI assistant. Cloudflare Privacy Policy
  • Anthropic: AI language model powering our Zizi chatbot assistant. Chat messages are processed in real-time and are not permanently stored by us. Anthropic Privacy Policy
  • GitHub, Inc.: Website hosting via GitHub Pages. GitHub Privacy Statement

International Data Transfers

Some of our data processors are located outside of Turkey and the European Economic Area (EEA). Personal data may be transferred to:

  • United States: Google (Analytics, AdSense), Cloudflare, Anthropic, GitHub
  • European Union: MailerLite (Lithuania)

These transfers are carried out in compliance with KVKK Article 9 and GDPR Chapter V, using appropriate safeguards such as Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

Cookie Policy

Our website uses cookies and similar technologies. When you first visit our site, a cookie consent banner is displayed allowing you to accept or reject non-essential cookies.

Types of Cookies Used

  • Essential Cookies: Required for basic site functionality (e.g., cookie consent preference, language selection). These do not require consent.
  • Analytics Cookies (Google Analytics): Help us understand how visitors use our site. Only loaded if you accept cookies. Retention: 14 months.
  • Advertising Cookies (Google AdSense): Used to serve relevant advertisements. Only loaded if you accept cookies. Retention: varies by Google.

If you reject cookies, Google Analytics and Google AdSense scripts are not loaded at all. You can change your cookie preferences at any time by clearing your browser's localStorage (key: cookie-consent) and refreshing the page.

AI Chat (Zizi) Data Processing

Our website features an AI chatbot assistant called "Zizi" powered by Anthropic's Claude model. When you use the chat:

  • Your messages are sent through our Cloudflare Worker proxy to Anthropic's API
  • Messages are processed in real-time to generate responses
  • We do not permanently store your chat conversations
  • Chat usage is rate-limited (10 messages per day per user) for service quality
  • The AI is instructed not to answer personal questions about the website owner
  • No personal data from chats is used for training AI models

Data Retention Periods

  • Contact form messages: Retained for up to 2 years, then deleted
  • Newsletter subscriptions: Retained until you unsubscribe
  • Analytics data: Retained for 14 months (Google Analytics default)
  • Cookie consent preference: Stored in your browser's localStorage indefinitely until cleared
  • AI chat messages: Not permanently stored

Data Protection

We take appropriate technical and organizational measures to protect your personal information from unauthorized access, use, alteration, or disclosure. These include:

  • HTTPS encryption for all data in transit
  • API keys and sensitive credentials stored server-side (Cloudflare Workers), never exposed in client-side code
  • Rate limiting on API endpoints to prevent abuse
  • Regular review of data processing activities

We do not sell, trade, or transfer your personal information to third parties beyond the data processors listed above.

Your Rights (KVKK Article 11 / GDPR Articles 15-22)

Under KVKK and GDPR, you have the following rights regarding your personal data:

  • Right to learn whether your personal data is being processed
  • Right to request information about the processing
  • Right to learn the purpose of processing and whether data is used accordingly
  • Right to know third parties to whom personal data is transferred (domestically or abroad)
  • Right to request rectification of incomplete or inaccurate data
  • Right to request erasure or destruction of personal data (KVKK Art. 7)
  • Right to object to processing results that are exclusively against your interest through automated systems
  • Right to claim compensation for damages arising from unlawful processing
  • Right to data portability (GDPR)
  • Right to unsubscribe from our newsletter at any time

Right to Lodge a Complaint

If you believe your personal data rights have been violated, you may lodge a complaint with:

  • Turkey: Personal Data Protection Authority (Kisisel Verileri Koruma Kurumu - KVKK)
    Website: www.kvkk.gov.tr
  • EU: Your local Data Protection Authority (Supervisory Authority)

Before filing a complaint, we encourage you to contact us directly so we can resolve your concern.

Contact

For privacy-related inquiries, data access requests, or to exercise your rights under KVKK/GDPR, please contact:

Prof. Dr. Zayde Ayvaz (Data Controller / Veri Sorumlusu)
Canakkale Onsekiz Mart University (COMU)
Email: zaydealcicek@gmail.com

We will respond to your request within 30 days as required by KVKK.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Material changes will be communicated through a prominent notice on our website.