Privacy and Personal Data Protection
Last updated: 13 October 2026
This notice informs visitors of safakbirol.com under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, for visitors from the EU, Article 13 GDPR. This site uses no cookies.
1. Data controller
Şafak Birol · İzmir, Türkiye · [email protected]
2. Data processed, purpose, method and legal basis
Visit measurement. Cloudflare Web Analytics measures site performance. It uses no cookies or local storage; according to Cloudflare’s documentation it does not collect visitors’ personal data or track individuals across sites, and keeps aggregate metrics such as page load times. Method: automated. Legal basis: legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
On-site measurement. To understand which sections are read and what draws interest, these events of your visit are recorded: the name of the site you came from, the sections viewed, the project panels, papers and photos opened, the links clicked and files downloaded, opening the chat window and the number of questions sent (not their text), active time on the page and scroll depth; together with language, country and device type (mobile, tablet, desktop). To link the events of the same day, a one-way code is derived from your IP address and browser details using a random value that is renewed daily and deleted the next day; your IP address and browser details are not stored, and the code cannot be linked to you the next day. No cookies are used. No measurement takes place if “Do Not Track” or “Global Privacy Control” is enabled in your browser. Method: automated. Legal basis: legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
Language preference. The language you choose is stored only in your browser (“lang” key) and is never sent to us; you can delete it in your browser settings.
Chat assistant. The assistant is an AI, not Şafak Birol. If you press “Start the chat”, the messages you type are sent to Anthropic PBC (USA) to generate replies; this site does not store them. Anthropic does not train models on API content and deletes inputs and outputs within 30 days; conversations flagged by its usage-policy checks may be kept for up to 2 years. To prevent abuse, an irreversible code derived one-way from your IP address, your country and daily request and rejection counts are kept for 30 days. Method: automated. Legal basis: your explicit consent for sending the messages (KVKK Art. 5/1 and 9/6-a; GDPR Art. 6(1)(a) and 49(1)(a)); legitimate interest for the abuse log.
E-mail. If you write to [email protected], your address and message are used only to reply to you. The site has no forms. Legal basis: legitimate interest.
3. Recipients
Data is shared only with service providers: Cloudflare, Inc. (hosting, measurement and abuse log; records kept on servers in Western Europe) and Anthropic PBC (chat replies). Data is never sold or shared for advertising.
4. Transfer abroad and possible risks
Anthropic is in the USA. There is no adequacy decision for the USA and no appropriate safeguard is in place for this transfer, so your chat messages are transferred only when you start the chat, occasionally and with your explicit consent (KVKK Art. 9/6-a; GDPR Art. 49(1)(a)). Possible risks: your data is processed in a country without an equivalent level of protection and under its laws; it may be accessed by that country’s public authorities; exercising your rights may be harder. No transfer happens if you do not start the chat; please do not share personal data in it.
5. Retention
Abuse log: 30 days. Chat content: not stored on this site (Anthropic: 30 days, up to 2 years if flagged). E-mail: for the duration of the correspondence. On-site measurement events: 90 days; the random value behind the daily code: 1 day. Cloudflare Web Analytics: aggregate, not linked to individuals.
6. Your rights
Under KVKK Art. 11 you may learn whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction if incomplete or wrong; request erasure or destruction under Art. 7; request that corrections and erasures be notified to recipients; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing. Under the GDPR you also have the rights of access, rectification, erasure, restriction, objection and data portability.
7. How to apply
Write to [email protected]. Requests are answered free of charge within 30 days at the latest (KVKK Art. 13). You may complain to the Turkish Personal Data Protection Board (KVKK Art. 14) or, in the EU, to the supervisory authority of your country.