Privacy Policy

1. Controller and scope

This is a personal portfolio and blog operated by Faik Enes Albayrak. When you visit the site, submit a form, or use the digital assistant, the categories below may be processed only for the purposes described here.

2. Data categories

• Contact form: name, email address, subject, message, consent status, IP address, user-agent, and timestamp.
• CV request form: name, institution, email address, phone, message, consent status, IP address, user-agent, and timestamp.
• Digital assistant: messages you send, session state, and technical records required to operate the service.
• Analytics and performance: page views, referral source, device/browser information, and similar aggregated usage signals.
• Security: short-lived technical logs for spam prevention, abuse detection, rate limiting, and debugging.

3. Purposes and legal grounds

Form data is used to respond to your request, handle CV sharing, communicate with you, and prevent abuse. Security records are processed to protect the site. Consent given in forms covers use of the submitted personal data for the relevant request. Analytics data is used to understand and improve the site experience.

4. Third-party services

The site uses specialist service providers where technically necessary. Limited data may be processed through provider infrastructure for hosting, security, analytics measurement, email delivery, spam prevention, and digital assistant functionality. These services are used only to publish and secure the site, respond to form submissions, and improve the user experience.

External links in blog posts or pages are governed by the privacy terms of the third-party site once you follow them. This site is not responsible for external sources' cookies, content, or later changes.

5. Cookies and local storage

The site may use cookies, localStorage, or similar browser storage for theme preference, interface state, digital assistant history, and analytics. You can delete or block cookies in your browser settings; some features may then work in a limited way.

6. Retention

Form emails are retained only as long as necessary to respond to the request and maintain reasonable records. Security and service logs may be retained for the providers' ordinary retention periods. Data that is no longer needed is deleted, anonymized, or access-restricted.

A copy of ADA conversation history remains in your browser's IndexedDB until you delete the relevant conversation or clear browser data. Message content is transferred to a third-party AI service provider to provide the service. Under the current configuration, conversation transcripts may be retained for two years. The site's “Delete conversation” action removes only the local browser copy and does not end the retention period within the service provider's systems.

7. Transfers and international processing

Hosting, analytics, email, and AI services may run on infrastructure outside Türkiye or your country. Technical data may therefore be processed internationally only to operate the site, secure it, respond to requests, and maintain service quality.

8. Your rights

Under KVKK and, where applicable, GDPR, you may have rights to access, information, correction, deletion, restriction, objection, and withdrawal of consent. You can submit requests through the contact page.

9. Security

The site uses HTTPS, server-side secret handling, form validation, spam checks, rate limits, and security headers. No internet transmission or storage method is absolutely secure; please do not submit unnecessary sensitive information through forms.

10. External links

Blog posts may link to arXiv, academic papers, GitHub, company documentation, or social platforms. Faik Enes Albayrak is not responsible for their content, privacy practices, cookies, or later changes.