Cooperation for a more resilient Black Sea region
Library Events Contact

The NAT-RES Project

Privacy and Personal Data

Explains how personal data is processed and protected within the NAT-RES Central Digital Hub.

Controller and contact

The NAT-RES Central Digital Hub operates under the coordination of Istanbul Technical University (ITU), the project Lead Partner and governance authority. Data-protection requests: kisiselveri@itu.edu.tr; Ayazağa Campus, 34469 Maslak, Istanbul, Türkiye.

Data and purposes

The public portal may process server logs, IP address, device/browser data, security events and consent preferences. The partner panel may additionally process identity, organisation, role, contact and profile data, support requests, uploaded files and audit history. Purposes include secure delivery, account and access management, project collaboration, support and publication workflows, and legal compliance.

Legal bases

Processing relies, as applicable, on Article 6 GDPR, Article 5 of Türkiye’s Law No. 6698 and relevant national law: contract, legal obligation, public task, legitimate interests or consent where required. Optional storage and external content are enabled only after a prior, freely given and withdrawable choice.

Recipients, transfers and retention

Data is shared only where necessary with authorised NAT-RES partners, contracted technical providers and competent authorities. Hosting, email, SMS, AI translation or external maps may involve processing in other countries; data minimisation, contractual safeguards and a valid transfer mechanism are required. Data is retained only for its purpose and applicable legal periods; the definitive retention schedule requires ITU approval before production.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or objection, portability, withdrawal of consent and complaint to a competent supervisory authority.

Pre-production legal review

This first notice provides technical transparency. Controller arrangements, exact retention periods, processor inventory and international-transfer mechanisms must be approved by ITU’s legal/data-protection function before it becomes the final legal notice.

Optional categories are off by default. You can change your choice from the footer at any time.