Introduction
Dear Interested Party, we wish to inform you that "European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data" (hereinafter "GDPR") provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we therefore inform you that:

Data controller
The data controller is Middle East Technical University (METU), as Coordinator of the European project 2025-1-TR01-KA220-VET-000358324 GREENFIT Green and Resilient Future Industrial Training.

Data categories
METU will process your personal data, such as: Data collected automatically. The computer systems and applications dedicated to the website and training platform's operation collect, during their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses and domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), and other parameters relating to the operating system, browser, and IT environment used by the user. This data is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to monitor its proper functioning. Providing this data is mandatory as it is directly related to the web browsing experience. Data provided voluntarily by the user. The voluntary and explicit sending of emails to the addresses indicated in the various access channels of this site does not require consent, and any completion of specifically designed forms entails the subsequent acquisition of the sender's/user's address and data, which are necessary to respond to requests and/or provide the requested service. Your voluntary sending of emails to our email addresses does not require further information or consent. Personal Data collected by the sites and applications, independently or through third parties, includes: Usage data, password, first name, last name, email address. Furthermore, all data necessary to provide the services covered by the contract between the User and the Data Controller are processed. Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be processed using physical and digital tools useful for providing the requested service (e.g., management and invoicing software, hosting, CMS, and other tools). Cookies. The site does not use third-party technical/profiling cookies, which may collect user browsing data. Providing this data is optional and requires free and informed consent. Cookies are used to analyze the site's effectiveness and make it easier and more intuitive over time. The data collected through cookies is used to make the browsing experience more enjoyable and efficient in the future, evaluating user behavior and adjusting content offerings based on their behavior. For more information, a dedicated cookie policy is available.

Source of personal data
The personal data held by METU is collected directly from the interested party. Purpose of data processing and legal basis: The legal basis for the processing of your data is your consent and is carried out for the following purposes: improving your web browsing experience and collecting visitor statistics.

Data recipients
Within the limits relevant to the processing purposes indicated, your data may be disclosed to partners, consulting firms, and private companies appointed as Data Processors by the Data Controller, or to comply with legal obligations or to fulfill your specific requests. Your data will not be disclosed in any way. The Data Processors and Persons in Charge of Data Processing are identified in the Privacy Policy, which is updated periodically.

Transfer of data abroad
The data collected is not transferred abroad.

Retention period
The collected data will be retained for a period of time no longer than is necessary to achieve the purposes for which they are processed (principle of storage limitation, art. 5, GDPR) or in accordance with the deadlines established by law. The obsolescence of the retained data in relation to the purposes for which they were collected is checked periodically.

Rights of the interested party
The data subject always has the right to request from the Data Controller access to their data, rectification or erasure of the same, restriction of processing, or the right to object to processing, to request data portability, or to withdraw consent to processing, exercising these and other rights provided by the GDPR by simply notifying the Data Controller. The data subject may also lodge a complaint with a supervisory authority.

Data processing methods
The personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations that govern the Data Controller's activities. The data will be processed using both computerized tools and paper-based media, as well as any other suitable media, in compliance with the appropriate security measures pursuant to Article 5, paragraph 1, letter F, of the GDPR.