Personal Data Information Notice

1. Controller

This notice provides information in the context of Article 10 of Turkish Law No. 6698 (KVKK). Controllers: Nagihan Şirin and Sinan Şirin, DendroGeo project. Contact: security@dendrogeo.org. Interface hosting: GitHub Pages; authentication, database and file storage: Supabase.

2. Categories and collection

Name, email and optional institution are supplied through registration or sign-in. Fieldwork can supply geographic position, altitude, reported accuracy and optional tree photographs. Records also include measurement activity, approval status and audit information. Authentication infrastructure processes session and security information. National identity numbers, financial records, health records and biometric categories are not requested by the application.

3. Usage summaries

Daily aggregate page, referral, device and approximate-country categories are retained for up to 400 days without visitor/account/session identifiers or stored IP addresses in those aggregates. Country lookup uses transient server-side processing and a local database. New summaries respect Do Not Track and Global Privacy Control. These aggregates do not establish a person’s browsing history.

4. Purposes and legal bases

Processing supports account and permission management, field measurement storage, biomass/carbon calculation, park-level aggregation, moderation, audit, security and replies to data requests. The Turkish notice sets out the declared contractual, legitimate-interest, consent and legal-obligation bases. Permission for location and publication is addressed through the relevant application controls. This English companion does not introduce an additional processing purpose or replace the Turkish notice.

5. Recipients and international processing

Necessary infrastructure services are provided by Supabase, GitHub, Google sign-in and Cloudflare Turnstile; maps and datasets have their own providers. Some processing occurs outside Türkiye. Approved scientific observations can be made public under the stated data licence, while private account data and unpublished records remain access-controlled. Data is not sold, rented or marketed to third parties. Consult the Turkish notice for the declared transfer basis and withdrawal route.

6. Retention and rights

Account and measurement data is retained for the account/project purpose and handled through deletion or anonymization requests. Published scientific copies may remain within their disclosed versioned archive scope. You may request information about processing and recipients, correction, applicable erasure, notification to recipients, object to adverse exclusively automated decisions and seek compensation for unlawful processing under Article 11.

7. How to apply

Email security@dendrogeo.org with your name, registered email and request. The Turkish notice provides a response within 30 days, normally without charge; a charge may apply where permitted by the competent authority’s tariff. My Records also offers controls for your own measurements.

8. Further information

Allometric estimates are scientific calculations, not automated assessments of individuals. No advertising or tracking cookies or third-party analytics are used. The service is not directed at children under 13. The registration notice and actual consent/security records have a separate evidential role; translating this page does not create or amend consent.