Privacy Notice
Who is responsible
Dissertation Roadmap is run by Ebru Altınoğlu, based in Türkiye. Contact: dissertationroadmap@gmail.com
Because I am established in Türkiye, Turkish data protection law (KVKK, Law No. 6698) applies to all processing described here. Where you are in the EU or the UK, the GDPR and UK GDPR apply in parallel, and this notice is written to meet their requirements.
What I collect, and how
Only what you give me, collected electronically:
Site forms — your name, email address and the stage you have reached in your thesis.
Email correspondence — your name, email address and whatever you tell me about your work.
Payments — your name, the amount and date, and the reference on the transfer, as they appear in my bank records.
Introductory form after enrolling — your degree level, field, the country of your institution, your thesis stage and any notes you write.
Sessions — your name, email address and attendance. If your camera and microphone are on, your voice and image appear in the session recording.
This website — data collected through cookies, set out in the Cookie Policy.
Why, and on what legal basis
Handling your enquiry and communicating with you, running the seminar and coaching sessions, tracking payments and issuing a receipt on request, and sending you a recording you missed: performance of a contract, or steps taken before entering one — Article 6(1)(b).
Keeping the records required by Turkish tax law: legal obligation — Article 6(1)(c).
Sending announcement emails about seminars and open sessions, and including your voice and image in a session recording: consent — Article 6(1)(a).
Where processing rests on consent, you can withdraw it at any time; this does not affect processing carried out before you withdrew. You can keep your camera and microphone off during sessions.
Providing your data is not a statutory requirement, but without your name and email I cannot enrol you or send you what you have asked for.
Who else processes it
Wix hosts the website and its forms. Zoom/Google Meet runs the online sessions. Google provides site statistics. Banks process payments. No one else receives your data; it is not sold and not used for marketing by third parties.
Where it is processed
I work in Türkiye, so your data is processed there. Türkiye is not covered by an EU adequacy decision. Under European Data Protection Board guidance, personal data you give me directly is not treated as a "transfer" requiring a separate safeguard — but you should know where the data goes. The providers listed above may also store data in the EU, the United States or elsewhere, under their own terms.
How long it is kept
-
Payment and expense records are kept for five years, as required by Turkish tax law.
-
Session recordings are deleted within 30 days of the end of the block.
-
Forms and correspondence are deleted within two years of the end of the year in which our working relationship ends.
-
Your details on the announcement list are deleted when you withdraw consent.
Your rights
You have the right to access your data; to have inaccurate data corrected; to have it erased; to restrict processing; to object to processing; to receive the data you gave me in a portable format; and to withdraw consent at any time.
If you are in the EU or the UK, you also have the right to lodge a complaint with your national data protection authority. In Türkiye, you may apply to the Personal Data Protection Authority (KVKK) after first raising the matter with me.
No decisions affecting you are made by automated means, and no profiling takes place.
How to exercise your rights
Write to dissertationroadmap@gmail.com, ideally from an address you have used with me before. Tell me your name, what you are asking for, and how to reach you. I will respond within 30 days. If you would rather write by post, email me and I will send you a postal address.
Published: 28 September 2026