Last updated: 21 July 2026

Privacy Policy

Last updated: 21 July 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data-protection law is: Prof. (Cyprus Aydin University) Dr. iur. Gülsün Ayhan Aygörmez, LL.M. (Bielefeld) trading under the name “Lex Via Institute” Cevizli Mahallesi Ulubey Sokak, Nursanlar 1 Plaza No. 4A, Floor 16 34865 Kartal / Istanbul Türkiye Email: aygoermez@lexvia.eu

2. General information on data processing

We process personal data only to the extent necessary to provide a functional, secure and user-friendly website and to communicate with interested parties and clients. Personal data means any information relating to an identified or identifiable natural person. Processing is carried out only where a legal basis under Article 6 (1) GDPR applies.

3. Provision and hosting of the website

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (“Vercel”). When the website is accessed, Vercel processes technical connection and access data required to deliver and secure the website.

IP address of the accessing device
date and time of the request
requested page or file
amount of data transferred
referrer URL, where transmitted
browser type and version
operating system
HTTP status code
host name or domain
request identifiers
technical error and security information

This processing serves to deliver the website, ensure its stability and security, diagnose errors and prevent misuse. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.

We use a Vercel Pro plan and have concluded a data processing agreement with Vercel pursuant to Article 28 GDPR. We do not use log drains. Runtime logs accessible to us are generally available for one day. Vercel may retain or otherwise process data for longer periods where this is required by contractual, statutory or security obligations.

Further information is available in Vercel’s Privacy Notice and Data Processing Addendum: https://vercel.com/legal/privacy-notice https://vercel.com/legal/dpa

4. Transfers of data to third countries

Because Vercel is established in the United States and operates infrastructure within and outside the European Economic Area, personal data may be transferred to third countries. Where applicable, Vercel relies on certification under the EU–US Data Privacy Framework. Otherwise, transfers are based in particular on the European Commission’s Standard Contractual Clauses pursuant to Article 46 (2) (c) GDPR and, where necessary, supplementary safeguards.

5. Contact by email

If you contact us by email, we process the data you provide, in particular your name, email address, the content of your message and any information supplied voluntarily, in order to handle and respond to your inquiry.

Where the inquiry concerns the initiation or performance of a contractual relationship, the legal basis is Article 6 (1) (b) GDPR. In all other cases, processing is based on Article 6 (1) (f) GDPR; our legitimate interest lies in responding appropriately to inquiries directed to us.

The data are deleted once the inquiry has been conclusively dealt with and storage is no longer required, unless statutory retention duties or other legitimate grounds require continued storage. Please do not send sensitive or confidential information by unencrypted email unless this is necessary and has been agreed with us.

6. Contact and newsletter forms

The contact and newsletter elements currently displayed on the website do not transmit or store personal data. No newsletter subscription is currently offered, and no form data are transferred to us. To contact us, please use only the email address stated above.

If functional contact or newsletter forms are activated in the future, this Privacy Policy will be updated before the relevant processing begins.

7. Cookies and similar technologies

This website currently does not use cookies that require consent. Nor are personal identifiers stored in local storage or session storage on the publicly accessible pages. A consent banner is therefore not currently required.

8. Analytics and audience measurement

We do not use Vercel Web Analytics, Vercel Speed Insights or any other analytics, tracking or audience-measurement service. We do not create user profiles and do not track visitors across websites.

9. Fonts, images and external content

Fonts and images are delivered locally or through our hosting infrastructure. In particular, no connection to Google Fonts is established. We currently do not embed external videos, maps or social-media plugins that automatically transmit visitor data to third parties.

10. Content management system and editorial area

We use Sanity as a content management system for editorial content. The public website retrieves this content on the server side; visitors’ browsers do not establish a direct connection to Sanity for this purpose.

The editorial area available at /studio is not public. Access requires authentication, and this area is not linked from the public website.

11. Recipients of personal data

Personal data are disclosed only where this is permitted by law. Potential categories of recipients include:

hosting and IT service providers
email and communications service providers
service providers engaged for maintenance and security
professional advisers subject to confidentiality obligations
public authorities and courts where disclosure is legally required

Processors are contractually bound in accordance with Article 28 GDPR where the statutory requirements are met.

12. Storage period

We store personal data only for as long as necessary for the respective purpose. Data are subsequently deleted unless statutory retention duties, the establishment, exercise or defence of legal claims, or another lawful ground requires continued storage.

13. Rights of data subjects

Subject to the statutory conditions, you have the following rights:

right of access under Article 15 GDPR
right to rectification under Article 16 GDPR
right to erasure under Article 17 GDPR
right to restriction of processing under Article 18 GDPR
right to data portability under Article 20 GDPR
right to object under Article 21 GDPR
right to withdraw consent at any time under Article 7 (3) GDPR

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To exercise your rights, please contact aygoermez@lexvia.eu.

14. Right to object

Where we process personal data on the basis of Article 6 (1) (f) GDPR, you have the right to object to the processing on grounds relating to your particular situation. We will then cease processing unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

15. Right to lodge a complaint with a supervisory authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority. You may in particular contact the supervisory authority for your habitual residence, place of work or the place of the alleged infringement.

16. Obligation to provide data

For a purely informational visit to the website, there is no statutory or contractual obligation to provide personal data. The technical connection data described above are, however, required in order to deliver the website. If you contact us, you must provide the data necessary to process your inquiry.

17. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

18. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or destruction. This website uses HTTPS/TLS encryption.

19. Updates to this Privacy Policy

We update this Privacy Policy where changes in the law, our services or the technologies used make this necessary. The version published on this website at the relevant time applies.