Privacy Policy.
Last updated: 30 September 2026
This privacy policy explains what personal data is collected when you visit www.volkanavsar.com, why it is collected, how it is used and what rights you have. This is a personal website, and I try to collect as little data as possible.
1. Who is responsible for your data
The data controller for this website is:
Volkan Avsar
Prague, Czech Republic
Email: volkanavsar@volkanavsar.com
Because I am based in the European Union, personal data on this website is processed in accordance with the EU General Data Protection Regulation (GDPR).
2. What data is collected and why
Contact form
When you send a message through the contact form, I receive your name, email address and message. I use this information only to reply to you. Messages are delivered to my mailbox by email and are not sold or shared for marketing. Legal basis: your request and my legitimate interest in responding to it (Art. 6(1)(b) and (f) GDPR).
Blog comments
When you leave a comment, the name, email address and website you enter are stored, together with your IP address and browser user agent, to help detect spam. Your comment and name are shown publicly; your email address is never published. An anonymized string created from your email address (a hash) may be sent to the Gravatar service to check whether you have a profile picture there; see the Automattic privacy policy. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Server and security logs
Like every website, my hosting server automatically records technical data such as your IP address, the date and time of your visit, the pages requested and your browser type. A security service on the server uses this data to block attacks and malicious traffic. These logs are used only for security and troubleshooting and are deleted automatically after a short period. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Website analytics
I use Google Analytics (Google Ireland Limited) to understand how many people visit the site and which pages they read. Google Analytics uses cookies and collects information such as the pages you visit, approximate location, device and browser, in pseudonymized form. I do not use this data to identify you. You can prevent Google Analytics from collecting data by blocking cookies in your browser or by installing the Google Analytics opt-out browser add-on. More information: Google Privacy Policy.
Spam protection (Google reCAPTCHA)
To protect the contact form and comments from spam and abuse, this site uses Google reCAPTCHA. reCAPTCHA analyzes information such as your IP address, mouse movements and browser details to tell humans from bots, and this data is sent to Google. See the Google Privacy Policy and Terms of Service. Legal basis: legitimate interest in protecting the website (Art. 6(1)(f) GDPR).
Fonts
Some of the fonts used on this site may be loaded from Google Fonts. When this happens, your browser connects to Google’s servers, which can see your IP address.
Performance and caching
The site uses LiteSpeed Cache to load faster. Its optimization service (QUIC.cloud) processes the site’s own files, such as images and style sheets, but does not receive personal data about visitors.
3. Cookies
Cookies are small text files stored in your browser. This site uses the following:
| Cookie | Purpose | Duration |
|---|
Comment cookies (comment_author_*) | Remember your name and email if you choose to when commenting | 1 year |
Cache cookies (_lscache_vary) | Serve the correct cached version of pages | Session |
Google Analytics (_ga, _ga_*) | Count visits and measure how the site is used | Up to 2 years |
Google reCAPTCHA (_GRECAPTCHA) | Spam and bot protection | Up to 6 months |
| WordPress login cookies | Used only when the site administrator logs in | Session / up to 14 days |
You can delete or block cookies at any time in your browser settings. Blocking some cookies may affect how the site works, for example the contact form’s spam protection.
4. Embedded content and external links
Blog posts may include embedded content such as videos, PDF files or images. Embedded content from other websites behaves exactly as if you had visited that website, which may collect data about you, use cookies and track your interaction with the embedded content. The site also links to external websites such as LinkedIn and the Fortinet Community. I am not responsible for the privacy practices of those websites.
5. Who your data is shared with
I do not sell, rent or trade your personal data. Data is shared only with service providers that are needed to run this website:
- my web hosting provider (hosting, server logs and security);
- Google (Analytics, reCAPTCHA and fonts);
- my email provider (to deliver contact form messages);
- Automattic / Gravatar (profile pictures for comments).
Some of these providers, such as Google, may process data outside the European Economic Area. In those cases, transfers are protected by appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
6. How long your data is kept
- Contact form messages: for as long as needed to handle your request and any follow-up correspondence.
- Comments: kept indefinitely so that follow-up comments can be recognized and approved automatically, unless you ask me to delete them.
- Analytics data: kept for up to 14 months, after which it is deleted automatically.
- Server and security logs: deleted automatically after a short period.
7. Your rights
Under the GDPR, you have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have your data deleted (“right to be forgotten”);
- restrict or object to the processing of your data;
- receive your data in a portable format;
- withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, email me at volkanavsar@volkanavsar.com. I will respond within one month. You also have the right to lodge a complaint with a data protection authority; in the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
8. Security
This site is served only over an encrypted HTTPS connection and is protected by a server-side security service and regular software updates. No method of transmission over the internet is completely secure, but I take reasonable measures to protect your data.
9. Children
This website is not directed at children under 16, and I do not knowingly collect personal data from them.
10. Changes to this policy
I may update this privacy policy from time to time, for example when I add new features or services to the site. The date at the top of this page shows when it was last updated.
11. Contact
If you have any questions about this privacy policy or how your data is handled, please contact me at volkanavsar@volkanavsar.com.
