01Data and purposes
We process contact details, citizenship and residence, academic history, communications and, only when needed, identity, financial, visa or residence documents. We use them to answer enquiries, assess a case, prepare and perform an agreed service, manage payments and comply with legal obligations. Providing initial contact data is voluntary, but without it we cannot reply. Data and documents specifically requested for an engagement are necessary to assess or perform it; without them we may be unable to proceed. We do not use automated decision-making or profiling. Please do not send more data than requested.
02Legal bases
The bases are steps requested before a contract and performance of the contract (GDPR Article 6(1)(b)), legal obligations (6(1)(c)) and legitimate interests in organising requests, securing communications, preventing abuse and defending legal claims (6(1)(f)), balanced against your rights. Special-category data are requested only when strictly necessary and on an applicable legal basis, including explicit consent where required.
03Who may receive data
Data may be processed by essential hosting, email, storage and messaging providers. They may also be shared with universities, public authorities or independent professionals only at your documented request or on your documented instructions, and only to the extent necessary for the requested procedure. Each authority and external professional acts under its own legal duties. We do not sell data.
04International services
WhatsApp/Meta, Google/Gmail, the hosting service and other technical providers actually used may process data outside the European Economic Area. Before operational use, we verify the receiving entity, country, role, contractual terms, subprocessors and the applicable transfer safeguard. Details and a copy of the relevant safeguard are available from us on request. Use email for case documents and do not send passports, bank records or other sensitive material through messaging services.
05Retention and security
These are maximum periods and data are deleted earlier when no longer needed. Enquiries that do not become an engagement are kept for up to 6 months from the last contact; operational working copies for up to 12 months after closure; the essential contractual file and tax records for up to 10 years. After that, only the subset strictly necessary for an actually pending dispute is retained under a separate documented legal hold. The website has no forms for submitting enquiries or documents. Contact with Fidan takes place directly by email or WhatsApp; client files are not stored on the website.
06Your rights
You may request access, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests. Consent may be withdrawn at any time without affecting earlier processing. Write to hieristfidan@gmail.com. You may complain to the Italian Data Protection Authority (garanteprivacy.it). If you are under 18, a parent or guardian must be involved where required.
07Website data
A technical review on 3 September 2026 found no advertising or profiling cookies and no separate analytics SDK in the site code. The host may process IP addresses and technical logs needed for security and delivery and may provide aggregate traffic metrics. The Cassino image is served locally by this site; external links are ordinary clickable links, not embedded content, and the destination is contacted only if you choose to open them. We will repeat the review and update this notice before adding newsletters, web forms or other non-essential tracking tools.