Privacy Policy

Last updated: 10 August 2026

1. About this Privacy Policy

This Privacy Policy explains how personal data are collected, used, stored and protected through the ENFiber website at https://enfiber.eu and through ENFiber COST Action CA24111 activities initiated through this website. It covers personal data processed by ENFiber outside the official e-COST platform, including website usage data, communications, event and activity applications, and information published as part of the Action’s scientific, networking and dissemination activities. This Privacy Policy does not govern the processing carried out independently by the COST Association through e-COST or by third-party websites and services that you choose to visit.

2. Data Controller

The data controller responsible for the processing described in this Privacy Policy is:

Middle East Technical University (METU), Department of Food Engineering

ENFiber COST Action CA24111

Üniversiteler Mahallesi, Dumlupınar Bulvarı No:1 06800 Çankaya, Ankara Türkiye

Email: enfiber@metu.edu.tr

Website: https://enfiber.eu

For processing carried out directly through e-COST, the COST Association acts as the relevant data controller. Further information is available in the COST Association Privacy Policy.

3. Personal Data We May Process

Depending on how you interact with ENFiber, we may process the following categories of personal data.

3.1 Website and technical data

When you visit the website, certain technical information may be processed automatically, including:

  • IP address;
  • browser type and version;
  • device type and operating system;
  • referring website;
  • pages visited and actions performed;
  • date, time and duration of visits;
  • approximate geographical location;
  • server and security log information; and
  • cookie and consent preferences.

These data are used to operate, secure and improve the website.

3.2 Analytics data

If you consent to statistics cookies, Google Analytics may collect information such as:

  • session and visitor statistics;
  • pages viewed and navigation patterns;
  • approximate geographical location;
  • browser and device information;
  • referral sources; and
  • interactions with website content.

We do not intentionally send names, email addresses or other directly identifying information to Google Analytics.

3.3 Communications

If you contact ENFiber by email, we may process:

  • your name;
  • email address;
  • professional title;
  • institutional affiliation;
  • country;
  • the content of your message;
  • attachments you provide; and
  • subsequent correspondence.

Please do not include sensitive personal data in general enquiries unless this is specifically requested and necessary for the relevant purpose.

3.4 Applications and participation in ENFiber activities

When you apply for or participate in an ENFiber event, Training School, meeting, grant, mobility opportunity, Working Group activity or other Action-related activity outside e-COST, we may process information such as:

  • name and contact details;
  • institution, position and country;
  • academic or professional background;
  • research interests and expertise;
  • curriculum vitae and motivation information;
  • application and evaluation information;
  • attendance and participation information;
  • travel, accommodation or reimbursement information where required;
  • accessibility, dietary or other organisational requirements voluntarily provided by you; and
  • photographs, recordings or other event-related materials, where applicable.

The relevant application form or activity notice may provide additional and more specific information about that processing.

3.5 Information published on the website

For governance, scientific communication, transparency and dissemination purposes, the website may publish:

  • names and professional titles;
  • institutional affiliations and countries;
  • ENFiber or COST Action roles;
  • fields of expertise;
  • professional contact information where appropriate;
  • authorship and bibliographic information;
  • photographs, audio or video recordings; and
  • information about participation in ENFiber activities.

Where information goes beyond data already officially published by COST or the individual’s institution, consent will be obtained when required.

4. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate legal basis under applicable data protection law, including the General Data Protection Regulation (“GDPR”) and Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”).

Personal data may be processed for the following purposes and legal bases:

4.1 Operating and securing the website

Technical and security data may be processed to:

  • deliver website content;
  • maintain website functionality;
  • prevent abuse, fraud and unauthorised access;
  • diagnose technical problems; and
  • protect the website and its users.

This processing is based on our legitimate interest in maintaining a secure and reliable website, insofar as this interest is not overridden by your rights and freedoms, and on compliance with applicable legal obligations.

4.2 Managing cookie preferences and website analytics

Google Analytics and non-essential statistics cookies are used on the basis of your consent. You may refuse or withdraw this consent at any time by selecting the Cookie preferences button displayed at the bottom of the website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4.3 Responding to communications

Personal data provided by email may be processed to:

  • respond to your enquiry;
  • provide requested information;
  • manage professional or scientific correspondence;
  • take steps at your request before participation in an activity; and
  • maintain necessary administrative records.

Depending on the nature of the communication, processing may be based on your request, our legitimate interests, the performance of a task in the public interest, or compliance with a legal obligation.

4.4 Managing ENFiber activities

Application and participation data may be processed to:

  • evaluate applications;
  • select participants;
  • organise events and scientific activities;
  • communicate with applicants and participants;
  • administer grants, mobility activities or reimbursements;
  • fulfil COST reporting and audit requirements; and
  • document and disseminate the outcomes of the Action.

The applicable legal basis may include consent, steps taken at your request, performance of a task in the public interest, legitimate interests connected with managing the Action, or compliance with legal and contractual obligations.

4.5 Publishing professional and activity-related information

Professional profiles, Action roles, scientific outputs and activity-related material may be published to:

  • explain ENFiber’s governance and network;
  • facilitate scientific cooperation;
  • communicate Action activities and results;
  • acknowledge contributors; and
  • meet transparency and dissemination requirements.

Where required, publication is based on consent. You may withdraw consent for future use by contacting us, subject to applicable legal, reporting, archiving and freedom-of-information requirements.

5. Cookies and Consent Management

You can change or withdraw your preferences at any time by selecting the Cookie preferences button displayed at the bottom of the website. Consent settings are also available through our Cookie Policy. You may additionally delete cookies using your browser settings.

6. Google Analytics and Google Site Kit

The website uses Google Site Kit to integrate and administer Google Analytics.

Google Analytics helps us understand how visitors use the website so that we can evaluate performance and improve content and navigation. Analytics is configured for statistics purposes, and non-essential Analytics cookies are placed only after the required consent has been obtained.

Google generally processes Analytics data on behalf of Analytics customers under its applicable data processing terms. Information about Google Analytics data protection practices is available on the Google Analytics data safeguards page.

The Google Analytics account used for ENFiber has the Google products and services data-sharing setting enabled. Where Google uses data shared under this setting to improve its own products and services, Google may act as an independent controller for that processing under the Google Measurement Controller-Controller Data Protection Terms.

Further information is available through:

  • Google Analytics Data Sharing Settings;
  • Google Privacy Policy; and
  • Google Data Transfer Frameworks.

ENFiber does not use Google Analytics data to make decisions producing legal or similarly significant effects about individual visitors.

6. Google Maps

Some event and location pages may contain embedded Google Maps content. Google Maps is blocked by default and is loaded only after you provide the relevant consent through the website’s consent banner or the Cookie preferences button.

When Google Maps is enabled, Google may receive technical information such as your IP address, browser and device information, the page from which the map is accessed, and interactions with the embedded map. Google may also use cookies or similar technologies and may process data outside Türkiye or the European Economic Area in accordance with its applicable terms and privacy policy.

You may refuse or withdraw consent at any time by selecting the Cookie preferences button displayed at the bottom of the website. If consent is not provided or is withdrawn, the embedded map will remain blocked, but the relevant event and location information will continue to be available on the page. Further information is available in the Google Privacy Policy.

7. External Google Forms

Some ENFiber event, Training School or activity pages may link to Google Forms hosted outside the ENFiber website.

If an ENFiber form collects personal data for an Action activity, the information entered in the form may be processed by METU/ENFiber for the purposes stated in the form or related activity notice. Google provides the technical form service and may process service-related information under its applicable terms and privacy policy.

The data requested may vary according to the activity. Before submitting a form, you should review the information and privacy notice provided with that form.

Submitting an external Google Form is voluntary. However, information identified as mandatory may be necessary to evaluate or administer your application.

8. e-COST and COST Association Services

The ENFiber website contains links to e-COST and other COST Association services.

When you follow these links, you leave the ENFiber website. Personal data submitted directly to e-COST are processed under the responsibility of the COST Association and are subject to the applicable e-COST or COST Association privacy notice.

ENFiber does not control the cookies, security settings or independent processing practices of the e-COST platform.

For further information, see the COST Association Privacy Policy.

9. Recipients of Personal Data

Where necessary for the purposes described in this Privacy Policy, personal data may be accessible to or shared with:

  • authorised METU personnel supporting ENFiber;
  • authorised ENFiber Action participants and governance bodies;
  • event organisers, host institutions, evaluators or selection committees;
  • the Grant Holder and other organisations involved in administering the relevant COST activity;
  • the COST Association, where required for Action administration, reporting, grants or audits;
  • website hosting, maintenance, security and technical service providers;
  • Google and its relevant affiliates in connection with Google Analytics, Site Kit, Google Maps or Google Forms; and
  • public authorities, regulators, courts or other parties where disclosure is required by law.

Access is limited to persons who need the information for the relevant purpose. We do not sell personal data or disclose them to third parties for their own commercial marketing purposes.

10. International Data Transfers

ENFiber is administered by METU in Türkiye and is part of a European research and innovation network. Personal data may therefore be processed in Türkiye, the European Economic Area or other countries in which relevant service providers or Action partners operate.

Some service providers, including Google, may process information outside Türkiye or the European Economic Area.

Where international transfers are subject to specific legal requirements, the transfer will be carried out using an applicable lawful mechanism, such as:

  • an adequacy decision;
  • standard contractual clauses;
  • contractual and organisational safeguards; or
  • another transfer mechanism permitted by applicable data protection law.

Information about Google’s transfer mechanisms is available on the Google Data Transfer Frameworks page.

11. Data Retention

Personal data are retained only for as long as necessary for the purpose for which they were collected and for any applicable legal, contractual, reporting, audit, security or institutional recordkeeping requirements.

In particular:

  • cookie preferences are retained for the periods specified in the Cookie Policy;
  • Google Analytics user-level and event-level data are retained according to the retention settings configured for the Analytics property, while aggregated reports may be retained for longer;
  • email correspondence is retained until the enquiry and necessary follow-up have been completed and for any further period required by institutional or legal obligations;
  • application and participation records are retained for the period required to administer, report, audit and document the relevant Action activity;
  • financial or grant-related records may be retained for the periods required by COST, contractual, audit and legal rules;
  • public scientific, governance and dissemination materials may remain available as part of the Action’s institutional and scientific record, subject to applicable rights and legal requirements; and
  • technical and security logs are retained only for the period necessary to maintain security, investigate incidents and comply with legal obligations.

Data that are no longer required will be deleted, anonymised or securely archived, as appropriate.

12. Data Security

METU and ENFiber apply reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • unlawful processing;
  • accidental loss;
  • alteration;
  • destruction; and
  • unauthorised disclosure.

Access to personal data is limited according to role and operational need. Nevertheless, no online service or method of electronic transmission can be guaranteed to be completely secure.

13. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

  • receive information about the processing of your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your data;
  • request restriction of processing;
  • object to processing based on legitimate interests or public-interest grounds;
  • receive certain data in a structured, commonly used and machine-readable format;
  • request transmission of eligible data to another controller;
  • withdraw consent at any time;
  • object to direct marketing;
  • lodge a complaint with a competent data protection authority; and
  • not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

These rights are not absolute and may be limited where continued processing is required by law, for public-interest tasks, institutional archiving, reporting, audit requirements, or the establishment, exercise or defence of legal claims. To exercise your rights concerning processing by METU/ENFiber, contact: enfiber@metu.edu.tr

We may request information necessary to verify your identity and locate the relevant data. Requests will be handled within the time limits required by applicable law. Information about METU’s personal data protection framework is available on the METU KVKK website. If the request concerns processing carried out independently through e-COST, please refer to the COST Association Privacy Policy or contact the COST Association at privacy@cost.eu. Individuals in the European Economic Area may also lodge a complaint with the data protection authority in their country of residence, place of work or place of the alleged infringement.

14. Automated Decision-Making

ENFiber does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

Applications for ENFiber activities may be assessed against stated eligibility or selection criteria, but substantive selection decisions are made or reviewed by authorised persons.

15. External Websites and Services

The website may contain links to third-party websites, maps, calendars, institutional pages, publications and other external services.

When you follow an external link, the relevant third party may collect and process information under its own privacy policy. ENFiber is not responsible for the content, security or privacy practices of independently operated external services.

We encourage you to review the privacy information provided by those services before submitting personal data.

16. Children’s Data

The ENFiber website and Action activities are primarily intended for researchers, professionals, students, institutions and other adult stakeholders.

We do not knowingly collect personal data from children through the general website. Where an activity may involve a participant who is legally considered a child, the necessary information and consent arrangements will be established separately in accordance with applicable law.

17. Changes to This Privacy Policy

This Privacy Policy may be updated when:

  • website functions change;
  • new services are introduced;
  • data-processing practices change; or
  • legal or regulatory requirements are updated.

The revised version will be published on this page with an updated revision date. Material changes may also be communicated through the website or another appropriate channel.

18. Contact

For questions, requests or concerns about this Privacy Policy or ENFiber’s processing of personal data, please contact:

Middle East Technical University (METU)

Department of Food Engineering

ENFiber COST Action CA24111

Üniversiteler Mahallesi, Dumlupınar Bulvarı No:1

06800 Çankaya, Ankara Türkiye

Email: enfiber@metu.edu.tr

Website: https://enfiber.eu

Scroll to Top