Privacy Policy & GDPR

1. Introduction

At HANZI Nutrition and Diet Counseling Center, the security of your personal data is extremely important to us. This privacy policy explains how your personal data is collected, used, stored, and protected.

This policy has been prepared in accordance with the European Union General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

2. Data Controller

3. Collected Personal Data

When you use our website, we may collect the following personal data:

4. Purpose of Data Usage

Collected personal data is used for the following purposes:

• Creating and managing appointments
• Preparing personalized nutrition programs
• Communication and information
• Improving service quality
• Enhancing website performance
• Fulfilling legal obligations

5. Data Storage and Security

Your personal data:

• Is stored encrypted in Firebase secure database
• Is transmitted through SSL/TLS certificate protected connections
• Can only be accessed by authorized personnel
• Is subject to regular security audits
• Is retained for the legal retention period

6. Data Sharing

Your personal data is not shared with third parties except in the following cases:

• When you have given explicit consent
• When required by legal obligations
• With service providers (Firebase, Google Analytics) on a limited basis
• With Google Gemini AI (only when you opt in to AI meal-photo analysis): the meal photo is sent for food identification. Google does not use this data for training under their paid API tier. Data is retained for up to 60 days for abuse-monitoring only, then deleted.
• With USDA FoodData Central (a U.S. Department of Agriculture public API): only the food names identified by AI are sent to look up nutrition information. No personal data is transmitted.

7. Your Rights (GDPR & KVKK)

You have the following rights regarding your personal data:

• Right to information: Learn which of your data is being processed
• Right of access: Request access to your data
• Right to rectification: Request correction of incorrect data
• Right to erasure: Request deletion of your data
• Right to object: Object to data processing
• Data portability: Transfer your data to another service provider
• Right to complain: Appeal to data protection authorities

8. Cookies

Our website uses the following cookies:

• Essential Cookies: Necessary for the website to function
• Analytics Cookies: Google Analytics (anonymous usage statistics)
• Preference Cookies: Remembering user preferences like language selection

You can manage or delete cookies from your browser settings.

9. Third-Party Services

Our website uses the following third-party services:

• Google Analytics: Website traffic analysis
• Firebase: Data storage and hosting
• Font Awesome & Google Fonts: Visual improvements

These services have their own privacy policies.

10. Children's Privacy

Our website does not knowingly collect data from individuals under 18 years of age. Clients under 18 are not accepted without parental/guardian consent.

11. Policy Updates

This privacy policy may be updated from time to time. In case of significant changes, you will be informed via email. You can check the latest version from this page.

12. Data Breach Notification

In case of any data breach:

• Relevant data protection authorities are notified within 72 hours
• Affected individuals are immediately informed
• Necessary measures are taken