KVKK CLARIFICATION TEXT Pursuant to Article 10 of the Personal Data Protection Law No. 6698 ("KVKK"), the following information is provided by Ofi Teknoloji A.Ş. ("Company"), acting as the data controller, regarding the processing of your personal data within the scope of the UmrahAI application and related services ("Application").
Data Controller Ofi Teknoloji A.Ş. · Address: Pınarbaşı Mah. Hürriyet Cad. Antalya Teknokent Uluğbey AR-GE 2 Binası No: 3 A İç Kapı No: B190, Konyaaltı / Antalya · MERSİS: 0634116739800001 · Contact: [email protected]
Your Personal Data Being Processed Category Example data Identity Name-surname, date of birth, gender, nationality; passport number, validity date, and T.R. Identity Number (provided via your agency as part of your tour registration) Contact Phone number (serves as your account key), e-mail address Health (special category) Blood type, special needs and dietary notes you have reported, content of emergency (SOS) notifications, emergency contact information Religion (special category) Sect preference selected in the Application; questions directed to the AI assistant may contain religious content Location Live location sharing, group/convoy location, precise GPS records during the automatic Tawaf counter, locations saved by you Voice Temporary processing of your voice during live translation and voice assistant usage (no permanent voice recording is kept) Image Camera image is processed on the device during the "Explore with Camera" feature; ...are not sent to our servers and are not recorded. Transaction security: IP address, device and application information, log data Usage and license: In-app activity, license and purchase status
Purposes of Processing Your personal data is processed for the following purposes: creating and managing your account; providing tour program and group coordination services; operating live streaming and translation features; providing the AI assistant service; ensuring security and preventing misuse; addressing support requests; fulfilling legal obligations; and—subject to your explicit consent—conducting service improvement analyses.
Legal Grounds The processing of your data is based on the following legal grounds: necessity for the establishment and performance of a contract (KVKK Art. 5/2-c); fulfillment of a legal obligation (Art. 5/2-ç); and legitimate interests (Art. 5/2-f; security and record-keeping), provided that your fundamental rights and freedoms are not infringed upon. Special categories of personal data, such as health and religious data, are processed solely based on the explicit consent you provide via separate screens; if you do not provide explicit consent, only the features requiring such data will be unavailable, while other parts of the Application may continue to be used. The sending of commercial electronic messages is subject to your separate consent.
Transfer Your data is transferred domestically to electronic communication service providers for the transmission of text messages and verification codes, and to your agency and tour guide as part of your tour registration; it is also transferred abroad to enable the provision of the service. Your data is hosted in European Union (Netherlands) data centers; service-specific overseas providers are utilized for certain services. Additionally, data transfers are made to service providers based abroad for artificial intelligence, mapping, email delivery, and error reporting services, within the framework of the mechanisms stipulated in Article 9 of the KVKK (Personal Data Protection Law). You can access the current list of sub-service providers at https://umrahai.ai/yasal/alt-isleyenler.
Collection Method Your data is collected electronically via the Application and the web, using automated and partially automated means. Certain information regarding your tour registration is entered by your agency; your agency is responsible for fulfilling its own obligation to inform you regarding this information. The account holder must be 18 years of age or older. Individuals under the age of 18 cannot open their own accounts; they are recorded as child registrations subject to parental/guardian consent, and no licenses are assigned to child registrations.
Retention Your data is retained for the duration necessary for the processing purposes and for the statutory limitation periods; these periods are defined on a category basis in our Retention and Disposal Policy. When you delete your account, your data is deleted, destroyed, or anonymized, subject to statutory retention obligations. 8. Your Rights Under Article 11 of the KVKK You have the right to learn whether your personal data is being processed; to request information regarding such processing; to learn the purpose of the processing and whether the data is being used in accordance with that purpose; to know the third parties to whom the data is transferred domestically or abroad; to request the correction of the data if it is incomplete or incorrectly processed; to request the deletion or destruction of the data within the framework of Article 7 of the KVKK; to request that these actions be notified to the third parties to whom the data was transferred; to object to any outcome adverse to you resulting from analysis performed exclusively by automated systems; and to claim compensation for damages incurred due to unlawful processing.
Application You may submit requests regarding your rights via the form at https://umrahai.ai/kvkk-basvuru, by sending an e-mail to [email protected], or by mail to Pınarbaşı Mah. Hürriyet Cad. Antalya Teknokent U