Privacy and Personal Data Protection

Same text as in the app.

GELSENE PERSONAL DATA PROTECTION NOTICE

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the EU General Data Protection Regulation ("GDPR"), your personal data is processed by the person/entity operating the Gelsene app, acting as data controller, as described below.

1. Data Controller and Contact

The data controller is the person/entity operating the Gelsene app. You can send requests regarding your rights to gelseneco01@gmail.com.

2. Personal Data Processed

• Identity and contact information: Name, email address
• Demographic information: Gender, date of birth
• Location data: Real-time location shared when creating/joining an event
• Visual data: Profile photo, event photos
• Communication content: In-app chat and messaging data
• Security/transaction data: Device/app usage logs, push notification token
• Ad measurement data: Device advertising ID (IDFA/GAID) and app events (such as install, registration completion, event creation/joining)

Providing your name, email, date of birth and gender is mandatory to create an account and use the app's core features; an account cannot be created without them. Profile photo, bio and location sharing are optional, though some features (such as showing nearby events) require location permission.

3. Purposes of Processing

• Creating and managing your account
• Displaying nearby events and matching you with relevant events
• Enabling communication between users and event coordination
• Ensuring app security and preventing abuse (spam, harassment, etc.)
• Fulfilling legal obligations

4. Legal Basis

Your personal data is processed under KVKK Art. 5/2 and GDPR Art. 6 on the basis of contract performance and legitimate interest; data requiring explicit consent, such as location data, is processed based on the explicit consent obtained under the separate Explicit Consent Text. The app does not perform automated decision-making or profiling on your data.

5. Retention Period

Your personal data is retained for as long as your account is active. When you delete your account, your data is permanently deleted or anonymized from our servers after a 30-day grace period. You can cancel the deletion by logging back in during this period.

To delete your account: open the Profile tab in the Gelsene app → tap "Delete account" → confirm with "Delete my account". If you cannot access the app, email gelseneco01@gmail.com from your registered address to request deletion.

6. Transfers

Your personal data may be shared with hosting/infrastructure providers based abroad (e.g. Supabase Inc.) as necessary to provide the service. Such transfers take place to the extent these providers implement appropriate safeguards, such as Standard Contractual Clauses (SCCs).

For ad measurement purposes, your device advertising ID and app events (app install, registration completion, event creation/joining) are shared with Meta Platforms Ireland Ltd. and Meta Platforms, Inc. This sharing takes place on iOS only if you grant App Tracking Transparency permission, and on Android only if the advertising ID permission is enabled in your device settings; this data is transferred abroad. You can turn off advertising ID access in your device settings at any time. The Meta SDK is not used for Facebook Login and does not access information from your Facebook account.

7. Your Rights

Under KVKK Art. 11 and GDPR Art. 15-22, you have the right to: learn whether your data is being processed; request information about such processing; learn the purpose of processing; know the third parties to whom your data is transferred; request correction of incomplete/inaccurate data; request erasure/destruction of your data; request restriction of processing; request that your data be transferred to you or another controller in a portable format; object to processing; and claim compensation for damages.

You can reach us at gelseneco01@gmail.com to exercise these rights. If you are not satisfied with the outcome of your request, you retain the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu), or, if you are in the EU/UK, with the competent data protection authority in your country of residence.

GELSENE EXPLICIT CONSENT TEXT

As explained in the Personal Data Protection Notice, the following data processing activities are based on your explicit consent. By approving this text, you confirm your explicit consent to:

• The processing of your location data in order to show you nearby events and to share your location with other participants (limited to approved participants and the event creator) when creating/joining an event,
• The processing of your notification/push token so that notifications such as friend requests, messages, event invitations and join requests can be delivered to your device via push notification,
• The processing of your profile photo and event photos to be shared with the approved participants of the relevant event.

You may withdraw this consent at any time by disabling location/notification permissions in your device settings or by deleting your account. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal. For questions about your consent, you can reach us at gelseneco01@gmail.com.