DüConnect Mobile Application GDPR Information Text

1. INTRODUCTION
This Privacy Notice has been prepared by DüConnect Mobile Application ("Data Controller"), acting as the data controller, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data ("Law"), to inform users about the processing of personal data.

As the Data Controller, we take utmost care in the protection, processing, and security of personal data. In this context, your personal data is processed in accordance with the Law and relevant legislation.

2. PURPOSES OF PROCESSING PERSONAL DATA
Your collected personal data is processed for the following purposes, within the framework of the conditions specified in Articles 5 and 6 of the Law:
- Completing user registration processes,
- Providing customer support services,
- Security and fraud prevention activities,
- Marketing, campaign and information activities,
- User experience improvement and analysis studies,
- Fulfilling legal obligations.

3. PERSONAL DATA PROCESSED
- First and last name,
- Email address,
- Phone number,
- Address information,
- IP address, device information, cookie data,
- Location information (within the scope of mobile permissions),
- Posts and photos shared by the user on the application.

4. SHARING AND TRANSFERRING PERSONAL DATA
Your personal data may be shared with the following parties in accordance with Articles 8 and 9 of the Law:
- Payment providers,
- Business partners and service providers,
- Advertising providers,
- Legally authorized institutions and organizations.
Necessary technical and administrative measures are taken when your data is shared.

5. METHOD OF COLLECTING PERSONAL DATA AND LEGAL BASIS
Your personal data is obtained through various means including membership registration, application usage, mobile permissions, cookies, and electronic communication channels;
- Establishment or performance of the contract,
- Fulfillment of legal obligations,
- Protection of legitimate interests,
- Data is processed based on legal grounds, such as obtaining explicit consent for marketing and campaign activities.

6. RETENTION PERIOD OF PERSONAL DATA
Your personal data is stored for the legally mandated retention periods and will be destroyed within a maximum of 2 years after your account deletion request.

7. USER RIGHTS
According to Article 11 of the Law, as data subjects, you have the following rights:
1. To find out whether your personal data is being processed,
2. Requesting information regarding the processing of personal data,
3. To learn the purpose of processing personal data and whether it is being used in accordance with its purpose.
4. Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
5. Requesting the correction of personal data if it has been processed incompletely or incorrectly.
6. Requesting the deletion or destruction of personal data within the framework of Article 7 of the Law,
7. Requesting that the actions taken be notified to third parties to whom personal data has been transferred.
8. You have the right to object to a result that is unfavorable to you, which is the result of analysis exclusively by automated systems.
9. The right to claim compensation for damages you have suffered as a result of the unlawful processing of your personal data.

8. COMMUNICATION
To exercise your rights under the law, you can submit your application, including your identification information and request, in writing to the Data Controller, or through other methods determined by the Personal Data Protection Board.

Data Controller: DüConnect Mobile Application
E-Mail: duconnectresmi@gmail.com
Address: Düzce Merkez, Türkiye