Data Protection Notice

1. Identity of the Data Controller

As TravelGenerait ("Company"), acting as the data controller within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we process, store, and transfer your personal data within the framework of the purposes described below, in compliance with the law and the principles of integrity.

2. Personal Data Processed

The following personal data is processed within the scope of our services:

• Identity Information: Name, surname, date of birth, gender.
• Contact Information: Email address, phone number.
• Account Information: Username, password (encrypted), profile photo.
• Usage Data: In-app interactions, travel preferences, generated itineraries, AR scan history.
• Location Data: GPS location (when permission is granted), IP address.
• Device Information: Device model, operating system, app version.
• Transaction Information: In-app purchase history.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Managing account creation and identity verification processes
• Creating AI-powered personalized travel plans and recommendations
• Providing the Augmented Reality (AR) exploration feature
• Delivering real-time weather and currency exchange services
• Improving application performance and detecting errors
• Managing user support and feedback processes
• Fulfilling legal obligations
• Conducting information security processes

4. Transfer of Personal Data

Your personal data may be transferred in accordance with the purposes stated above and under the conditions specified in Articles 8 and 9 of KVKK to:

• Firebase (Google): For authentication, data storage, and cloud function services.
• AI API Providers: For travel plan generation and AR analysis services.
• Map and Location Service Providers: For providing location-based services.
• Weather API Providers: For delivering real-time weather data.
• Legal Authorities: To competent public institutions and organizations when legally required.

Your personal data is not sold to third parties or shared for marketing purposes.

5. Collection Method and Legal Basis

Your personal data is collected through automatic and non-automatic means via the mobile application, website, and email channels. This data is processed based on the following legal grounds specified in Article 5 of KVKK:

• Explicit consent: For location data, profile information, and personalized recommendations.
• Performance of a contract: Processing data necessary for account management and service delivery.
• Legal obligation: Mandatory data processing required by legal regulations.
• Legitimate interest: Improving service quality and ensuring security measures.

6. Your Rights Under Article 11 of KVKK

You have the following rights under Article 11 of KVKK:

• Learning whether your personal data is being processed
• Requesting information about the processing if it has been processed
• Learning the purpose of processing and whether it is used in accordance with its purpose
• Knowing the third parties to whom it has been transferred domestically or abroad
• Requesting correction if it has been processed incompletely or inaccurately
• Requesting deletion or destruction within the framework of conditions in Article 7 of KVKK
• Requesting notification of correction and deletion to third parties to whom it has been transferred
• Objecting to a result against you through the exclusive analysis of processed data via automated systems
• Claiming compensation for damages in case of unlawful processing

7. Data Retention Period

Your personal data is retained for the duration required by the processing purposes and within the legal retention periods stipulated by relevant legislation. In case you delete your account, your personal data will be destroyed in the shortest time possible, subject to legal obligations.

8. Application and Contact

You can reach us through the following communication channels to exercise the rights stated above: info@travelgenerait.com

Your applications will be concluded free of charge within the shortest time possible and within thirty (30) days at the latest, depending on the nature of the request.