GDPR & KVKK Clarification Text

Dear Visitors and Users, as Olba AI ("Olba AI" or "Data Controller"), we pay the utmost attention to the security and privacy of your personal data in accordance with the European Union General Data Protection Regulation ("GDPR") and the Turkish Personal Data Protection Law No. 6698 ("KVKK"). This Clarification Text has been prepared to inform you about the processing of your personal data when you join our waitlist or use the contact form on our website.

1. Data Controller

Your personal data is processed by Olba AI as the data controller in compliance with GDPR, KVKK, and other relevant legal regulations. Contact Email: [email protected]

2. Processed Personal Data and Method of Collection

The personal data collected digitally through our website includes:

For the Waitlist: Your email address.
For the Contact Form: Your name, surname, email address, message subject, and message content.
Cookies: Browser information, IP address, and device information collected for website operations and analytics.

3. Purposes and Legal Bases for Data Processing

Your personal data is processed based on the following legal grounds and for the purposes listed below:

a) Processing Based on Your Explicit Consent (GDPR Art. 6/1-a, KVKK Art. 5/1):

If you join our waitlist, your email address will be processed based on your explicit consent to send you product launches, early access opportunities, campaigns, updates, and marketing communications via email.

b) Processing Based on Legitimate Interests or Legal Rights (GDPR Art. 6/1-f, KVKK Art. 5/2):

The messages you send via the contact form are processed based on the legal grounds of "legitimate interests of the data controller" and "establishment, exercise, or defense of legal claims" in order to improve Olba AI's service quality, answer your queries, manage your requests, and fulfill our burden of proof in case of potential disputes.

4. Transfer of Personal Data

Your personal data is not sold or shared with third-party advertising networks for marketing purposes. Your data may only be shared with:

Secure cloud infrastructure and hosting providers where our servers are located (e.g., Hetzner),
Technical service partners providing our email delivery infrastructure,
Authorized public institutions and authorities to fulfill our legal obligations.

5. Your Rights Under GDPR & KVKK

Depending on your location, you have the following rights regarding your personal data:

Right of Access: Learn if your data is processed and request a copy (GDPR Art. 15, KVKK Art. 11).
Right to Rectification: Request correction of inaccurate or incomplete data (GDPR Art. 16, KVKK Art. 11).
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions (GDPR Art. 17, KVKK Art. 11).
Right to Restrict Processing: Request restriction of processing under specific circumstances (GDPR Art. 18).
Right to Data Portability: Request transmission of your data to another controller in a structured, commonly used format (GDPR Art. 20).
Right to Object: Object to processing based on legitimate interests or direct marketing (GDPR Art. 21).
Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal.

To exercise these rights, you can send an email containing your request to [email protected].

6. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this document or as required by law. You can unsubscribe from our marketing emails at any time by clicking the "Unsubscribe" link in any email or by contacting us at [email protected]. Upon withdrawal of consent, your data will be securely deleted or anonymized unless a legal retention obligation applies.

Last Updated: June 8, 2026