Explicit Consent Text

1. What this text is for

Most of the personal data processed by […] (the "Controller") through the Eskişehir Sosyal Şehir app and the eskisehircebinde.com site (the "App") rests, as explained in the KVKK Disclosure Notice, on the performance of a contract, a legal obligation or legitimate interest and does not require your consent. This text covers only the processing that can be done with your explicit consent. Each item is a separate consent; giving one does not cover another, and declining one does not prevent you from using the rest of the App.

Explicit consent, within the meaning of Article 3 of the KVKK, is consent relating to a specific subject, based on information and declared of free will. Consent A and Consent B are not a precondition for registering, placing an order or using a module. The box for Consent B is empty at first and no message is sent before you tick it. Consent A and Consent C are given not by a separate box but at the moment you use the feature concerned, and for that use: your location goes nowhere until you say "I am here", your question until you ask the assistant, your push token until you grant the notification permission.

2. Consent A — Location sharing on the GALA live map

What is done: when you say "I am here" on the GALA live map, your device's location is read, rounded to a grid of about 500 metres, written to the server and shown to the city's other users for the duration you choose: on the map your profile photograph and this approximate location, and to those who open your person card also your name and the photograph and caption you attach. No sharper location is stored or shown to anyone; everyone sees the same precision. Your share can be reported and is removed from the map if it breaks the rules.

Who can give it: only persons who are eighteen or older can give this consent. GALA is closed to persons under eighteen; the shares of accounts under eighteen or without a date of birth on file are not shown on the map.

Why consent is needed: showing your location to people you do not know is processing that is not necessary for the performance of the contract and depends solely on your decision.

Duration and withdrawal: the share ends by itself at the end of the duration you chose; the coordinate and photograph are deleted 24 hours after it ends. This consent is given afresh with every share through the "I am here" button; the version of this text on that day is recorded on your account with your first successful share, and recorded again with the next share after the text changes. You can end the share at any moment with "Take me off the map" and withdraw the location permission in the operating system settings. The App has no separate switch for this consent; as long as you do not share, your location is not processed. Withdrawing consent does not affect the lawfulness of shares made until then.

• I give my explicit consent to my location being shown on the GALA live map, approximated as described above.

3. Consent B — Marketing messages and personalisation

What is done: announcements of campaigns, deals, events and new features are sent by in-app notification, e-mail and SMS. So that these messages can be chosen according to the modules you are interested in, which modules you use and which content you view may be taken into account.

What is not done: the App builds no advertising profile and does not sell or transfer your data to third parties for advertising; personalisation is done only for the App's own content and on the installation's own server.

Why consent is needed: sending commercial electronic messages is subject to consent under Law No. 6563, and processing your usage data for that purpose goes beyond legitimate interest.

Duration and withdrawal: your consent is valid until withdrawn. You can turn notifications off per module in the settings, and stop e-mail and SMS messages with the instruction in the message or by writing to […]. Service messages such as account security, order status and legal notices are independent of this consent and continue to be sent.

• I give my explicit consent to my identity, contact and usage data being processed to deliver the App's own campaigns and announcements to me and to select those messages according to my interests.

4. Consent C — Transfer abroad (AI, spoken reply, notifications)

What is done: when you use the features below, the relevant data is transferred to service providers that may be established abroad:

• City assistant: the text of your question, the previous questions and answers in the same conversation and city data that is already public in the App are sent to the AI provider the city administration has enabled (Google Gemini, Groq or Anthropic Claude). Your account id, phone number and e-mail address are not sent; if you write personal information into your question yourself, it goes as part of the text.
• Spoken reply: if the city administration has enabled the server voice, the text of the assistant's reply (not your voice or identity) is sent to Google Cloud Text-to-Speech to be converted to audio.
• Speech recognition: in a spoken question your voice goes to your phone's operating system speech-recognition service (Apple or Google); whether that conversion happens on the device or on the platform's own servers is subject to that platform's terms. The audio never reaches us.
• Notifications: if you chose to receive notifications, your device token and the notification text are delivered through Google Firebase Cloud Messaging.

Why consent is needed: some of these providers are established outside Türkiye, and under Article 9 of the KVKK a transfer abroad rests on explicit consent where the other conditions the law provides are absent. How a provider processes and stores the data it receives is subject to its own terms.

Duration and withdrawal: your consent is valid until withdrawn. Not using the voice assistant, not granting the microphone permission or turning notifications off stops the relevant transfer; the App has no separate switch for this consent, and you can also withdraw it by writing to […]. If you do not give this consent you can still ask the assistant typed questions and, when no AI model is enabled, receive answers drawn only from the installation's own data.

• I give my explicit consent to the data listed above being transferred abroad to the named providers when I use the city assistant, spoken reply, speech recognition and notification features.

5. Common provisions

• These consents are given by persons who are eighteen or older. If you are under eighteen, your parent or guardian gives Consent B and Consent C on your behalf; Consent A cannot be given for persons under eighteen.
• The type of the explicit consent and marketing consent you give at registration, the version of this text on that day and the date are recorded on your account; you can learn which text you consented to and when by applying to us.
• When the text changes, the version date is updated, the change is announced within the App and, where required, your consent is requested again; your consent record carries the version of the day it was given.
• Withdrawing your consent takes effect for the future; it does not make the processing carried out until the date of withdrawal unlawful.
• When you withdraw consent, the data of the relevant feature is deleted or anonymised according to the retention rules in the Privacy Policy; records subject to a legal retention obligation are excepted.
• Questions about this text can be sent to destek@eskisehircebinde.com, and applications under the KVKK to […].

You declare that you have read this text, that you have been informed of the subject and purpose of the explicit consent, the parties the data will be transferred to and the way to withdraw, and that you give each consent you tick of your own free will.