Privacy Policy

Our data processing policy compliant with KVKK and GDPR

Your Data is Safe With Us

Last updated: May 15, 2026

1. Legal Framework

The Dünya İnsanlık Derneği application processes your personal data in accordance with Law No. 6698 on the Protection of Personal Data (KVKK), the EU General Data Protection Regulation (GDPR) and relevant legislation. Data Controller: Dünya İnsanlık Derneği Contact: info@worldhumanitynetwork.org

2. Legal Basis for Data Processing (KVKK Article 5)

Your personal data is processed on the following legal bases under KVKK Article 5:

Explicit consent (Article 5/1): For location data (SOS/crisis reporting), optional health information (blood type) and marketing notifications.
Performance of a contract (Article 5/2-c): For providing services requested by the user, such as account creation, donation processing and event registration.
Legal obligation (Article 5/2-ç): For retaining donation and financial records under tax legislation.
Legitimate interest (Article 5/2-f): For ensuring service security, preventing fraud and anonymous statistical analysis — your fundamental rights and freedoms are protected in these operations.

3. Personal Data Collected

Identity information: Name, surname, email address, username.
Contact information: Phone number, postal address (optional).
Location data: Instantaneously during crisis reporting; continuously in the background via foreground service when the Emergency SOS feature is used until rescue teams are notified. Location tracking stops when the user ends the SOS session.
Account activity: Donation history, volunteering applications, event participation.
Device information: Device type, OS version, FCM notification token.
Health information (optional): Blood type, amateur radio call sign — only if the user chooses to provide it.

4. Data Processing Purposes

User account management and authentication.
Coordination of humanitarian aid activities (crisis reporting, Emergency SOS calls, volunteer matching, donation tracking).
Preparation of financial transparency reports.
Communication and sending notifications to users.
Service quality improvement and statistical analysis.
Fulfillment of legal obligations (tax, audit, reporting).

5. Data Sharing

Your personal data will not be shared with third parties without your explicit consent or legal obligation. Exceptional circumstances:

Legal requests from authorized public institutions and organizations.
Cloud infrastructure providers (Google Firebase) — for data storage purposes only.
The association's Audit Board and, where engaged, independent audit firms — during the financial audit process.
Under no circumstances sold for advertising, marketing or profit purposes.

6. Data Security

All data transmission is protected with 256-bit SSL/TLS encryption.
Sensitive data is encrypted on device with AES-256 GCM (Android Keystore).
Server infrastructure is hosted on Google Cloud in ISO 27001 certified data centers.
Regular security audits and penetration tests are conducted.
In the event of a data breach, users and the Personal Data Protection Authority are notified within 72 hours.

7. Data Retention Periods

Active user data: For as long as the account is active.
Donation and financial records: 5 years (pursuant to Turkish associations regulations and Article 14 of our bylaws).
Account deletion request: All data deleted or anonymized within 30 days.
Data required by legal obligation: For the period specified in the relevant legislation.

8. Your Rights (KVKK Article 11)

Under KVKK, you have the following rights:

To learn whether your personal data is being processed.
To request information about processing if it is being processed.
To learn the purpose of processing and whether it is used in accordance with that purpose.
To know the third parties to whom data is transferred domestically or abroad.
To request correction if data is incomplete or incorrectly processed.
To request deletion or destruction under the conditions set out in KVKK Article 7.
To object to a result arising against you from analysis via automated systems.
To claim compensation if you suffer damage due to unlawful processing.

9. Children's Privacy

Our application is not designed for individuals under 18. Accounts of users determined to be under 18 will be closed and their data deleted. It is important for parents who notice their children using the app to contact us at info@worldhumanitynetwork.org.

10. GDPR Compliance (For EU Citizens)

Users residing in EU countries have additional rights under GDPR (EU 2016/679):

Right to data portability (Article 20).
Right to object to profiling (Article 21).
Right to object to automated decision-making (Article 22).
Right to lodge a complaint with a supervisory authority.

Data Controller Contact

To exercise your rights or ask questions about this policy, please contact us:

Email: info@worldhumanitynetwork.org Web: worldhumanitynetwork.org

1. Legal Framework

2. Legal Basis for Data Processing (KVKK Article 5)

Your personal data is processed on the following legal bases under KVKK Article 5:

Explicit consent (Article 5/1): For location data (SOS/crisis reporting), optional health information (blood type) and marketing notifications.

Performance of a contract (Article 5/2-c): For providing services requested by the user, such as account creation, donation processing and event registration.

Legal obligation (Article 5/2-ç): For retaining donation and financial records under tax legislation.

Legitimate interest (Article 5/2-f): For ensuring service security, preventing fraud and anonymous statistical analysis — your fundamental rights and freedoms are protected in these operations.

3. Personal Data Collected

Identity information: Name, surname, email address, username.

Contact information: Phone number, postal address (optional).

Location data: Instantaneously during crisis reporting; continuously in the background via foreground service when the Emergency SOS feature is used until rescue teams are notified. Location tracking stops when the user ends the SOS session.

Account activity: Donation history, volunteering applications, event participation.

Device information: Device type, OS version, FCM notification token.

Health information (optional): Blood type, amateur radio call sign — only if the user chooses to provide it.

4. Data Processing Purposes

User account management and authentication.

Coordination of humanitarian aid activities (crisis reporting, Emergency SOS calls, volunteer matching, donation tracking).

Preparation of financial transparency reports.

Communication and sending notifications to users.

Service quality improvement and statistical analysis.

Fulfillment of legal obligations (tax, audit, reporting).

5. Data Sharing

Your personal data will not be shared with third parties without your explicit consent or legal obligation. Exceptional circumstances:

Legal requests from authorized public institutions and organizations.

Cloud infrastructure providers (Google Firebase) — for data storage purposes only.

The association's Audit Board and, where engaged, independent audit firms — during the financial audit process.

Under no circumstances sold for advertising, marketing or profit purposes.

6. Data Security

All data transmission is protected with 256-bit SSL/TLS encryption.

Sensitive data is encrypted on device with AES-256 GCM (Android Keystore).

Server infrastructure is hosted on Google Cloud in ISO 27001 certified data centers.

Regular security audits and penetration tests are conducted.

In the event of a data breach, users and the Personal Data Protection Authority are notified within 72 hours.

7. Data Retention Periods

Active user data: For as long as the account is active.

Donation and financial records: 5 years (pursuant to Turkish associations regulations and Article 14 of our bylaws).

Account deletion request: All data deleted or anonymized within 30 days.

Data required by legal obligation: For the period specified in the relevant legislation.

8. Your Rights (KVKK Article 11)

Under KVKK, you have the following rights:

To learn whether your personal data is being processed.

To request information about processing if it is being processed.

To learn the purpose of processing and whether it is used in accordance with that purpose.

To know the third parties to whom data is transferred domestically or abroad.

To request correction if data is incomplete or incorrectly processed.

To request deletion or destruction under the conditions set out in KVKK Article 7.

To object to a result arising against you from analysis via automated systems.

To claim compensation if you suffer damage due to unlawful processing.