Data controller
Your personal data is processed by Buume Bilişim Teknoloji Reklamcılık Anonim Şirketi (MERSİS 0191140125000001, Ankara Ticaret Sicili Müdürlüğü no. 522813), Koza1 Cad. No: 153/4 Gaziosmanpaşa, Çankaya/Ankara, Türkiye, as data controller under the Personal Data Protection Law No. 6698 ("KVKK"). This notice is given under Article 10 of the KVKK and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. Your explicit consent for your pet's health records is asked for separately (Health Data Consent); this notice is not a request for consent.
Personal data we process
| Category | Data |
|---|---|
| Identity and contact | e-mail address, optional display name, Apple or Google account identifier |
| Customer transaction | subscription plan, status, renewal and expiry dates, store country |
| Pet profile | name and species; optionally breed, sex, date of birth, neutering, colour and markings, adoption date, target weight range, memorial date |
| Pet identification numbers | optionally microchip and passport numbers |
| Care records | meal, water, walk, potty, sleep and grooming records, notes, care tasks, reminders |
| Pet health records | weight and body condition score, temperature, medicine and dose, parasite protection, vaccinations, vet visits, observation notes, custom records, stool consistency, food reactions |
| Shared care | e-mail address of invited persons, roles, access levels and end dates, invitation and membership records, who wrote a record |
| Consent records | for each pet, whether health-data consent was given or withdrawn, when, and the region and language of the text |
| Transaction security | IP address in server logs, push notification token, device platform and app version, error reports (if enabled) |
| Requests and complaints | in-app suggestions and messages you send to our support address |
Pet photos are not transferred to us; they stay on your device. Free-text fields contain whatever you write; where a record or note reveals health information about a person, it is special-category personal data under Article 6 of the KVKK.
Purposes and legal grounds
| Purpose | Data | Legal ground (KVKK) |
|---|---|---|
| Creating and managing your account, signing in | identity and contact | Art. 5(2)(c): necessary for the conclusion and performance of a contract |
| Keeping, synchronizing and sharing care records with the people you invite | pet profile, pet identification numbers, care records, shared care | Art. 5(2)(c) |
| Keeping, synchronizing and sharing health records | pet health records | Art. 5(1): your explicit consent; where a record reveals health information about a person, Art. 6: your explicit consent |
| Recording and proving consent | consent records | Art. 5(2)(ç) legal obligation and Art. 5(2)(e) establishing, exercising or protecting a right |
| Managing Premium subscriptions | customer transaction | Art. 5(2)(c) |
| Sending the reminders you set and smart reminders | care and health records, push token | Art. 5(2)(c); for health records Art. 5(1) explicit consent |
| Information security, preventing abuse, fixing errors | transaction security | Art. 5(2)(ç) legal obligation and Art. 5(2)(f) legitimate interest |
| Answering your requests under Art. 11, complaints and suggestions | requests and complaints, identity and contact | Art. 5(2)(ç) legal obligation, Art. 5(2)(e) establishing, exercising or protecting a right and Art. 5(2)(f) legitimate interest |
How we collect data
We collect personal data electronically, by automated means, through the PetMobil mobile app when you enter it or when the app creates it while you use it (for example synchronization and notification records), from Apple or Google when you sign in or subscribe through them, and by e-mail when you write to us.
Transfers
Within Türkiye: to authorised public institutions and courts when the law requires it (Art. 8).
Abroad: our database is in Frankfurt, Germany; some service providers are in the United States. The providers, the data each receives and its location are listed on the Service Providers page. Because there is no adequacy decision for these countries, these transfers are made under Article 9 of the KVKK with the standard contract published by the Personal Data Protection Board, signed with each provider and notified to the Authority within five business days. Apple and Google receive data as independent controllers when you sign in or subscribe through them.
We do not sell personal data or transfer it for advertising or marketing.
Retention
We keep personal data for as long as the purpose requires and then delete, destroy or anonymize it: account and records until you delete them or your account; a deleted pet or record 30 days; invitations 30 days after they close; suggestions until you delete them or your account, or after 24 months without activity; a proof of health-data consent without your identity 3 years after you delete your account; backups 7 days; support correspondence 1 year after the request is closed. Details are in the Privacy Policy and on the Account & Data Deletion page.
Your rights under Article 11
You have the right to:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom data is transferred;
- request correction if data is incomplete or inaccurate, and notification of the correction to third parties to whom it was transferred;
- request deletion or destruction under the conditions of Article 7, and notification of this to those third parties;
- object to a result against you that arises exclusively from the analysis of your data by automated systems;
- claim compensation if you suffer damage because of unlawful processing.
How to apply
Send your request in writing to Koza1 Cad. No: 153/4 Gaziosmanpaşa, Çankaya/Ankara, Türkiye, or by e-mail to info@petmobil.app from the e-mail address registered with your PetMobil account. Your request must include your name, signature (for written applications), address or e-mail address, and the subject of the request. We answer free of charge as soon as possible and within 30 days at the latest; if answering involves an extra cost, the fee set by the Board may be charged. If your request is rejected, the answer is insufficient or we do not answer in time, you can complain to the Personal Data Protection Board (www.kvkk.gov.tr) within 30 days of learning the answer and in any case within 60 days of your application.