GDPR Privacy Notice – JO.ai

https://hijo.ai/en/privacy-policy/gdpr/

Effective Date: July 31, 2025

This notice supplements the JO.ai Privacy Policy for users and customer organizations in the EEA and United Kingdom, in compliance with the EU GDPR (Regulation (EU) 2016/679) and UK GDPR.

| | | |---|---| | Data Controller | ICITECH Teknoloji A.Ş. | | Website | https://hijo.ai/ | | Email | app@icitech.com.tr | | Country | Republic of Turkey |

Our roles

Controller: Hotel admin accounts, website visitors, sales and support communications.
Processor: Hotel operational data (tasks, messages, assignments) processed on behalf of the hotel customer. The hotel is the controller for staff and guest-related operational data it loads into JO.ai.

Lawful bases (Article 6)

Contract performance for account and service delivery; legitimate interests for security and product improvement; consent where required for marketing cookies and optional communications; legal obligation where applicable.

International transfers

Data may be processed in Turkey, the EU, the US, or other regions where our subprocessors operate (e.g. cloud hosting, analytics, AI APIs). We rely on appropriate safeguards including Standard Contractual Clauses where required.

AI processing

Task routing, summaries, and alerts may use third-party AI APIs. See https://hijo.ai/en/privacy-policy/ai-provider/ for provider disclosure.

Your rights (Articles 15–22)

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is consent-based. Contact app@icitech.com.tr — subject “GDPR Request — JO.ai”. We respond within 30 days.

Hotel staff and guests

Employees of hotel customers should contact their employer (the data controller) first. Guests should contact the hotel. If the hotel cannot assist, contact app@icitech.com.tr and we will route the request.

Supervisory authorities

You may lodge a complaint with your local data protection authority. Turkish users: https://www.kvkk.gov.tr/

DPA requests

Hotels in the EEA may request a standalone Data Processing Agreement at app@icitech.com.tr — subject “DPA Request — JO.ai”.