GDPR Data Rights

Last updated: May 20, 2026

1. Controller

TUUSIX OYUN YAZILIM VE DIŞ TİCARET LİMİTED ŞİRKETİ operates Dilutio and is the controller for personal data processed through the app and website unless a different controller role is stated for a specific service.

Registered address: IHLAMURKUYU MAH. KIRKPINAR SK. NO:8 İÇ KAPI NO:3 ÜMRANİYE / İSTANBUL. MERSIS number: 0872159955600001. Tax identification number: 8721599556.

2. Information We Provide

Our Privacy Policy explains the information required by GDPR Articles 13 and 14, including:

  • the controller identity and contact channel;
  • the categories and sources of personal data;
  • the purposes and legal bases for processing;
  • recipients and processor categories;
  • international transfer safeguards;
  • retention periods or retention criteria;
  • data subject rights and complaint rights;
  • whether automated decision-making is used.

3. Legal Bases

  • Contract performance for account access, app sync, saved content, and paid features.
  • Consent for optional AI processing, optional notifications, and optional personalized advertising where enabled.
  • Legitimate interests for security, abuse prevention, service reliability, and non-invasive diagnostics.
  • Legal obligation for tax, consumer, app-store, privacy, and lawful request compliance.
  • Establishment, exercise, or defense of legal claims for disputes and moderation records.

4. Your GDPR Rights

  • Access: request a copy of personal data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete data.
  • Erasure: ask us to delete personal data where GDPR conditions are met.
  • Restriction: ask us to restrict processing in certain circumstances.
  • Portability: receive data you provided in a structured, commonly used format where applicable.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: withdraw consent at any time without affecting prior lawful processing.
  • Complaint: lodge a complaint with your local data protection authority.

5. AI and Automated Processing

Dilutio uses AI to generate educational blend and fragrance-related suggestions when you choose to use AI features. AI output is not used to make legal or similarly significant decisions about you. AI output is labeled and can be reported in the app.

6. International Transfers

Where data is transferred outside the EU/EEA or UK, we rely on appropriate safeguards, such as European Commission standard contractual clauses, UK transfer mechanisms, adequacy decisions, or other lawful mechanisms. Transfers are also evaluated against processor terms and security controls.

7. Exercising Rights

Use in-app privacy controls where available, or email hello@tuusix.com. We may need to verify your identity before fulfilling a request.