1. Who is responsible for your data
Rakita is operated by NOMRA L.LC-FZ, Meydan — Free Zone, The Meydan Hotel, Dubai, United Arab Emirates. For the data we hold about you as a Rakita account holder, NOMRA L.LC-FZ is the controller: we decide why and how it is processed.
One important exception. When a Rakita customer loads data about other people — candidates in Navar, employees in Atlas, customers in Agents, viewers in Social Moderator — that customer is the controller and we are their processor. If you are one of those people, address your request to the organization that holds your data. If you cannot identify or reach them, write to us and we will identify the controller and pass your request on.
2. Which law applies to you
| If you are… | Your rights come from |
|---|---|
| Anyone using Rakita | UAE Personal Data Protection Law — Federal Decree-Law No. 45 of 2021 (“PDPL”) |
| In the EU or EEA | The General Data Protection Regulation (“GDPR”), additionally |
| In Türkiye | Law No. 6698 on the Protection of Personal Data (“KVKK”), additionally |
Where more than one applies, we honour whichever gives you the stronger right. In practice we apply the same process to every request regardless of where you are.
3. Your rights
- Know and access. Find out whether we hold personal data about you, why, who we share it with, and get a copy.
- Correct. Have inaccurate or incomplete data fixed. Most account fields you can edit yourself in the platform.
- Delete. Have your data erased where we no longer need it, or where you withdraw the consent it rested on. See Data Deletion Instructions.
- Restrict. Ask us to pause processing while a dispute about accuracy or lawfulness is resolved.
- Port. Receive the data you gave us in a structured, machine-readable format, and have it sent to another provider where technically feasible.
- Object. Object to processing based on our legitimate interests, and object at any time to direct marketing — which we will stop immediately, no reason needed.
- Withdraw consent. Where processing rests on consent — site analytics, for instance — withdraw it at any time, without affecting what was lawful beforehand. Use Cookie settings in the footer.
- Not be subject to solely automated decisions that produce legal or similarly significant effects. Rakita produces suggestions for human review; we do not make automated employment decisions, and our Terms prohibit customers from using it that way.
- Complain. To us first, and to a supervisory authority if we do not resolve it — see section 6.
4. How to exercise a right
Email hello@rakita.io from the address on your account, saying which right you want to exercise. Include the organization or workspace name if you know it.
We verify that a request comes from the person it concerns before acting on it — that protection is for you. We respond within 30 days. If a request is unusually complex we may extend that, and we will tell you why before the first 30 days are up. Exercising these rights is free; we may charge a reasonable fee only for requests that are manifestly unfounded or repetitive.
5. International transfers
Your account record, conversation history and search index are hosted in Türkiye. The document files you upload are stored in Amazon S3 in an EU region, so uploading a file transfers it out of Türkiye. Some sub-processors operate elsewhere again — each provider and the data it receives is listed in the Privacy Policy.
We make every such transfer under contract with the recipient, restricted to our instructions and to what the service needs, and with the safeguards the applicable law requires. If you are in Türkiye and need the KVKK basis for a specific transfer, or an explicit-consent form for one, email hello@rakita.io.
6. Complaints
Please raise it with us first at hello@rakita.io — most issues are quickest to fix directly. You also have the right to complain to a supervisory authority:
- United Arab Emirates — the UAE Data Office, established under Federal Decree-Law No. 45 of 2021.
- EU / EEA — the data protection authority of the member state where you live, work, or where the issue arose.
- Türkiye — the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, “KVKK Kurumu”).
7. Data processing agreements
If your organization needs a data processing agreement, a record of processing activities, or a current sub-processor list for your own compliance file, email hello@rakita.io and we will provide them.