PROOF SPRINT 02 · ACCOUNTABILITY BEFORE RECRUITMENT

GOURLATaste the AegeanPlan your Urla

ACCOUNTABILITY GATE 01

Responsibility before recruitment.

A public operating pack for the person who will own the Passport pilot: present-data truth, authority, retention, participant rights, incident response and the evidence required before recruitment can open.

THE TRUTH BOUNDARY

A public draft is not an appointed owner.

TRUE NOW

Browser-only prototype

Planner drafts are stored on the visitor’s device by GO URLA’s site JavaScript. There is no Passport pilot database, partner cohort, membership, payment or real-world benefit.

NOT TRUE YET

Operational privacy governance

No person has accepted controller responsibility, response duty, incident authority or the pilot data limits. This pack defines that obligation but does not fill it.

CURRENT PROTOTYPE AUDIT

Know what this browser remembers.

Standard hosting security logs may record page requests, but GO URLA’s current site JavaScript does not transmit the planner fields listed below to a Passport server.

01

gourla-language

English or Turkish preference. Stored on this device until browser storage is cleared.

02

gourla-trip-draft

Optional name, season, days, party, style, budget, interests, note and save time. A free-text note can contain personal information.

03

gourla-trip-draft-v2

Season, days, party, pace, interests, note and save time. Stored only in this browser by the route planner.

YOUR DEVICE · YOUR CONTROL

Delete GO URLA’s local prototype data.

Checking this browser…

ACCOUNTABLE OWNER MANDATE

A name must come with authority.

The role cannot be a ceremonial supporter. Appointment is valid only when the following facts are public and accepted in writing.

  1. 01

    Legal name, organization and accountable role

  2. 02

    Authority to stop collection or operation

  3. 03

    Public contact and named backup

  4. 04

    Accepted data inventory and retention limits

  5. 05

    Rights-request and incident-response duty

  6. 06

    Conflict-of-interest and commercial separation statement

  7. 07

    Appointment start, review and end dates

  8. 08

    Signed go/no-go responsibility for recruitment

SEPARATION OF DUTIES

Four responsibilities. Zero appointments.

01

Accountable Pilot Owner

Owns lawful purpose, resources, stop authority and public accountability.

UNASSIGNED
02

Data Steward

Operates access, correction, deletion, retention and incident records.

UNASSIGNED
03

Operational Lead

Runs partner readiness, participant support and failure procedures.

UNASSIGNED
04

Independent Evaluator

Tests outcomes and reports stop, revise or expand without sales pressure.

UNASSIGNED

PROPOSED RETENTION MAXIMUMS

Delete by default. Justify exceptions.

These limits are public design constraints, not an active legal notice. The appointed owner must validate them against applicable law before collection begins.

RECORDPROPOSED MAXIMUM
Unselected or withdrawn inquiry30 days after decision or withdrawal
Agreement + consent evidence12 months after pilot close*
Raw journey events90 days after pilot close
Optional identifiable feedback180 days after pilot close
Minimal incident / rights log24 months after closure*
Anonymized aggregate resultsPublic evidence may remain

* Unless a documented legal duty requires a different period.

PARTICIPANT CONTROL

Consent must remain reversible.

Know the purpose and fields before opting inAccess and export the participant recordCorrect inaccurate informationWithdraw without losing earned rightsRequest deletion subject to documented legal limits

INCIDENT WORKFLOW

Contain first. Explain completely.

  1. 01

    STOP + CONTAIN

  2. 02

    PRESERVE MINIMUM EVIDENCE

  3. 03

    ASSESS PEOPLE + DATA

  4. 04

    NOTIFY WHEN REQUIRED

  5. 05

    REPAIR + RESPOND

  6. 06

    PUBLISH LESSON + CONTROL

EIGHT ACCEPTANCE GATES

Prepared is not accepted.

Five public artifacts now exist. The governance gate remains incomplete until a real owner accepts the mandate and the system passes a dry run.

  1. 01

    OWNER MANDATE

    PUBLISHED
  2. 02

    CURRENT DATA AUDIT

    PUBLISHED
  3. 03

    PILOT DATA BOUNDARY

    PUBLISHED
  4. 04

    RETENTION + RIGHTS MATRIX

    PUBLISHED
  5. 05

    LOCAL DELETE CONTROL

    OPERATING
  6. 06

    ACCOUNTABLE OWNER

    CURRENT · UNASSIGNED
  7. 07

    SIGNED ACCEPTANCE + CONTACT

    NOT REACHED
  8. 08

    INCIDENT + RIGHTS DRY RUN

    NOT REACHED
Open machine-readable governance record ↗

CURRENT DECISION

Prepare. Appoint. Test. Then recruit.

This release improves the infrastructure and the current visitor’s control. It does not authorize a pilot, create a controller identity or open a channel for names.

Return to the pilot specification ↗