Customer Information Notice

Your personal data may be processed by Araba Kirala Teknoloji Anonim Şirketi (“Company”), acting as the data controller, within the scope described below and in accordance with Turkish Personal Data Protection Law No. 6698 (“Law”).

The natural person whose personal data is processed while accessing www.arabakirala.com.tr or the Araba Kirala application (“web”) is referred to as the Data Subject.

If you only access the web, your IP address, information associated with that address and cookie data may be processed.

This information is processed for the following purposes:

• Conducting activities in compliance with legislation, including retention, reporting and information obligations,
• Conducting analytical studies to improve product and service quality.

If you complete a form available on the web, the following data may also be processed:

• Full name, tax identification number, province and district,
• Number of vehicles currently held by the organisation, requested vehicle quantity and requested period,
• Telephone number, email address and message content.

Depending on the nature of the web membership form, the following information may also be processed:

• Date of birth and gender,
• Driving licence number, class, place and date of issue,
• Turkish identity number,
• Credit card and Findeks information during reservation transactions.

As part of a dealership application, the full name, telephone number and email address of the company owner or authorised representative may be processed. Consent information is also processed for Data Subjects who permit commercial electronic communications.

For detailed information, please review the Personal Data Protection Policy.

Your processed personal data may be transferred, subject to the conditions set out in Articles 8 and 9 of the Law, solely for the following purposes:

• Event and organisation management and ensuring that operations comply with legislation,
• Marketing analysis, sales and after-sales support processes,
• Product or service marketing and communication activities,
• Information security processes.

Possible recipient groups include:

• Company business partners providing call centre, satisfaction survey, software and information technology services,
• Company shareholders and affiliates,
• Authorised dealers,
• Legally authorised public authorities, public institutions and administrative bodies,
• Banks and financial institutions.

Data concerning vehicle renters may be transferred to the Turkish General Directorate of Security. Where commercial electronic communication consent is granted, consent information may be transferred to İYS A.Ş. on a limited basis.

Your personal data may be obtained through fully or partially automated means or through non-automated means, provided that they form part of a data recording system.

When the web is used, data may be collected via the internet, cookies and online forms provided electronically.

Your personal data may be processed under Articles 5 and 6 of the Law and on the following legal grounds:

• Article 5/2-b: Processing is expressly provided for by law,
• Article 5/2-ç: Processing is necessary for compliance with a legal obligation,
• Article 5/2-f: Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the Data Subject are not harmed,
• Article 5/1: Cases requiring explicit consent,
• Article 5/2-c: Processing is directly related to the establishment or performance of a contract,
• Article 5/2-d: The data has been made public by the Data Subject.

As a Data Subject, under Article 11 of the Law, you may:

• Learn whether your personal data is processed and request information if it has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Learn the third parties to whom your personal data is transferred in Türkiye or abroad,
• Request correction of incomplete or inaccurate data and request notification of that correction to third parties,
• Request deletion or destruction when the reasons requiring processing cease to exist and request notification of that action to third parties,
• Object to an unfavourable result arising from analysis carried out exclusively by automated systems,
• Claim compensation for damage resulting from unlawful processing of your personal data.

For the application form and further information, please visit the Personal Data Protection page.