Personal Data Protection and Processing Notice
This notice explains the purposes and legal grounds for processing your personal data, the recipients to whom the data may be transferred, the collection methods and your rights under Turkish Personal Data Protection Law No. 6698.
Data Controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), personal data means any information relating to an identified or identifiable natural person.
A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system is regarded as the data controller.
Araba Kirala Teknoloji Anonim Şirketi (“Araba Kirala” or the “Company”) acts as the data controller and gives importance to protecting personal data.
Purposes of Processing Personal Data
Your personal data may be processed in accordance with the Constitution of the Republic of Türkiye, KVKK, Law No. 6563 on the Regulation of Electronic Commerce, the Turkish Penal Code No. 5237 and other applicable legislation, subject to the conditions specified in Articles 5 and 6 of KVKK.
- Providing daily or monthly car rental services.
- Receiving reservations and processing cancellation requests.
- Establishing and performing car rental agreements.
- Creating, managing or cancelling memberships.
- Providing after-sales support services.
- Managing accounting, finance and customer financial risk assessment processes.
- Receiving, assessing and resolving requests, suggestions and complaints.
- Managing customer relations and customer satisfaction processes.
- Conducting surveys and developing products and services.
- Following legal proceedings and requests from authorised institutions.
- Conducting information security, audit and ethics activities.
- Managing corporate communications.
- Organising prize draws, campaigns, competitions and promotions.
- Providing additional benefits to loyalty programme members.
- Sending commercial electronic communications for advertising, campaigns and promotions where the necessary consent has been obtained.
Transfer of Personal Data
Depending on your legal relationship with the Company, your personal data may be transferred to business and solution partners, suppliers, legally authorised public authorities and authorised private parties under the conditions specified in Article 8 of KVKK.
Where necessary and subject to the applicable legal conditions, personal data may be shared with relevant service providers in Türkiye or abroad for reservations, contractual procedures, service monitoring, loyalty programme management and communication activities.
The current notice identifies Amazon.com Inc., Paraşüt Yazılım, Kolaycar and Netgsm among the service providers used in connection with personalised services based on usage patterns. Any such transfer is carried out subject to applicable legislation and the required legal conditions.
Collection Methods and Legal Grounds
Your personal data may be collected automatically or by non-automatic means through the website, mobile applications, social media accounts, email, telephone, courier or post, fax and face-to-face communications.
- Formation or performance of a contract: Car rental, reservations, memberships and after-sales support.
- Legal obligation: Compliance with legislation and requests from authorised institutions.
- Establishment, exercise or protection of rights: Management of requests and complaints.
- Legitimate interests: Accounting, finance, information security, customer relations, corporate communications and audits.
- Explicit consent: Advertising, marketing, campaigns and personalised services where explicit consent is legally required.
Your Rights Under Article 11 of KVKK
As a data subject, you may apply to the data controller to:
- Learn whether your personal data is being processed.
- Request information if your personal data has been processed.
- Learn the processing purpose and whether the data is being used accordingly.
- Learn the third parties to whom the data has been transferred in Türkiye or abroad.
- Request correction of incomplete or inaccurate personal data.
- Request erasure or destruction of personal data subject to the conditions prescribed by law.
- Request notification of correction, erasure or destruction to third parties to whom the data was transferred.
- Object to a result arising against you through analysis exclusively by automated systems.
- Claim compensation if you suffer damage due to unlawful processing.
Applications and Contact Details
You may submit your requests under KVKK to the Company together with the information necessary to verify your identity and explain your request. Applications are concluded as soon as possible and within 30 days at the latest, depending on their nature. A fee prescribed by applicable legislation may be charged if processing the request involves an additional cost.
