Clarification Text on the Processing of Personal Data

Clarification Text on the Processing of Personal Data

1. Data Controller

As AUTO DESTEK SERVİS HİZMETLERİ A.Ş. we care about the privacy of our esteemed customers’ personal data,we process and preserve them meticulously. According to Article 10 of the Law on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Disclosure, we present this text for your information to inform you regarding the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data can be transferred, the method of collecting your personal data and your other rights listed in Article 11 for legal reasons.

2. By Which Method and Based On Which Legal Ground Do We Process Your Personal Data?

Our company is engaged in short or long-term motor land vehicle rental services and purchase and sale of all kinds of motor land vehicles, and, in this context, your personal data may be processed by processing the information provided during the conclusion of the contract or by non-automatic processing of the information transmitted during the continuation and performance of the agreement, and they can also be processed automatically by verbal, written or electronic/digital means from our website, mobile applications or call centre, e-mail channels, KEP (registered electronic mail) and other communication channels.

In this context, we process your personal data for the following reasons;

  • It is necessary to process the personal data of the Parties to the agreement, provided that it is directly related to the establishment or performance of the agreement,
  • It is mandatory for our company to fulfil its legal obligation as a data controller,
  • Data processing is mandatory for the establishment, use or protection of the contractual right ( reasons such as for performing after-sales support services, etc. ),
  • It is necessary for the legitimate interests of our company and the fulfilment of our company’s legal responsibilities, provided that it does not harm your fundamental rights and freedoms.

3. Whose Personal Data We Process?

Our company processes personal data of the following persons , within the framework of the purposes mentioned above and legal reasons;

  • Renter companies or individuals who rent a vehicle and/or receive service from our company,
  • Real and legal persons participating in the agreement as their guarantor, the guarantor or the spouse of the guarantor to obtain the consent of the spouse, if necessary, in real persons, Persons to whom the above-mentioned persons have given consent to drive/delivered the vehicles ,
  • Persons who buy or sell a first-hand/second hand vehicle from our company,
  • The supplier company (rental companies, dealers, distributors, services, etc.) or individuals (lawyer, financial advisor, etc.),
  • The personnel of all these institutions and individuals and the persons whom they have made use of our services in any way or authorized to act on their behalf,
  • Real persons who permit to receive commercial/electronic messages,
  • Persons who visit the Headquarters or branches of our company,
  • Real persons contacting via our Call Center, e-mail addresses, KEP (registered electronic mail) and similar electronic channels,
  • Owners of vehicles belonging to persons who are parties to the accident or third parties who are parties to the accident in relation to traffic accidents that may occur,
  • Law enforcement officers who prepare the report in the reports drawn up by the law enforcement officers in traffic accidents that may occur,
  • Legal representatives of the applicant and, if any, regarding the judicial/administrative applications made against our company,
  • Proxy(s) in transactions made with a power of attorney,

according to the type of service received/provided or the reason for processing;

  • Identity Information (Name, surname, mother-father’s name, mother’s maiden name, gender, date of birth, place of birth, marital status, personal information of the spouse if there is a guarantor, country of citizenship, passport number, identity number, etc.)
  • Contact Information (such as address, e-mail address, contact address, registered e-mail address (KEP), telephone number)
  • Financial Information (Tax Identity No, Tax Office,Bank/Credit Card Information, KKB information, Findeks information, etc.)
  • Transaction Information (call center records, invoice, promissory note, check information, reservation information, request information, etc.)
  • Visual and Audio Recordings (security camera recordings, photographs, audio recordings, etc. in company headquarters or branches)
  • Ownership information (Vehicle license, license plate information, etc.)
  • Insurance Policy Information (mandatory liability, discretionary liability, motor insurance policy information, etc.)
  • Financial Information (Bank/Credit Card Information, KKB information, Findeks information, etc.)
  • Signature , ( Signature Declaration and Circular, Electronic signature certificate number etc.)
  • Location Information ( Location information of the place where the rented vehicle is located, HGS Pass routes, etc.)
  • Transaction Security Information (such as IP address information, website login and exit information, password information)
  • Certificate Information (license etc.)
  • Data regarding events that take place during the rental and which must be processed in terms of both public safety and legitimate interests of the company (data on the amount of alcohol use in case of drunk driving, traffic accident information, breach of security, theft, smuggling, driving by a different person, etc.)

4. Who We Share Your Personal Data With?

In any case, in accordance with the agreements under which the obligation of confidentiality is assumed and within the framework of the principles stipulated by the legislation on the protection of personal data, we may share your personal data, the necessary information and documents to the extent required with suppliers, assistant companies that provide call center services, service companies for after-sales services, insurance companies, car rental companies that provide vehicle supply, Institutions/individuals from whom support services are received for the performance of legal affairs, institutions/individuals from whom support services are received for the performance of financial matters, payment service providers from which services are received for the purpose of providing payments over the web, cloud service providers, our business solution partners, the shareholders of our company, and the General Directorate of Security within the framework of legal obligations, with third parties under the duty of confidentiality in legal mediation sessions, if required by judicial and administrative authorities and company interests.

5. Your Rights Pursuant to Article 11 of the Personal Data Protection Law

By applying to our company in writing, you have the following rights;

  • Learning whether your personal data is processed,
  • If your personal data has been processed, requesting information about it,
  • Learning the purpose of processing your personal data and whether they are used in accordance with the purpose,
  • Knowing the third parties to whom personal data is transferred at home or abroad,
  • Requesting correction of personal data in case of incomplete or incorrect processing,
  • Requesting deletion or destruction of personal data,
  • In case of correction, deletion or destruction of personal data, requesting the notification of these processes to the third parties to whom the personal data has been transferred,
  • Objecting to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
  • Requesting the compensation of the damage in case of loss due to unlawful processing of personal data.

Regarding your applications regarding your rights listed above, you will be returned free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board. If you want your personal data to be deleted or destroyed or anonymized, your request will only be fulfilled after the period determined by legal regulations.