PERSONAL DATA PROTECTION AND PROCESSING CLARIFICATION TEXT
DATA CONTROLLER
Your personal data will be processed by Ekar Turizm A.Ş., as the data controller, and the Lessor (“Company”) who is a party to this Motor Vehicle Rental Agreement General Conditions specified at the beginning of the contract, in accordance with the scope explained below and in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”).
The individual whose personal data is processed within the framework of the Motor Vehicle Rental Agreement General Conditions (“Agreement”) is referred to as the Data Subject.
PURPOSE OF PROCESSING YOUR PERSONAL DATA
As the Data Subject, upon the execution of the Agreement, your personal data such as name-surname, Turkish ID number, address, mobile phone number, signature, information about the rented vehicle, driver license information and sample (license number, license class, place of issuance, date of issuance, and license details), identity card information and sample, location information if roadside assistance is requested or if it is reported that the vehicle has a tracking device, voice recording, credit card and findeks information, passport information and sample for foreign customers, and, if permitted, commercial electronic consent will be processed in accordance with the general principles stipulated in the Law.
Your personal data will be processed for the following purposes: ensuring that the activities carried out by the Company are conducted in compliance with the legislation (fulfilling information retention, reporting, and notification obligations required by official institutions and legal obligations), managing organization and events, conducting sales and post-sale processes for goods/services, marketing processes for products/services, communication activities, and conducting analysis studies (activities aimed at improving the quality of services and products).
Detailed information regarding the purposes of processing your personal data by the Company can be found in the Ekar Turizm A.Ş. Personal Data Protection and Processing Policy, accessible at https://ekarglobal.com/article/kvkk.
PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER
Your processed personal data may be transferred to the Company’s business partners (partners providing call center services, partners providing roadside assistance in case of vehicle assistance, partners conducting satisfaction surveys, partners providing software and information technology services, third parties from whom services related to marketing and customer relationship management activities are obtained and other business partners we may obtain services from within the process), Anadolu Group Companies, shareholders and affiliates of the Company, authorized dealers with whom the Company has signed an authorized dealership agreement, legally authorized public institutions and organizations, administrative authorities, the General Directorate of Security, and persons and organizations permitted by the applicable legislation. If the Data Subject grants commercial electronic consent, their information will be transferred to IYS A.Ş. in a limited manner.
METHOD OF COLLECTING YOUR PERSONAL DATA AND LEGAL BASIS
Your personal data may be obtained by the Company through fully or partially automated means or through non-automated methods as part of the data recording system for the purposes listed above. Accordingly, it can be collected physically through the execution of the Agreement and printed forms, and electronically through the internet, cookies, online forms, SMS verification codes, and voice recording systems.
Your processed personal data may be processed and transferred for the purposes specified in this Clarification Text based on the legal grounds stated in Articles 5 and 6 of the Law, as well as the details specified below:
- Pursuant to Article 5/2-b of the Law, if explicitly provided for in the laws,
- Pursuant to Article 5/2-c of the Law, if necessary for the data controller to fulfill its legal obligation (Law No. 6563 on the Regulation of Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, and Related Legislation, Law No. 6502 on the Protection of Consumers, Turkish Commercial Code No. 6102, Tax Procedure Law No. 213, Turkish Code of Obligations No. 6098, Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed by These Publications, Law No. 1774 on Identity Notification in case of vehicle rental),
- Pursuant to Article 5/2-f of the Law, the legitimate interest of the data controller,
- Pursuant to Article 5/1 of the Law, in cases where the Data Subject has given explicit consent,
- Pursuant to Article 5/2-c of the Law, if necessary for the establishment or performance of a contract, processing personal data of the parties to the contract,
- Pursuant to Article 5/2-d of the Law, if made public by the Data Subject.
YOUR RIGHTS AS A DATA SUBJECT UNDER ARTICLE 11 OF THE LAW
As a Data Subject, you are informed that you have the following rights under Article 11 of the Law:
- To learn whether your personal data is being processed, and if so, to request information regarding it,
- To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
- To know the third parties to whom your personal data is transferred, domestically or abroad,
- To request the correction of your personal data if it is incomplete or inaccurately processed, and to request that the operation carried out in this context be communicated to the third parties to whom your personal data has been transferred,
- To request the deletion or destruction of personal data in cases where the reasons requiring processing have disappeared, even if it has been processed in compliance with the Law and other relevant legal provisions, and to request that the operation carried out in this context be communicated to the third parties to whom your personal data has been transferred,
- To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
- To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.
You can submit your applications regarding the above-mentioned rights by filling out the Ekar Turizm A.Ş. Data Subject Application Form, which can be accessed at the address of Ekar Turizm A.Ş., or by submitting it to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your applications will be concluded free of charge as soon as possible and within a maximum of thirty days, depending on the nature of your request; however, if the process incurs an additional cost, a fee may be charged from you according to the tariff determined by the Personal Data Protection Board.