KVKK Illumination Text

As TorlakAuto, we attach importance to your security. In this direction, here is information about the storage and protection of personal data within the scope of the Personal Data Protection Law No. 6698, which is regulated in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and personal data. 

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), any information relating to an identified or identifiable natural person is defined as personal data. Your personal data in our company; It may be recorded, changed, rearranged, transferred within legal limits, classified and updated in our systems for the reasons, purposes and methods described below, and your personal data may be processed in accordance with the conditions listed in the KVKK.

WHO IS THE DATA CONTROLLER?

Data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. 

WHAT PERSONAL DATA DO WE COLLECT?

The information we need may vary depending on the nature of the rental process, the damage situation, the use of customer loyalty programs, the campaigns used, and the services requested. You can find this information below under general categories:

Identity (Name-surname, signature, Turkish ID number, date of birth, photocopies of driver's license, ID card, passport, etc.)
Contact (phone, e-mail address, address, etc.)
Customer Transaction Information (Vehicle delivery form, rental agreement, detailed information about the rental transaction (fuel, date, HGS/OGS usage, etc.), TorlakAuto card information, policy information, substitute vehicle form, past rental information in our company, information about assistance services, flight information of the campaign companies, etc.)
Finance (Credit card information, payment information, Findeks information)
Audio and Visual Recordings (Call center recordings)
Occupation, title, workplace etc. information within the scope of customer loyalty programs and campaigns such as Özlük TorlakAuto card etc.)
Transaction Security Information (username and password information created for website or mobile application use)
Marketing (Survey, cookie records, rental history, preferences regarding campaigns and offers, etc.)
Legal Proceedings, Criminal Convictions and Security Measures (Traffic fines, information on criminal investigation processes, correspondence, minutes made by judicial authorities)
Vehicle (In case of accidents, damage, etc., damaged vehicle information, other vehicle information involved in the accident, license plate information, other information about vehicle use)
Damage (Damage information, accident report, damage photos, expertise report)
Health (alcohol report in case of accidents, health reports, etc., information on personal health status, disability information)

WHAT ARE THE PURPOSES OF PROCESSING YOUR PERSONAL DATA?

Your personal data are processed for the following purposes in accordance with the principles stipulated in the KVKK:

a) a) Carrying out rental offer, reservation and sales processes, making payment transactions, carrying out delivery-return transactions, carrying out after-sales support processes, especially damage and recourse processes, evaluating requests and complaints, confirming identity, carrying out insurance transactions, managing relations with business partners and/or suppliers, carrying out customer relations processes and providing necessary information to the customer within the scope of rental, creating and using your customer account.

b) Execution and follow-up of legal affairs and transactions, sharing information with authorized public institutions and organizations within the framework of the legislation, management of internet access records and ensuring data security.

c) Taking voice recordings during the call center process, requesting findeks information from customers, determining solvency and making financial background inquiries, preventing fraud and providing vehicle protection services, planning and executing risk management, conducting the necessary audit and control processes within the scope of company activities, reporting and reviews, making the website functional.

d) Contacting within the scope of marketing activities regarding our products and services, sending commercial electronic messages, providing personalized offers, conducting analysis, survey and satisfaction studies, planning and/or execution of product and/or service loyalty processes, conducting marketing processes specific to interested customers within the scope of cookie activities, conducting TorlakAuto card transfer processes.

TO WHOM AND FOR WHAT PURPOSES CAN YOUR PERSONAL DATA BE TRANSFERRED?

Your personal data may be transferred in connection with the purpose of transfer within the scope of the requirements of commercial life, in a limited and measured manner; to carry out after-sales support processes, risk management, determination of solvency and payment transactions, execution of damage and recourse processes, execution of insurance transactions, prevention of abuse, execution of assistance service processes, sending commercial messages and receiving support services for customer satisfaction surveys, conducting marketing activities, conducting and following up legal affairs and transactions, carrying out audit activities, carrying out activities in accordance with the legislation and sharing information with authorized public institutions and organizations within the framework of the legislation, only to the extent required by the service. and 9. of the LPPD to the following persons/organizations within the scope of the processing conditions specified in Articles 8 and 9 of the LPPD:

Dealers, services and parking lots that are our business partners within the framework of rental activities
Companies from which we receive assistance services, including towing services
Companies worked with in the case of corporate clients
Adjusters and insurance companies
Banks and financing companies
Organizations we receive consultancy on legal, financial, tax and operational issues
The agencies and marketing companies we support
Business partners and suppliers from whom we receive services in various fields

Group companies within Torlak Auto
Authorized public institutions and organizations

WHAT ARE THE METHODS AND LEGAL REASONS FOR COLLECTING YOUR PERSONAL DATA?

Your personal data is collected by our Company through the website, mobile applications, e-mail, call center, company officials, business partners, group companies and TorlakAuto, public institutions and organizations directly from you, our customer, or through these organizations in written/verbal form by non-automatic means or by automatic means from electronic media.

We use your personal data within the framework of the legal reasons listed in Articles 5 and 6 of the KVKK according to the nature of the transaction. Your personal data in connection with the processing purposes specified in the "What are the Purposes of Processing Your Personal Data?" section;

For the purposes specified in article (a), "it is necessary because it is directly related to the establishment and performance of the rental contract"; "the explicit consent of the person concerned" in case of processing health data in damage processes,
For the purposes specified in Article (b), "it is mandatory for the data controller to fulfill its legal obligation" and "it is expressly stipulated in the law",
"data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject" for the purposes set out in Article (c),
"the explicit consent of the person concerned" for the purposes set out in point (d)
based on legal grounds.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

Regarding the processing of your personal data, you can submit your requests regarding your rights listed below within the scope of Article 11 of the KVKK in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

1. To learn whether your personal data is being processed or not,

2. Request information if your personal data has been processed,

3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

4. To know the third parties in Turkey or abroad to whom your personal data is transferred,

5. To request correction of your personal data in case of incomplete or incorrect processing,

6. Request deletion or destruction of your personal data,

7. To request notification of the transactions within the scope of correction, deletion or destruction of your personal data to third parties to whom your personal data has been transferred,

8. To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,

9. To request the compensation of the damage in case you suffer damage due to unlawful processing of your personal data.

Since our Company may be obliged to keep the records and documents regarding the transactions carried out with its customers for a certain period of time within the scope of legal regulations; If you request the deletion, destruction or anonymization of your personal data and if there is a period determined by legal regulations, our Company will be able to fulfill this request at the end of the legal period. However, during this period, your personal data will not be processed by our Company except for legally mandatory situations.

You can always submit your requests regarding your personal data to us through the "Application Form Regarding Personal Data" or through different methods in accordance with the conditions set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. In addition, more detailed information and contact addresses regarding the application can be found in the form. This text may be updated periodically due to changes in Company policies and activities. You can visit our page periodically to access the most up-to-date version of the text.