Pursuant to the Law No. 6698 on the Protection of Personal Data (“Protection of Personal Data”), any information relating to an identified or identifiable natural person is defined as personal data. Your personal data held by our Company may be recorded in our systems, amended, rearranged, transferred within the legal limits, classified, and updated for the reasons, purposes, and methods explained below, and your personal data may be processed in accordance with the conditions set out in the Protection of Personal Data.
Who is the data controller?
The data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. Accordingly, Konak Car Rental Transfer Real Estate Construction Tourism Trade Limited Company, acting as the data controller, processes your personal data within the scope of the KVKK.
Which personal data do we collect?
The information we need may vary depending on the nature of the rental process, damage status, use of customer loyalty programs, benefits from campaigns, and the services requested. In general, you can find this information under the categories below:
- Identity (Name-surname, signature, Republic of Türkiye ID number, date of birth, driver’s license, ID card, passport photocopies, etc.)
- Contact (Phone number, e-mail address, address, etc.)
- Customer Transaction Information (Vehicle delivery form, rental contract, detailed information regarding the rental transaction (fuel, date, HGS/OGS usage, etc.), loyalty program information, policy information, replacement vehicle form, past rental information at our company, information regarding assistance services, flight information of the companies through which campaigns are run, etc.)
- Financial (Credit card information, payment information, Findeks information)
- Visual and Audio Records (Call center recordings)
- Employment/Professional (Profession, title, workplace, etc. within the scope of loyalty programs and campaigns)
- Transaction Security Information (Username and password information created for the use of the website or mobile application)
- Marketing (Survey data, cookie records, rental history, preferences regarding campaigns and offers, etc.)
- Legal Process, Criminal Conviction and Security Measures (Traffic fines, information regarding criminal investigation processes, correspondence with judicial authorities, records, reports)
- Vehicle (In cases such as accident, damage, etc., information on the damaged vehicle, information on other vehicles involved in the accident, license plate information, other information regarding vehicle use)
- Damage (Damage information, accident determination report, damage photos, expert report)
- Health (Alcohol report in cases of accidents, health reports and other information regarding personal health status, disability information)
What are the purposes of processing your personal data?
Your personal data is processed in line with the purposes set out below, in accordance with the principles stipulated in the Protection of Personal Data:
a) Carrying out rental quotation, reservation, and sales processes; making payment transactions; carrying out delivery and return transactions; conducting after-sales support processes, primarily damage and recourse processes; evaluating requests and complaints; verifying identity; carrying out insurance transactions; managing relationships with business partners and/or suppliers; conducting customer relationship processes and providing the customer with the necessary information within the scope of the rental; creating and using your customer account.
b) Carrying out and following up legal actions and transactions; sharing information with authorized public institutions and organizations within the framework of legislation; managing internet access logs and ensuring data security.
c) Recording calls during the call center process; requesting Findeks information from customers; determining payment capacity and conducting financial background inquiries; preventing abuse and providing vehicle protection services; planning and executing risk management; carrying out necessary audit and control processes within the scope of company activities and performing reporting and examinations; making the website functional.
d) Contacting you within the scope of marketing activities related to our products and services; sending commercial electronic messages; offering personalized proposals; performing analysis, surveys, and satisfaction studies; planning and/or executing loyalty processes for products and/or services; conducting customer-specific marketing processes within the scope of cookie activities; conducting loyalty program transfer processes.
For what purposes and to whom may your personal data be transferred?
Your personal data may be transferred, as required by commercial life, in a manner that is connected, limited, and proportionate to the purpose of transfer; for carrying out after-sales support processes, risk management, determining payment capacity and making payment transactions, conducting damage and recourse processes, carrying out insurance transactions, preventing abuse, carrying out assistance service processes, receiving support services for sending commercial communications and conducting customer satisfaction research, carrying out marketing activities, carrying out and following up legal actions and transactions, conducting audit activities, carrying out activities in compliance with legislation, and sharing information with authorized public institutions and organizations within the framework of legislation, only to the extent required by the service, within the scope of the processing conditions set out in Articles 8 and 9 of the Protection of Personal Data, to the following persons/institutions:
- Dealers, services, and parking lots that are our business partners within the scope of the rental activity
- Companies from which we receive assistance services, including towing services
- Companies worked with in cases of corporate customers
- Experts and insurance companies
- Banks and financing companies
- Organizations from which we receive consultancy on legal, financial, tax, and operational matters
- Agencies and companies conducting marketing activities from which we receive support
- Courier and other transportation companies
- Business partners and suppliers from which we receive services on various matters
- Authorized public institutions and organizations
What are the methods and legal grounds for collecting your personal data?
Your personal data is collected by our Company via the website, mobile applications, e-mail, call center, company officials, our business partners, and public institutions and organizations, directly from you as our customer or through these institutions, in written/oral form through non-automated means, or through automated means via electronic channels.
We use your personal data, depending on the nature of the processing, within the framework of the legal grounds listed in Articles 5 and 6 of the Protection of Personal Data. In connection with the processing purposes specified in the section “What are the purposes of processing your personal data?”, your personal data is processed based on the following legal grounds:
for the purposes specified in item (a), “being necessary for the establishment and performance of the rental contract”; and if health data is processed in damage processes, “having the explicit consent of the data subject”,
for the purposes specified in item (b), “being mandatory for the data controller to fulfill its legal obligation” and “being explicitly prescribed by law”,
for the purposes specified in item (c), “being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”,
for the purposes specified in item (d), “having the explicit consent of the data subject”.
These constitute the legal grounds on which your personal data is processed.
What are your rights regarding your personal data?
With respect to the processing of your personal data, you may submit your requests regarding your rights listed below within the scope of Article 11 of the Protection of Personal Data to us in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
1. To learn whether your personal data is processed,
2. If your personal data has been processed, to request information regarding such processing,
3. To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
4. To know the third parties to whom your personal data is transferred domestically or abroad,
5. To request the correction of your personal data if it is processed incompletely or incorrectly,
6. To request the deletion or destruction of your personal data,
7. To request that the operations carried out within the scope of correction, deletion, or destruction of your personal data be notified to third parties to whom your personal data has been transferred,
8. To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
9. To request compensation for damages if you suffer damage due to the unlawful processing of your personal data.
Since our Company may have an obligation to retain records and documents regarding transactions carried out with its customers for a certain period under legal regulations; if you request the deletion, destruction, or anonymization of your personal data and there is a period determined by legal regulations, our Company may fulfill your request at the end of the legal period. However, during this period, your personal data will not be processed by our Company except in cases that are legally mandatory.
You may submit your requests regarding your personal data at any time via “Application Form Regarding Personal Data” or through different methods in accordance with the conditions set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. In addition, you can find more detailed information regarding the application and the contact addresses in the form.
Updates to this text may be made from time to time due to changes in Company policies and activities. You may visit our page at regular intervals to access the most up-to-date version of the text.
