KVKK Information Text

As MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ, we attach importance to your security. In this regard, we would like to inform you about our data processing activities within the scope of the Personal Data Protection Law No. 6698, which was prepared for the purpose of protecting the fundamental rights and freedoms of individuals, especially the privacy of private life, and personal data.

According to the Personal Data Protection Law No. 6698 (“PDPL”), any information related to an identified or identifiable natural person is defined as personal data. Your personal data held by our Company may be recorded in our systems, changed, rearranged, transferred within legal limits, classified, updated, and processed in accordance with the conditions listed in the PDPL for the reasons, purposes and methods explained below.

WHO IS THE DATA CONTROLLER?

The data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. In this context, MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ processes your personal data within the scope of KVKK as the data controller.

WHAT PERSONAL DATA DO WE COLLECT?

The information we need may vary depending on the nature of the rental process, damage status, use of customer loyalty programs, campaigns used, and services requested. You can find this information generally under the categories below:

• Identity (Name-surname, signature, Turkish identity number, date of birth, driver’s license, ID, passport photocopies, etc.)
• Communication (Telephone, e-mail address, address, etc.)
• Customer Transaction Information (Vehicle delivery form, rental agreement, detailed information regarding the rental transaction (fuel, date, HGS/OGS usage, etc.), MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ card information, policy information, replacement vehicle form, past rental information in our company, information regarding assistance services, flight information of companies that run campaigns, etc.)
• Finance (Credit card information, payment information, Findeks information)
• Visual and Audio Records (Call center records)
• Personnel (MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ card, etc. customer loyalty programs and campaigns, information regarding profession, title, workplace, etc.)
• Transaction Security Information (Internet
• Marketing (Survey, cookie records, rental history, preferences regarding campaigns and offers, etc.) •
Legal Proceedings, Criminal Conviction and Security Measures (Traffic fines, information regarding criminal investigation processes, correspondences made by judicial authorities, minutes)
• Vehicle (Information regarding damaged vehicles in cases of accidents, damages, etc., information regarding other vehicles involved in the accident, license plate information, other information regarding the use of the vehicle)
• Damage (Damage information, accident report, damage photographs, expert report)
• Health (In cases of accidents, alcohol report, health reports, etc., information regarding personal health status, disability information)

WHAT ARE THE PURPOSES OF PROCESSING YOUR PERSONAL DATA?

Your personal data is processed in accordance with the principles set forth in the KVKK for the following purposes:

a) Carrying out rental offer, reservation and sales processes, making payment transactions, carrying out delivery-return transactions, carrying out after-sales support processes, especially damage and recourse processes, evaluating requests and complaints, verifying identity, carrying out insurance transactions, managing relations with business partners and/or suppliers, carrying out customer relations processes and providing necessary information to the customer within the scope of the rental, creating and using your customer account.

b) Carrying out and following up legal work and transactions, sharing information with authorized public institutions and organizations within the framework of legislation, managing internet access records and ensuring data security.

c) Taking voice recordings during the call center process, requesting findex information from customers, determining payment capacity and conducting financial background checks, preventing abuse and providing vehicle protection services, planning and executing risk management, conducting necessary audit and control processes within the scope of company activities, conducting reporting and inspections, and making the website functional.

d) Communicating within the scope of marketing activities regarding our products and services, sending commercial electronic messages, presenting personalized offers, conducting analysis, surveys and satisfaction studies, planning and/or executing product and/or service loyalty processes, conducting marketing processes specific to interested customers within the scope of cookie activities, conducting MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ card transfer processes.

TO WHOM AND FOR WHAT PURPOSES CAN YOUR PERSONAL DATA BE TRANSFERRED?

Your personal data will be transferred in a way that is relevant, limited and proportionate to the requirements of commercial life; The personal data may be transferred to the following persons/organizations only to the extent required by the service, within the scope of the processing conditions specified in Articles 8 and 9 of the KVKK, for the purposes of carrying out after-sales support processes, risk management, determining solvency and making payment transactions, carrying out damage and recourse processes, carrying out insurance transactions, preventing abuse, carrying out assistance service processes, receiving support services for sending commercial messages and customer satisfaction surveys, carrying out marketing activities, carrying out and following up legal transactions and transactions, carrying out audit activities, carrying out activities in accordance with the legislation and sharing information with authorized public institutions and organizations within the framework of the legislation:
• Dealers, services and car parks that are our business partners within the scope of rental activities
• Business partners and suppliers from whom we receive services on various issues
• Companies from whom we receive assistance services, including towing services
• Companies we work with in case of corporate customers
• Experts and insurance companies
• Banks and financing companies
• Organizations from which we receive consultancy on legal, financial, tax and operational issues
• Agencies from which we receive support and companies carrying out marketing activities
• Courier and other transportation companies
• Bor Holding A.Ş. group companies
• MA MOTORS AUTOMOTIVE INDUSTRY AND TRADE LIMITED COMPANY in global services
• Authorized public institutions and organizations

WHAT ARE THE METHOD AND LEGAL REASONS FOR COLLECTING YOUR PERSONAL DATA?

Your personal data is collected by our Company through the website, mobile applications, e-mail, call center, company officials, our business partners, group companies and MA MOTORS OTOMOTİV SANAYİ VE TİCARET LİMİTED ŞİRKETİ, public institutions and organizations directly from you, the customer, or through these institutions in written/verbal non-automatic ways or automatically from electronic media.
We use your personal data depending on the nature of the transaction, within the framework of the legal reasons listed in Articles 5 and 6 of the KVKK. In connection with the processing purposes specified in the section “What are the Purposes of Processing Your Personal Data?”, your personal data;
• “It is necessary because it is directly related to the establishment and execution of the rental agreement” for the purposes specified in Article (a); In case of processing of health data during damage processes, “the explicit consent of the relevant person is required”,
• For the purposes specified in article (b), “it is mandatory for the data controller to fulfill its legal obligation” and “it is clearly prescribed by law”,
• For the purposes specified in article (c), “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person”,
• For the purposes specified in article (d), “the explicit consent of the relevant person is required”

is processed based on legal reasons.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You can send us your requests regarding your rights listed below within the scope of Article 11 of the KVKK regarding the processing of your personal data in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
1. Learning whether your personal data has been processed,
2. Requesting information regarding your personal data if it has been processed,
3. The purpose of processing your personal data and whether they are used in accordance with their purpose
, 4. Knowing the third parties in the country or abroad to whom your personal data has been transferred,
5. Requesting correction of your personal data if it is processed incompletely or incorrectly,
6. Requesting deletion or destruction of your personal data,
7. Requesting notification of the operations within the scope of correction, deletion or destruction of your personal data to third parties to whom your personal data has been transferred,
8. Objecting to the emergence of a result against you by means of analysis of your processed data exclusively through automated systems,
9. Requesting compensation for the damages in case you suffer damages due to the unlawful processing of your personal data.

Since our Company may be obliged to keep records and documents related to transactions with its customers for a certain period of time within the scope of legal regulations; if you request that your personal data be deleted, destroyed or anonymized and there is a period determined by legal regulations, our Company may fulfill this request at the end of the legal period. However, during this period, your personal data will not be processed by our Company except in cases where it is legally mandatory.

You can always send us your requests regarding your personal data through different methods in accordance with the conditions set forth in the “Application Form Regarding Personal Data” or the Communiqué on the Procedures and Principles of Application to the Data Controller. You can also find more detailed information and contact addresses regarding the application in the form. This text may be updated at certain intervals due to changes in company policies and activities. You can visit our page at regular intervals to access the most up-to-date version of the text.