This is a translation provided for convenience. The Turkish original is the governing text.
1. Identity of the data controller
- Data controller: Pehril Büyükkorkmaz – Grandes Rent a Car
- Address: Güzelyurt Mah. 26092 Sok. No: 3 İç Kapı No: 1, Aksu/Antalya
- Telephone and WhatsApp: +90 505 134 83 70
- Email: grandesrentacar@gmail.com
2. Personal data processed
The following categories of personal data may be processed in connection with car rental, reservations, contact and statutory notifications:
- Identity data: first name, surname, Turkish ID number, date of birth, nationality, identity card or passport details.
- Contact data: telephone number, email address and, where required, postal address.
- Driver data: driving licence number, category, expiry date and driving details.
- Reservation and rental data: collection and return dates, handover points, the vehicle rented, additional driver details, the rental agreement, additional services and customer requests.
- Financial data: the rental charge, payment method, invoice, collection, deposit and refund records. Payment card details may be processed through the secure systems of the bank or authorised payment institution.
- Vehicle use data: mileage, fuel level, damage and accident records, handover and return photographs, HGS toll passages, traffic and parking records.
- Transaction security data: website transaction logs, IP address, date and time information, cookie records and technical records created to maintain system security.
- Legal process data: records relating to requests, complaints, notices, litigation, enforcement, insurance and disputes.
3. Purposes of processing
- Receiving and concluding reservation requests
- Forming and performing the car rental agreement
- Carrying out vehicle handover and return
- Verifying customer identity and driving licences
- Making the required notifications through the Rental Vehicle Notification System
- Handling payment, collection, deposits, invoicing and accounting
- Providing additional services such as an additional driver, child seat or delivery
- Managing insurance, damage, accident, roadside assistance and maintenance processes
- Tracking tolls, traffic fines, parking and similar vehicle use charges
- Responding to customer requests, suggestions and complaints
- Maintaining the security and operation of the website
- Meeting legal obligations and protecting legal rights
- Responding to requests from authorised public bodies
4. Method of collection and legal basis
Your personal data may be collected electronically or on paper through website reservation forms, telephone, WhatsApp, email, face-to-face meetings, vehicle handover forms, rental agreements, rental software, payment records and authorised public systems.
Processing is based on the following legal grounds: where expressly provided for by law; where necessary to form or perform a contract; where necessary for the controller to meet a legal obligation; where compulsory for the establishment, exercise or protection of a right; and where necessary for the controller's legitimate interests, provided this does not harm your fundamental rights and freedoms.
Where a processing activity requires explicit consent, that consent is obtained separately from this notice. This document is not a consent form.
5. Transfer of personal data
Your personal data may be transferred to the following groups of recipients, limited to the purpose of processing and with the necessary security measures in place:
- The Directorate General of Security, the Rental Vehicle Notification System and other authorised public bodies
- Courts, prosecutors, law enforcement and other competent authorities
- Tax offices, financial advisers and accounting service providers
- Insurers, loss adjusters, roadside assistance, maintenance and repair providers
- Banks and authorised payment service providers
- Toll, parking and related transport service providers
- Reservation, hosting, information technology and technical support providers
- Legal advisers and authorised representatives
6. Transfers abroad
Where email, website, mapping, social media or similar technology services based outside Türkiye are used, personal data may be transferred abroad to a limited extent. Such transfers are carried out in accordance with Article 9 of Law no. 6698 and with the necessary security measures.
7. Retention
Your personal data is retained for as long as the purpose of processing requires and within the statutory retention periods set out in the applicable legislation. Once the retention period ends and no other legal ground for processing exists, the data is erased, destroyed or anonymised.
8. Your rights under the KVKK
Under Article 11 of Law no. 6698 you may apply to the data controller to:
- Learn whether your personal data is being processed
- Request information about that processing where it has taken place
- Learn the purpose of processing and whether the data is used in line with it
- Know the third parties to whom the data has been transferred, in Türkiye or abroad
- Request the correction of data that has been processed incompletely or incorrectly
- Request erasure or destruction under the conditions set out in the law
- Request that correction, erasure or destruction be notified to third parties the data was transferred to
- Object to a result reached against you through analysis by automated systems
- Claim compensation where you have suffered loss as a result of unlawful processing
9. How to apply
You may submit requests under the KVKK in writing or by email, together with information verifying your identity and an explanation of your request.
- In writing: Güzelyurt Mah. 26092 Sok. No: 3 İç Kapı No: 1, Aksu/Antalya
- By email: grandesrentacar@gmail.com
This text is provided for information. The binding document is the rental agreement you sign at handover.