KVKK

PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

Data Controller: KYG GLOBAL TURİZM SANAYİ VE TİCARET LTD. ŞTİ. (the "Company")
Address: Altınova Mahallesi 138/3, Kepez / Antalya
Telephone: 0850 308 48 28
E-mail: [email protected]

1. General Information

As KYG GLOBAL TURİZM SANAYİ VE TİCARET LTD. ŞTİ., we hereby wish to inform you, in our capacity as data controller, regarding the processing of your personal data within the scope of the Law No. 6698 on the Protection of Personal Data (the "LPPD" — Kişisel Verilerin Korunması Kanunu). This Privacy Notice has been prepared pursuant to Article 10 of the LPPD.

2. Personal Data Processed

For the purpose of providing car rental services, our Company processes the following categories of your personal data:

Identity information: Name, surname, Turkish national identification number, date of birth, copy of identity document.
Contact information: Telephone number, e-mail address, residential address.
Driving licence information: Driving licence number, class, validity period, and copy of the licence.
Passport information (for foreign nationals): Passport number, nationality, copy of passport.
Customer transaction information: Reservation and rental records, contract details.
Location data: Location information obtained through the vehicle tracking system (GPS) installed in the rented vehicles.
Visual records: Closed-circuit television (CCTV) recordings maintained at the Company's offices for security purposes.
Legal proceedings information: Records relating to traffic fines, damages, and accidents.

3. Purposes and Legal Grounds for Processing

Your personal data shall be processed in reliance upon the legal grounds set forth under Article 5 of the LPPD — namely, the establishment and performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, and the legitimate interests of the Company — for the following purposes:

The establishment and performance of the car rental agreement;
The verification of customer identity and driving licence;
The execution of payment and invoicing processes;
Ensuring the security of the vehicle and locating it in the event of theft or loss;
The follow-up of traffic fines, damages, and accident-related processes;
Ensuring the security of the Company's premises;
The fulfilment of obligations arising from tax, commercial, and traffic legislation.

4. Transfer of Personal Data

Our Company does not share your personal data with third parties for marketing purposes or for any commercial benefit. Your data shall be shared, only where it is strictly necessary for the provision of the service and the fulfilment of legal obligations and in accordance with Articles 8 and 9 of the LPPD, with the following parties:

Banks and payment institutions: For the purpose of executing payment, pre-authorisation, and deposit transactions;
Authorised public authorities and institutions: Within the scope of legal obligations, with the General Directorate of Security (Emniyet Genel Müdürlüğü), traffic units, the Revenue Administration (Gelir İdaresi Başkanlığı), courts, and other competent authorities;
International reservation platforms: Where you make a reservation through price-comparison websites, your identity and contact information that is strictly necessary for the performance of the reservation shall be transferred to the relevant platform.

Save for the foregoing, your personal data is retained within our Company and is not shared with any third parties.

5. Method of Collection

Your personal data is collected by automated or partially automated means through our website, telephone, e-mail, our offices, rental agreements, the GPS systems installed in our vehicles, and the CCTV cameras located at our offices.

6. Retention Period

Your personal data shall be retained for the periods stipulated under the applicable legislation (such as ten (10) years for contracts and commercial records, and thirty (30) days for CCTV recordings). Upon expiry of such periods, the data shall be deleted, destroyed, or anonymised.

7. Data Security

Our Company takes all necessary technical and administrative measures to protect your personal data against unlawful access, loss, and alteration.

8. Your Rights

Pursuant to Article 11 of the LPPD, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is being used in accordance with such purpose; learn the third parties to whom your personal data has been transferred; request the rectification of personal data that has been processed incompletely or inaccurately; request the erasure or destruction of your personal data; object to the occurrence of any result that is to your detriment by means of analysis of your personal data exclusively through automated systems; and request compensation for damages arising from the unlawful processing of your personal data.

9. Application Method

In order to exercise the rights set forth above, you may submit your request:

In writing: By a wet-signed petition delivered to the address Altınova Mahallesi 138/3, Kepez / Antalya;
By e-mail: From your e-mail address registered in our system, to [email protected].

Your request shall be concluded free of charge within thirty (30) days at the latest.