Getir Araç Dijital Ulaşım Çözümleri Ticaret Anonim Şirketi User Data Processing Notice

 

As Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş (“GetirDrive” or the “Company”), we process your personal data as the data controller, in compliance with the Personal Data Protection Law no. 6698 (the “DP Law”) and its secondary legislation along with the precedents of Personal Data Protection Board (hereinafter together referred to as the “DP Legislation”). We have drafted this privacy notice (the “Notice”) to inform you about how we process your personal data.

1.    Your Processed Personal Data, Method of Collection, Purposes of the Processing and Legal Basis for Processing

GetirDrive collects and processes your personal data specified within Table-1 below, by means of fully automated and non-automated methods, based on the information you provide us with when you create an account on our application and when you use our services, and the information collected from the vehicle you rented. We process your personal data for the purposes explained within the Table-1 below, in accordance with the principles of the DP Law and in compliance with the DP Legislation.

Table-1

Purposes of the Processing of Your Personal Data

Your Personal Data

Legal Basis for Processing of Your Personal Data

·      Provision of Hourly, Daily or Monthly Vehicle Rental Services

·      Receiving Your Bookings and Meeting Your Cancellation Requests

·      Operating Goods / Services Sales Activities

·      Conducting Goods / Services Production and Operation Activities

·      Identity Information of Turkish Citizens (Name, Surname, Turkish ID Nr., Date of Birth, Information within Driving License)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods)

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr.)

·      Other Information (Driving Data Collected Through Vehicle)

Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

·      Operating After Sales Support Activities for Goods / Services

·      Conducting Customer Relationship Management Activities

·      Meeting Your Requests Regarding Goods and Services or Responding to Your Complaints

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Information on Rented Vehicle, Information on Rental and Use, User Requests and Complaints)

·      Receiving Payments and Conducting Collection Activities

·      Conducting Finance and Accounting Processes

·      Identity Information (Name, Surname, Turkish ID Nr.)

·      User Transaction Information (Invoicing Address, Information on Rental and Use, Information on Payments and Payment Methods)

·        Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

·        Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Conducting Communication Activities

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr., Email Address)

·      Managing Application Registration Activities

·      Creating Membership

·      Conducting Identity Verification Checks

·      Managing Contracting Processes

 

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

·      Transaction Security Information (IP Address, Device ID Nr., Password Information)

·      Conducting Our Activities in Accordance with the Legislation

·      Identity Information (Name, Surname, Turkish ID Nr., Driving License Information)

·      User Transaction Information (Invoicing Address, License Plate of Rented Vehicle, Date and Time of Rental, Payment Amount)

·      User Transaction Information (Invoicing Address, License Plate of Rented Vehicle, Date and Time of Rental, Payment Amount)

·      Location (Location Data)

·      Transaction Security Information (IP Address)

·      Other Information (Accident Information)

·        Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)

·        Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Fulfilling Our Legal Obligations in Cases We are Obliged to Notify Authorized Institutions or Organizations

·      Identity Information (Name, Surname, Turkish ID Nr.)

·      User Transaction Information (License Plate of Rented Vehicle, Date and Time of Rental)

·      Monitoring and Conducting Dispute and Legal Processes

·      Managing Execution Proceedings and Cost, Damage and Loss Collection Activities Arising from Rentals

·      Identity Information (Name, Surname, Turkish ID Nr., Driving License Information)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods)

·      Legal Transaction Information

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr.)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

·        Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

·      Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Conducting Information Security Processes

·      Operating / Auditing Business Activities

·      Managing Retention and Archiving Processes

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods)

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr., Password Information)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Ensuring the Security of Goods and Resources

·      Ensuring the Security of the Company Operations

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods)

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr.)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

·      Conducting Identity Verification Checks

·      Identity Information (Blood Type, Prosthesis Use Information and Photograph on Driving License)

·      Visual and Audio Records (Recordings During Registration)

Your consent to processing of your personal data (Article 5/1 of the PDPL)

·      Assessing Vehicle Driving Eligibility Status

·      Identity Information (Prosthesis Use Information on Driving License)

Your consent to processing of your personal data (Article 5/1 of the PDPL)

·      Provision of Personalized Campaigns, Promotions and Discounts

·      Operating Advertising, Campaign and Discount Processes

·      Conducting Marketing Activities for Goods and Services

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Information on Rented Vehicle, Information on Rental and Use)

·      Location (Location Data)

·      Marketing Information (Cookie Records, IDFA)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

Your consent to processing of your personal data (Article 5/1 of the PDPL)


 

2.    Transfer of Your Personal Data to Third Parties

The third parties to whom we share your personal data are obliged under our contractual relationship to protect and process your personal data with limitation to the purposes of the sharing, unless otherwise stipulated in the DP Legislation, and are under GetirDrive’s supervision. Your personal data specified in the Notice are shared with the third parties within Turkey or abroad, for the purposes and legal basis specified within the Table-2.

Table-2

Purpose of the Transfer of Your Personal Data

Transferred Personal Data

Recipients of Your Personal Data

Legal Basis for Transfer of Your Personal Data

·      Fulfilling Our Legal Obligations in Cases We are Obliged to Notify Authorized Institutions or Organizations

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr.)

·      User Transaction Information (License Plate of Rented Vehicle, Date and Time of Rental, Information on Rental and Use, Payment Amount, Vehicle Damage Information)

Authorized Person, Institution, or Organizations

Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)

·      Managing Rental and Damage Payment Collection Activities

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr.)

·      User Transaction Information (Information on Rental and Use, Information on Payments and Payment Methods)

Third Parties Providing Services on Payment Collection

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Procuring Finance, Communication, Technology Solutions, Business Development and Data Analytics Services for Conducting the Company’s Operations

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods, User Requests and Complaints, Date and Time of Rental)

·      Legal Transaction Information

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr., Password Information)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

·      Marketing Information (Cookie Records)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

Third Parties Providing Services on Conducting Day-to-Day Operations

·      Procuring Services for Infrastructure, IT and Software to Conduct Company Operations

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods, User Requests and Complaints, License of Plate Rented Vehicle, Date and Time of Rental)

·      Legal Transaction Information

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr., Password Information)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

·      Marketing Information (Cookie Records)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

External Infrastructure and IT System Service Providers

·      Responding to Your Requests and Complaints and Managing Customer Relations

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Information on Rented Vehicle, Information on Rental and Use, User Requests and Complaints)

Third Parties Providing Services on Call-Center and Survey Activities

·      Registering with Our Application

·      Conducting Identity Verification Checks

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Identity Information of Foreigners (Name, Surname, Date of Birth, Passport Nr., Date of Entrance, Nationality)

·      Visual and Audio Records (Recordings During Registration, Photograph on Driving License)

Third Parties Providing Services on Verification Check

·      Notifying Insurance Service Provider in Cases of Accidents and Damage

·      Identity Information (Name, Surname, Turkish ID Nr.)

·      User Transaction Information (Information on Rented Vehicle, Information on Rental and Use)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

Third Party Insurance Service Providers

·      Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·        Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

·      Procuring Assistance Services in Cases of Accidents and Damage

·      Identity Information (Name, Surname)

·      Contact Information (Mobile Phone Nr., Email Address)

Third Parties Providing Tow and Repair Services

·      Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·      Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

·      Procuring Legal Consultancy Services

·      Identity Information (Name, Surname, Turkish ID Nr., Driving License Information)

·      Contact Information (Mobile Phone Nr., Email Address)

·      User Transaction Information (Invoicing Address, Information on Rented Vehicle, Information on Rental and Use, Information on Payments and Payment Methods)

·      Legal Transaction Information

·      Location (Location Data)

·      Transaction Security Information (IP Address, Device ID Nr.)

·      Other Information (Accident Information, Driving Data Collected Through Vehicle)

Third Parties Providing Legal Consultancy Services

·      Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

·        Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

·      Procuring Software Support Services for Registration and Identity Verification Processes

·      Identity Information (Blood Type, Prosthesis Use Information and Photograph on Driving License)

·      Visual and Audio Records (Recordings During Registration)

Third Parties Providing Software Support Services

Your consent to processing of your personal data (Article 5/1 of the PDPL)

·      Procuring Digital Marketing Services for Conducting Company Operations

·      Contact Information (Email Address)

·      Marketing Information (Cookie Records, IDFA)

Third Parties Providing Assistance Services Digital Marketing Activities

Your consent to processing of your personal data (Article 5/1 of the PDPL)

 

3.      Your Rights Regarding Your Personal Data

In accordance with the Article 11 of the DP Law, you may apply to GetirDrive to be informed (i) whether your personal data is processed or not, (ii) to request information if your personal data is processed, (iii) to learn the purpose of your data processing and whether this/these data is/are used for intended purposes, (iv) to know the third parties to whom your personal data is transferred in Turkey or abroad, (v) to request the rectification of the incomplete or inaccurate data, if any, (vi) to request the erasure or destruction of your personal data under the conditions laid down in Article 7 of DP Law, (vii) to request notification of the operations carried out in compliance with (iv) and (v) to third parties to whom your personal data has been transferred, (viii) to object to the processing, exclusively by automatic means you’re your personal data, which leads to an unfavorable consequence for you and, (ix) to request compensation for the damage arising from the unlawful processing of your personal data.

 

You may use the following methods to exercise such rights and submit your requests to GetirDrive, in accordance with the DP Law and Article 5 of the Comminuqué on the Principles and Procedures for the Request to Data Controller published on Official Gazette numbered 30356 and dated 10.03.2018:

·        You may send your requests in written to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul, by verifying your identity on your own or through notary.

·        You may send your request to [email protected] by using your e-mail address registered in our systems, or to [email protected] registered e-mail address (KEP) by using your registered e-mail address (KEP), your secure electronic signature, your mobile signature or.

 

GetirDrive shall meet your duly requests in 30 (thirty) days. In the event that the request incurs a fee, fees determined by the Personal Data Protection Board shall be charged. Your request may either be accepted or rejected by clarifying the reasoning and our response shall be sent to you in written or through electronic medium. This data processing notice may be updated time to time in order to comply with amended terms and legal regulations.

 

Date of the Latest Update: Haziran 2022

 

Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş.