Getir Araç Dijital Ulaşım Çözümleri Ticaret Anonim Şirketi User Data Processing Notice
As Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş. (“GetirDrive”), we take utmost care to process and protect the personal data of our customers, in accordance with the Personal Data Protection Law No. 6698 (“the PDPL”), its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice (“Notice”) to inform you about how we process your personal data as a data controller through the website www.getirarac.com (“Website”) and GetirDrive mobile application (“Application”) managed by GetirDrive.
Your personal data we process within the scope of the services we provide to you, are as follows:
| Identity Information | Full name, Turkish ID number, birth date, information on the driver's license (full name, Turkish ID number, date of birth, place of birth, date of issuance, date of validity, place of application, driver registration number, date of issuance of license class, date of validity of license class, codes for additional information and restrictions, blood group, prosthetic device usage information), passport number, date of country to the country, nationality |
| Contact Information | The phone number that you registered to your GetirDrive account, e-mail address, billing address |
| Payment Information | Information about your payment methods and payment details |
| Transactional Data | Information on rented vehicle, information on rental and use, vehicle usage history, number of uses, Website/Application usage information, services visited within the Website/Application, your preferences and usage habits, invoice details, requests/complaints, comments, ratings, and reviews |
| Marketing Information | Cookie records, advertisement ID, campaing usage information |
| Visual and Audio Recordings | Recordings during registration, photograph on driving license, audio recordings of your correspondence with the call center |
| Location | Your location data automatically processed by the Website should you allow it through your browser settings, or added manually by you |
| Transaction Security Information | Information about your device including its type, ID number, model, operating system and version, IP address, user transaction records, your log-in method to the Website (via Google/Facebook/Apple ID) and password information |
| Legal Transaction Information | Correspondence with judicial and administrative authorities and authorized public institutions and organizations, case and enforcement file contents |
| Other Information | Driving data collected through vehicle, information on safe driving habits, accident information |
Purposes, Legal Grounds, and Methods for Processing Your Personal Data
We process your personal data, which we obtain through wholly automatic and partly automatic methods, via the Website, through the phone via the call center, and through e-mail if you contact us via e-mail, based on the legal grounds specified in Article 5 of the PDPL. The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:
| Your Personal Data | Purposes of the Processing of Your Personal Data | Legal Basis for Processing of Your Personal Data |
| Identity Information, Contact Information, User Transaction Information, Location, Transaction Security Information, Other Information (Driving Data Collected Through Vehicle) | Provision of hourly, daily or monthly vehicle rental services; receiving your bookings and meeting your cancellation requests; operating goods / services sales activities; conducting goods / services production and operation activities. | Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL) |
| Identity Information, Contact Information, User Transaction Information | Operating after sales support activities for goods / services conducting customer relationship management activities; meeting your requests regarding goods and services or responding to your complaints. | |
| Identity Information, User Transaction Information , Payment Information | Receiving payments and conducting collection activities; conducting finance and accounting processes. | Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL) Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) |
| Identity Information, Contact Information | Conducting Communication Activities | |
| Identity Information, Contact Information, Visual and Audio Records, Transaction Security Information | Managing application registration activities; creating membership; conducting identity verification checks; managing contracting processes.
| |
| Identity Information, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information) | Conducting our activities in accordance with the legislation. | Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL) Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) |
| Identity Information, User Transaction Information | Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations. | |
| Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Monitoring and conducting dispute and legal processes; managing execution proceedings and cost, damage and loss collection activities arising from rentals. | Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL) Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) |
| Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Conducting information security processes. Operating / auditing business activities; managing retention and archiving processes. | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) |
| Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Ensuring the security of goods and resources; ensuring the security of the company operations; ensuring the safety of users. | |
| Identity Information, Visual and Audio Records | Conducting identity verification checks. | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
| Identity Information | Assessing vehicle driving eligibility status. | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
| Identity Information, Contact Information, User Transaction Information, Location, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Provision of personalized campaigns, promotions and discounts; operating advertising, campaign and discount processes; conducting marketing activities for goods and services. | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
Transfer of Your Personal Data to Third Parties
Your personal data are transferred to third parties in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:
| Transferred Personal Data | Purpose of the Transfer of Your Personal Data | Recipients of Your Personal Data | Legal Basis for Transfer of Your Personal Data |
| Identity Information, User Transaction Information | Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations. | Authorized Person, Institution, or Organizations | Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL) |
| Identity Information, Contact Information, User Transaction Information | Managing rental and damage payment collection activities. | Third Parties Providing Services on Payment Collection | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) Your consent to the transfer of your personal data (Article 9/1 of the PDPL) |
| Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Procuring finance, communication, technology solutions, business development and data analytics services for conducting the company’s operations. | Third Parties Providing Services on Conducting Day-to-Day Operations | |
| Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Procuring services for infrastructure, it and software to conduct company operations. | External Infrastructure and IT System Service Providers | |
| Identity Information, Contact Information, User Transaction Information | Responding to your requests and complaints and managing customer relations. | Third Parties Providing Services on Call-Center and Survey Activities | |
| Identity Information, Visual and Audio Records | Registering with our application; conducting identity verification checks. | Third Parties Providing Services on Verification Check | |
| Identity Information, User Transaction Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Notifying insurance service provider in cases of accidents and damage. | Third Party Insurance Service Providers | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL) |
| Identity Information, Contact Information | Procuring assistance services in cases of accidents and damage. | Third Parties Providing Tow and Repair Services | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL) |
| Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle) | Procuring legal consultancy services. | Third Parties Providing Legal Consultancy Services | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL) |
| Identity Information, Visual and Audio Records | Procuring software support services for registration and identity verification processes. | Third Parties Providing Software Support Services | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
| Contact Information, Marketing Information | Procuring digital marketing services for conducting company operations. | Third Parties Providing Assistance Services Digital Marketing Activities | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
Your Rights Regarding Your Personal Data
Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:
How to Use Your Rights Regarding Your Personal Data
You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to GetirDrive:
In accordance with Article 13 of the PDPL, GetirDrive will finalize your requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest.
About This Notice
This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you on the Website.
Date of the Latest Update: July 2023