KVKK-Informationstext

Information Regarding the Protection of Personal Data

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), we are considered a data controller (Goblincar). We would like to inform you about how we process and transfer your personal data.

1. How We Collect Information

We may collect your personal data in connection with transactions you conduct with us, through your interactions with our websites, physical locations, mobile devices, or, to the extent legally permissible, from third parties.

2. Information Collected About You

The personal data we collect from you (including but not limited to your name, age, gender, contact information, residence, previous rental information, and credit card details) are proportional to the purposes of processing stated in Section 3 below.

3. How We Use Your Personal Data

3.1 Legal Reasons for Processing Your Personal Data Under Article 5 of the KVKK Are as Follows:

a) Your explicit consent to the processing of your personal data, b) It is explicitly provided for by the laws, c) It is mandatory for the protection of the life or physical integrity of the person or another person who is unable to express their consent due to actual impossibility or whose consent is not legally valid, d) It is necessary to process personal data for the establishment or performance of a contract, e) It is mandatory for the fulfillment of our legal obligations, f) The data have been made public by the data subject, g) It is mandatory for the establishment, exercise, or protection of a right, h) It is mandatory for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms.

3.2 Subject to the Conditions Specified in the KVKK, We May Use the Collected Information for the Following Purposes (Based on Your Explicit Consent and/or Legally Permitted Cases):

Managing vehicle rentals and commercial relationships, contacting you regarding vehicle rentals, and assisting you in these matters.
Performing customer service activities and conducting telephone conversations regarding customer satisfaction.
Verifying the driving and credit information (including personal data) provided by you through credit institutions, licensing authorities, fraud prevention agencies/databases, and other sources for the purpose of preventing fraud.
Contacting you regarding your incomplete membership form or reservation in the online environment.
Providing information about accidents you are involved in to relevant insurance databases. In this context, personal data processing may occur when necessary for the establishment, implementation, or defense of legal claims.
Communicating with you via commercial electronic messages using contact information (including customer satisfaction surveys, discounts, special offers, and/or services and/or marketing promotions, invitations, advertisements, celebrations, and survey applications).
Offering you better products and services.
Compiling statistics and analyses regarding the use of our websites, products, and services by our customers.
Protecting our rights and assets.
Providing you with more personalized and better services.
Planning and executing corporate sustainability activities.
Planning and implementing marketing processes for goods or services.
Planning and executing necessary processes to ensure and enhance customer loyalty.
Providing your personal data to government agencies that monitor road regulations during your rental to assist in the enforcement of traffic regulations.
Providing your personal data to the relevant tax office or authority, debt collectors, credit institutions, and other relevant institutions.
Processing/storing your personal data related to any incident arising from your or an additional authorized driver's relationship with us, in cases where you may be considered a risk for future rentals as a result of such an incident.
Combining the information you have provided with information related to your transactions with us, such as rental location and vehicle type. We may also combine this information with data obtained about you from third parties that assist us in fulfilling requests, maintaining our data, and optimizing our services.

4. How Your Personal Information May Be Shared and Sharing Purposes

Based on your explicit consent and/or legally permitted cases, your personal data may be shared with the following parties for the purposes specified in Section 3 above:

We may transfer (share) your personal data with Goblincar Holding Group entities (including EAN Data Services UK Limited as a data controller), our business partners (including our agents in Turkey), suppliers, and other service providers in Turkey or abroad (including information technology service providers and other consultants). Companies within the Goblincar Holding Group may use your personal data for the purposes specified in Section 3 and transfer your personal data to third-party service providers (within or outside Turkey).
We may transfer (share) your information with business partners, service providers, public institutions, and/or legally authorized private persons in cases where it is legally required and/or permitted by law, to protect the rights of you and third parties, provide administrative or technical support, and perform transactions outside Turkey.
Your personal data may be transferred to another company in the event of a transfer, ownership change, or restructuring of Goblincar Holding's affiliated companies or assets (in whole or in part).

If the location of the recipient of your personal data is considered a country that does not provide an adequate level of legal protection, we would like to indicate that we will ensure the legally required levels of protection and/or obtain your explicit consent for the transfer if legally necessary.

5. Your Rights Under the KVKK

Pursuant to the KVKK, you may apply to us to: a) Learn whether your personal data is processed, b) Request information if it has been processed, c) Learn the purpose of processing and whether it is used in accordance with its purpose, d) Know the third parties to whom it has been transferred domestically or abroad, e) Request correction if it has been incompletely or incorrectly processed, f) Request deletion or destruction within the framework of the conditions set forth in Article 7 of the KVKK, g) Request notification of the transactions made under (e) and (f) to third parties to whom your personal data has been transferred, h) Object to a result against you arising from the analysis exclusively through automated systems, i) Request compensation for damage if you suffer damage due to unlawful processing of your personal data.

You can use the above rights by sending your written request to Emek, Barış Blv. No:33, 01000 Seyhan/Adana, Turkey, or through other methods announced by the Personal Data Protection Board. Our company will evaluate and conclude your request in accordance with the KVKK. To provide an accurate response to your request, we kindly ask you to specify clearly which personal data your request is related to. We will conclude your requests within the framework of the KVKK within thirty days at the latest (free of charge if there is no cost involved). However, if the transaction requires an additional cost, a fee may be charged in the tariff determined by the Personal Data Protection Board. If the response to the applications exceeds ten (10) pages, a transaction fee of 1.00 (one) TL will be charged for each page. If a response is requested on a recording medium such as a CD or flash drive, a fee may be charged based on the cost of the requested recording medium.