In order to process and safeguard all personal data belonging to our customers and all individuals associated with our company in accordance with the Personal Data Protection Law No. 6698 (KVKK), we process your personal data as the "Data Controller" as defined under KVKK, in the manner described below and within the limits mandated by applicable legislation.
1. PURPOSE
Your collected personal data will be processed and used within the scope of our commercial activities for the following purposes: enabling our business units to carry out the necessary work to provide you with the products and services offered by our Company; fulfilling the requirements of the services provided by our Company; obtaining necessary documents; making applications; conducting insurance transactions upon request; carrying out banking transactions (credit and others); customizing and recommending products and services according to your preferences, usage habits, and needs; informing you about advertisements and campaigns; ensuring the legal and commercial security of our Company and the individuals with whom our Company has a business relationship; and determining and implementing our Company's commercial and business strategies. Processing is carried out under the lawful conditions set forth in KVKK Article 5/a "Explicitly provided for by law," 5/c "Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract," 5/ç "Mandatory for the data controller to fulfill its legal obligation," 5/e "Data processing is mandatory for the establishment, exercise, or protection of a right," and 5/f "Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
2. DATA CONTROLLER AND REPRESENTATIVE
Pursuant to KVKK, your personal data may be processed by SANDIKÇI OTO SAN. VE TİC. LTD. ŞTİ. as the data controller, within the scope described below.
3. TO WHOM AND FOR WHAT PURPOSE IT MAY BE TRANSFERRED AND USED
4. DATA TO BE PROCESSED, STORED, USED, OR SHARED
The Company;
SPECIAL CATEGORIES OF PERSONAL DATA: Biometric signature, photograph (via copies of identity documents such as ID cards, driver's licenses, passports, etc.), camera footage, location information (via vehicle tracking systems)
OTHER PERSONAL DATA: First name, last name, Turkish ID number, passport number, address, date of birth, e-mail address, signature, driver's license information (license class, driver registration number, issue date, expiry date, place/authority of application/approval, class issue date, class expiry date), phone numbers, occupation information, nationality information, ID/passport data
processes, stores, uses, or shares. Your personal data shared with us will not be shared with third parties outside the purposes of processing and sharing stipulated by the Law, or without your explicit consent.
5. METHOD OF PERSONAL DATA COLLECTION
Personal data is collected through any verbal, written, or electronic means (website, mobile applications, call center, etc.) for the purposes stated above.
6. RIGHTS OF THE DATA SUBJECT
KVKK Article 11-(1): Everyone has the right to apply to the data controller and request the following regarding themselves; a) Learning whether personal data is being processed, b) Requesting information if personal data has been processed, c) Learning the purpose of processing personal data and whether it is being used in accordance with its purpose, d) Knowing the third parties to whom personal data has been transferred domestically or abroad, e) Requesting the correction of personal data if it has been processed incompletely or incorrectly, f) Requesting the deletion or destruction of personal data within the framework of the conditions set forth in Article 7, g) Requesting that the third parties to whom personal data has been transferred be notified of the transactions carried out pursuant to sub-paragraphs (d) and (e), h) Objecting to the occurrence of a result against the person by means of the analysis of processed data exclusively through automated systems, i) Requesting compensation for damages in case of loss due to unlawful processing of personal data. Pursuant to Article 13, paragraph 1 of Law No. 6698, your request to exercise the rights specified above must be submitted to our Company in "writing" or by other methods determined by the Personal Data Protection Board.
7. EXERCISING YOUR RIGHTS
