Kvkk

THELEON OTOMOTİV TİCARET SANAYİ LIMITED COMPANY

PERSONAL DATA PROTECTION AND PROCESSING INFORMATION NOTICE

1. DATA CONTROLLER

Your personal data may be processed by THELEON OTOMOTİV TİCARET SANAYİ LIMITED COMPANY, acting as the Data Controller, and by the Lessor (“Company”), whose trade name is specified at the beginning of the Vehicle Rental Agreement General Terms, in accordance with the Personal Data Protection Law No. 6698 (“Law”), within the scope explained below.

2. PROCESSED PERSONAL DATA

Within the scope of your rental relationship, including the rental agreement executed with THELEON OTOMOTİV TİCARET SANAYİ LIMITED COMPANY, the following personal data are processed:

  • Identity Information: Name and surname, place and date of birth, age, national ID card, driver’s license information and copy, Turkish ID number, passport information and copy for foreign customers,

  • Contact Information: Address, e-mail address, telephone number, mobile phone number, residence certificate,

  • Financial Information: Bank account number, IBAN number, credit card information, Findeks (credit score) information,

  • Location information in case of roadside assistance services or notification of the presence of a vehicle tracking device in the vehicle, signature.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data are processed in compliance with the general principles stipulated by the Law, provided that the agreement is executed. Personal data are processed by the Company for the purposes of carrying out its commercial activities in accordance with legislation and Company policies (including compliance with reporting, record-keeping, information, and legal obligations imposed by official authorities), ensuring organization and activity management, fulfilling obligations arising from relevant legislation, managing customer relations and corporate communication processes, and ensuring the commercial and legal security of real and legal persons with whom the Company has business relations.

Your personal data are processed lawfully, fairly, in connection with the stated purposes, limited, and proportionate. Detailed information regarding the purposes of processing personal data can be accessed in the Personal Data Protection and Processing Policy of THELEON OTOMOTİV TİCARET SANAYİ LIMITED COMPANY, available at
https://www.theleoncarrental.com/.

4. PURPOSES OF TRANSFER OF PERSONAL DATA

Your processed personal data may be transferred, within the framework of Articles 8 and 9 of the Law, to legally authorized public institutions, judicial and administrative authorities, private legal entities and real persons permitted by legislation, institutions and organizations authorized to audit the Company, contracted payment service providers for fulfilling payment and financial obligations, business partners from whom services are obtained or with whom cooperation is established for conducting and improving Company activities, and suppliers when necessary, provided that data security measures stipulated in the Law are taken.

5. METHOD AND LEGAL BASIS FOR COLLECTION OF PERSONAL DATA

Your personal data may be obtained by the Company, within the scope of the purposes listed above, through fully or partially automated methods or non-automated methods provided that they are part of a data recording system. Accordingly, data may be collected physically through the execution of this agreement and printed forms, or electronically via the internet, cookies, online forms, SMS verification codes.

Processed personal data are handled within the scope of Personal Data Processing Conditions pursuant to Articles 5 and 6 of the Law and based on the legal grounds detailed below, for the purposes stated in this Information Notice:

  • Based on Article 5/1 of the Law, explicit consent of the data subject,

  • Based on Articles 5/2-b and 5/2-ç, where it is explicitly stipulated by law or mandatory for the data controller to fulfill its legal obligations (including Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, Turkish Commercial Code No. 6102, Tax Procedure Law No. 213, Turkish Code of Obligations No. 6098, Law No. 5651, and Law No. 1774 on Identity Notification in case of vehicle rental),

  • Based on Article 5/2-c, where processing is necessary for the establishment or performance of a contract,

  • Based on Article 5/2-d, where the data have been made public by the data subject,

  • Based on Article 5/2-f, for the legitimate interests of the Data Controller.

6. RIGHTS OF DATA SUBJECTS UNDER THE LAW

As a data subject, you may apply to THELEON OTOMOTİV TİCARET SANAYİ LIMITED COMPANY at any time to:

  • Learn whether your personal data are processed,

  • Request information if your personal data have been processed,

  • Learn the purpose of processing and whether data are used in accordance with that purpose,

  • Learn the third parties to whom personal data are transferred domestically or abroad,

  • Request correction of incomplete or inaccurate personal data,

  • Request deletion or destruction of personal data within the framework of Article 7 of the Law,

  • Request notification of third parties to whom personal data have been transferred regarding correction or deletion,

  • Object to results against you arising from analysis exclusively through automated systems,

  • Request compensation for damages incurred due to unlawful processing of personal data.

To exercise your rights, you may submit your request by completing the application form obtainable from the Company and sending it with a wet signature via notary public, registered mail with return receipt, or personal application, or by signing the electronic application form with a mobile signature or secure electronic signature and sending it via your KEP address or the e-mail address registered in the Company’s data recording system to
https://www.theleoncarrental.com/.

If responses are provided in writing, the Company will not charge a fee for responses up to ten pages; for each additional page exceeding ten pages, a processing fee of 10 Turkish Liras will be charged. If the response is provided on a recording medium such as CD or flash drive, the fee charged shall not exceed the cost of the recording medium.