Privacy Notice Under LPPD
In Sixt Turkey, we treasure your security. In this respect, we would like to inform you about our data process activities under the Law on The Protection of Personal Data no. 6698, which is intended to protect personal data and defend fundamental rights and freedoms of individuals, including the privacy of personal life.
Pursuant to the Law on The Protection of Personal Data no. 6698 (“LPPD”), personal data is defined as any information of an individual whose identity is or may be verified. Your personal data kept by our Company may be recorded, changed, edited, transferred subject to legal limits, categorized or updated and your personal data may be processed in line with conditions prescribed in the LPPD by means of such methods and for such purposes and reasons explained below.
Who is a Data Controller?
A data controller means a legal entity or individual that defines the purpose and means to process personal data and that is responsible for setting up and administrating a data entry system. In this respect, Sixt Turkey (the “Company”) processes your personal data under the LPPD in its capacity as the data controller.
Purpose of processing your Personal Data
Your personal data are processed in line with the purposes below in line with such principles prescribed in the LPPD.
- To make offers for products and services
- To handle sales processes of products and services
- To confirm IDs
- To conduct aftermarket support processes, including deliveries and returns, repair and maintenance works, claims and recourse procedures
- To monitor payment transactions
- To handle insurance procedures
- To sell second-hand cars
- To plan and execute customer relations management
- To size up solvency and to inquire into financial backgrounds
- To plan and execute risk processes
- To prevent abuse and to provide vehicle protection services
- To handle and monitor legal affairs and procedures
- To manage relations with business partners and/ or suppliers
- To contact about our products and services, to present customized offers, to carry out marketing, survey and satisfaction studies
- To manage marketing analysis and exercises
- To carry out social responsibility projects
- To ensure the management and data security of internet access records
- To carry out required audit and control processes under corporate operations and to submit reports and proceed with inspections
- To provide competent public agencies and bodies with information under the applicable law
- To evaluate requests and complaints.
To whom may your data be disclosed for what purposes?
Your personal data may be transferred to the following individuals/ entities subject to the data processing terms and conditions prescribed in Articles 8 and 9 of the LPPD only to the extent required for the services and limited to the purposes listed herein, including handling aftermarket support processes, risk management, determination of solvency, conduct of claims and recourse processes, completion of insurance transactions, prevention of abuses, collections, recourse, assistance services, outsourcing for sending commercial messages and customer satisfaction surveys, conduct of marketing studies, handling and monitoring legal procedures and works, audit operations and performance of operations in line with the applicable legislation as well as for data sharing with competent public agencies and institutions thereunder.
- Automotive companies, dealers or suppliers which are our business partners under leasing operations
- Service dealers and car parking lots
- Assistance service providers, including towing services
- Loss adjusters and insurers
- Banks and financial institutions
- Our legal, financial, tax and operational advisors
- Individuals or firms serving as an intermediary for second-hand car sales, including web sites
- Advertising agencies and marketing companies that we outsource our business/
- Courier companies and other cargo firms
- Business partners and suppliers that supply services to us in various areas
- Group companies of Bor Holding A.Ş.
- Competent public agencies and institutions
Method and legal grounds for collecting your personal data
Your personal data are collected by our Company either directly from you, our customers, via our call centres, company officers, business partners, online transactions or public agencies and institutions or alike, or automatically by electronic channels or in writing/ verbally by non-automatic means through those institutions.
In this respect, personal data collected are processed on the basis of the following legal grounds prescribed in Articles 5 and 6 of the Law:
“Provided to be directly related to the execution or performance of a contract, if processing the personal data of the contract parties is necessary”; “if it is mandatory for data controller to perform its legal obligations”; If it is required under the applicable law”; “provided not to cause any harm to fundamental rights and freedoms of relevant person, where data process is required for legitimate interests of the data controller.”
Your rights about your personal data
You can send your requests about your rights listed below under Article 11 of the LPPD in connection with the process of your personal data to us in line with the Communique on Terms and Procedures for Application to Data Controllers.
1.To inquire into whether your personal data are processed,
2. To ask information in case your personal data are processed,
3. To inquire into the purpose of process of your personal data or whether they are used in line with that purpose;
4. To know about third parties to whom your personal data are transferred in Turkey or abroad;
5. To ask for the correction in case your personal data are misprocessed or processed incompletely;
6. To ask for the deletion or destruction of your personal data;
7. To request that correction, deletion or destruction of your personal data shall be notified to third parties to which your personal data are transferred;
8. To object to a consequence against you that may arise as a result of analysis of your processed personal data via automatic systems only;
9. To claim damages to compensate your losses that you may sustain upon the unlawful process of your personal data.
Since our Company is under the obligation to keep records and documents in connection with transactions and deals with customers for a specific period of time under the legal regulations, in case you request that your personal data should be deleted, destroyed or anonymized and there is a legally defined statutory term, our Company may fulfil your request upon the expiry of such statutory term, but your personal data may not be processed by our Company during that term unless it is legally required..
You can send your requests about your personal data to us at all times by means of “Application Form for Personal Data” or by way of other methods in line with such terms and conditions set out in the Communiqué on Terms and Procedures for Application to Data Controllers. Also you can find detailed information about applications as well as contact details on the form.
This policy is subject to updates from time to time on account of changes to company policies and business operations. You may regularly visit our page to have access to the most current version of the text.