Getir Araç Dijital Ulaşım Çözümleri Ticaret Anonim Şirketi User Data Processing Notice


As Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş. (“GetirDrive”) , we take utmost care to process and protect the personal data of our customers, in accordance with the Personal Data Protection Law No. 6698  (“the PDPL”) , its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice  (“Notice”)  to inform you about how we process your personal data as a data controller through the website  www.getirarac.com   (“Website”)  and GetirDrive mobile application (“ Application ”) managed by GetirDrive.



Your Personal Data Processed by GetirDrive

Your personal data we process within the scope of the services we provide to you, are as follows:



Identity Information

Full name, Turkish ID number, birth date, information on the driver's license (full name, Turkish ID number, date of birth, place of birth, date of issuance, date of validity, place of application, driver registration number, date of issuance of license class, date of validity of license class, codes for additional information and restrictions, blood group, prosthetic device usage information), passport number, date of country to the country, nationality

Contact Information

The phone number that you registered to your GetirDrive account, e-mail address, billing address

Payment Information

Information about your payment methods and payment details

Transactional Data

Information on rented vehicle, information on rental and use, vehicle usage history, number of uses, Website/Application usage information, services visited within the Website/Application, your preferences and usage habits, invoice details, requests/complaints, comments, ratings, and reviews 

Marketing Information

Cookie records, advertisement ID, campaing usage information

Visual and Audio Recordings

Recordings during registration, photograph on driving license, audio recordings of your correspondence with the call center

Location

Your location data automatically processed by the Website should you allow it through your browser settings, or added manually by you

Transaction Security Information

Information about your device including its type, ID number, model, operating system and version, IP address, user transaction records, your log-in method to the Website (via Google/Facebook/Apple ID) and password information

Legal Transaction Information

Correspondence with judicial and administrative authorities and authorized public institutions and organizations, case and enforcement file contents

Other Information

Driving data collected through vehicle, information on safe driving habits, accident information



Purposes, Legal Grounds, and Methods for Processing Your Personal Data

We process your personal data, which we obtain through wholly automatic and partly automatic methods, via the Website, through the phone via the call center, and through e-mail if you contact us via e-mail, based on the legal grounds specified in Article 5 of the PDPL. The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:



Your Personal Data

Purposes of the Processing of Your Personal Data

Legal Basis for Processing of Your Personal Data

Identity Information, Contact Information, User Transaction Information, Location, Transaction Security Information, Other Information (Driving Data Collected Through Vehicle)

Provision of hourly, daily or monthly vehicle rental services; receiving your bookings and meeting your cancellation requests; operating goods / services sales activities; conducting goods / services production and operation activities.

Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

Identity Information, Contact Information, User Transaction Information

Operating after sales support activities for goods / services conducting customer relationship management activities; meeting your requests regarding goods and services or responding to your complaints.

Identity Information, User Transaction Information, Payment Information

Receiving payments and conducting collection activities; conducting finance and accounting processes.

Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Identity Information, Contact Information,

Conducting Communication Activities

Identity Information, Contact Information, Visual and Audio Records, Transaction Security Information

Managing application registration activities; creating membership; conducting identity verification checks; managing contracting processes.


Identity Information, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information)

Conducting our activities in accordance with the legislation.

Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Identity Information, User Transaction Information

Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations.

Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Monitoring and conducting dispute and legal processes ; managing execution proceedings and cost, damage and loss collection activities arising from rentals.

Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Conducting information security processes.

Operating / auditing business activities; managing retention and archiving processes.

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Ensuring the security of goods and resources; ensuring the security of the company operations; ensuring the safety of users.

Identity Information, Visual and Audio Records

Conducting identity verification checks.

Your consent to processing of your personal data (Article 5/1 of the PDPL)

Identity Information

Assessing vehicle driving eligibility status.

Your consent to processing of your personal data (Article 5/1 of the PDPL)

Identity Information, Contact Information, User Transaction Information, Location, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Provision of personalized campaigns, promotions and discounts; operating advertising, campaign and discount processes; conducting marketing activities for goods and services.

Your consent to processing of your personal data (Article 5/1 of the PDPL)



Transfer of Your Personal Data to Third Parties

Your personal data are transferred to third parties in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:



Transferred Personal Data

Purpose of the Transfer of Your Personal Data

Recipients of Your Personal Data

Legal Basis for Transfer of Your Personal Data

Identity Information, User Transaction Information

Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations.

Authorized Person, Institution, or Organizations

Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)

Identity Information, Contact Information, User Transaction Information

Managing rental and damage payment collection activities.

Third Parties Providing Services on Payment Collection

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Your consent to the transfer of your personal data (Article 9/1 of the PDPL)

Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Procuring finance, communication, technology solutions, business development and data analytics services for conducting the company’s operations.

Third Parties Providing Services on Conducting Day-to-Day Operations

Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Procuring services for infrastructure, it and software to conduct company operations.

External Infrastructure and IT System Service Providers

Identity Information, Contact Information, User Transaction Information

Responding to your requests and complaints and managing customer relations.

Third Parties Providing Services on Call-Center and Survey Activities

Identity Information, Visual and Audio Records

Registering with our application; conducting identity verification checks.

Third Parties Providing Services on Verification Check

Identity Information, User Transaction Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Notifying insurance service provider in cases of accidents and damage.

Third Party Insurance Service Providers

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

Identity Information, Contact Information

Procuring assistance services in cases of accidents and damage.

Third Parties Providing Tow and Repair Services

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)

Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)

Procuring legal consultancy services.

Third Parties Providing Legal Consultancy Services

Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)

Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)

Identity Information, Visual and Audio Records

Procuring software support services for registration and identity verification processes.

Third Parties Providing Software Support Services

Your consent to processing of your personal data (Article 5/1 of the PDPL)

Contact Information, Marketing Information

Procuring digital marketing services for conducting company operations.

Third Parties Providing Assistance Services Digital Marketing Activities

Your consent to processing of your personal data (Article 5/1 of the PDPL)



Your Rights Regarding Your Personal Data

Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:

  1. To be informed whether your personal data is processed or not

  2. If your personal data has been processed, to request information regarding the same

  3. To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose

  4. To be informed on the third parties to whom your personal data is transferred in the country or abroad

  5. To request the correction of your personal data if it is incomplete or incorrectly processed

  6. To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the PDPL

  7. If your personal data is deleted or destroyed within the scope of Article 7 of the PDPL and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred

  8. To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,

  9. To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data



How to Use Your Rights Regarding Your Personal Data

You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to GetirDrive:

In accordance with Article 13 of the PDPL, GetirDrive will finalize your requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest.

About This Notice

This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you on the Website.

Date of the Latest Update: July 2023