GARENTA ULAŞIM ÇÖZÜMLERİ ANONİM ŞİRKETİ

    CUSTOMER INFORMATION NOTICE

    1. DATA CONTROLLER

    Your personal data may be processed by Garenta Ulaşım Çözümleri Anonim Şirketi (“the Company”), in its capacity as the data controller, within the scope described below, in accordance with the Law on the Protection of Personal Data No. 6698 (“the Law”).

    The natural person whose personal data is processed within the scope of accessing www.garenta.com.tr/ and the Garenta app (“the web”) is the Data Subject.

    2. PURPOSE OF PROCESSING YOUR PERSONAL DATA

    As a Data Subject, if you only access the web, your IP address information, other data associated with this information, and cookie information are processed. In accordance with the general principles stipulated in the Law for the processing of this information, these data are processed for the purposes of ensuring that the activities carried out by the Company are conducted in compliance with the legislation (to comply with information storage, reporting, and notification obligations prescribed by official institutions) and conducting analysis studies (activities that can be carried out to improve the quality of services and products).

    As a Data Subject, if you fill out the form or forms on the web, in addition to the personal data and processing purposes mentioned above, your name-surname information, tax identification number, province and district information, the number of existing vehicles in your institution and the number of requested vehicles, duration, phone number information, email address information, and your message are processed.

    Additionally, if you fill out the web membership form, your date of birth, gender information, driver's license information (license number, license class, place of issue, date of issue), gender information, T.R. Identity Number, and during your reservation processes, your credit card and Findeks information are processed.

    As a Data Subject, if you fill out the dealership application form, the company owner's or authorized person's name-surname information, phone number information, and email information are processed.

    For Data Subjects who grant consent for commercial electronic communication, consent information is also processed. The processing of all this information is carried out for the purposes of fulfilling legal obligations, ensuring organization and event management, conducting sales and after-sales processes for goods/services, marketing processes for products/services, and communication activities, in accordance with the general principles stipulated in the Law. Furthermore, if you procure vehicle rental services from our company or its authorized dealers, your personal data may be processed and stored by our company in the event of adverse incidents arising during the rental (such as fraud, breach of trust, theft, smuggling, driving under the influence, allowing another person to drive the vehicle), if this incident is deemed to pose a risk for future rentals.

    Detailed information regarding the purposes of processing your personal data by our Company can be found in the Garenta Ulaşım Çözümleri Anonim Şirketi Policy on the Protection and Processing of Personal Data, accessible at https://www.garenta.com.tr/kvk-politikasi/.

    3. PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF TRANSFER

    Your processed personal data may be transferred, in accordance with the general principles stipulated in the Law and within the personal data processing conditions specified in Articles 8 and 9 of the Law, for the purposes of ensuring the management of organizations and events carried out by the Company, conducting activities in compliance with the legislation, and carrying out marketing analysis studies, sales and after-sales support processes for goods/services, marketing processes for products/services, communication activities, and information security processes. This data may be transferred to the Company's business partners (call center service provider, satisfaction survey partner, software and IT service providers, third parties from whom the Company receives services for marketing and customer relationship management activities, and other business partners we may receive services from within the scope of the process), AG Anadolu Grubu Holding A.Ş. and its Companies, Company shareholders and affiliates, authorized dealers of the Company who have signed a dealership agreement with the Company, legally authorized public institutions and organizations, administrative authorities, persons and organizations permitted by current legislation, and banks and financial institutions. Additionally, for Data Subjects who rent a vehicle, data is transferred to the General Directorate of Security. If the Data Subject gives consent for commercial electronic communication, their information will be transferred on a limited basis to IYS A.Ş. (Message Management System Inc.).

    4. METHOD OF COLLECTION AND LEGAL BASIS OF YOUR PERSONAL DATA

    Your personal data may be collected by the Company for the purposes listed above, through fully or partially automated means or by non-automated means, provided that it is part of a data recording system. Accordingly, when using the web, data may be collected via the internet, cookies, and online web forms in the electronic environment (new member form, travel agencies form, corporate car rental form, dealership application form, contact us form).

    Your processed personal data may be processed and transferred for the purposes stated in this Information Notice, based on the legal reasons specified in Articles 5 and 6 of the Law and detailed below.

    If you, as a Data Subject, only access the web:

    • Based on Article 5/2-b of the Law, it is expressly provided for in the laws (Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications),

    • Based on Article 5/2-ç of the Law, it is necessary for the data controller to fulfill its legal obligation (Law No. 5651, Law No. 6563 on the Regulation of Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, and related legislation),

    • Based on Article 5/2-f of the Law, it is processed for reasons of the legitimate interest of the data controller.

    If you, as a Data Subject, access the web and depending on the nature of the form you fill out, in addition to the legal reasons mentioned above:

    • Based on Article 5/1 of the Law, the existence of explicit consent in cases where the Data Subject has given it,

    • Based on Article 5/2-c of the Law, it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of that contract,

    • Based on Article 5/2-b of the Law, it is expressly provided for in the laws (Law No. 1774 on Identity Declaration, applicable to Data Subjects who rent a vehicle),

    • Based on Article 5/2-d of the Law, it has been made public by the Data Subject himself/herself,

    are the legal reasons for processing.

    5. YOUR RIGHTS AS A DATA SUBJECT UNDER ARTICLE 11 OF THE LAW

    We inform you that, as a Data Subject, you have the following rights under Article 11 of the Law:

    • To learn whether your personal data is being processed, and to request information if it has been processed,

    • To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

    • To know the third parties to whom your personal data is transferred, in the country or abroad,

    • To request the rectification of your personal data if it is incomplete or incorrectly processed, and to request that the transaction carried out in this context be notified to the third parties to whom your personal data has been transferred,

    • To request the erasure or destruction of your personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the transaction carried out in this context be notified to the third parties to whom your personal data has been transferred,

    • To object to the emergence of a result to your detriment by analyzing the processed data exclusively through automated systems,

    • To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

    You can submit your requests regarding your rights listed above by filling out the Garenta Ulaşım Çözümləri Anonim Şirketi Data Subject Application Form, which can be accessed at https://images.garenta.com.tr/Garenta-Ilgili-Kisi-Basvuru-Formu.pdf, or by communicating them to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.