Personal Data Protection Act (PDPA)
Within the scope of the Personal Data Protection Act No. 6698 (“PDPA”), we are considered the data controller (Es Rent a Car). We would like to inform you about how we process and transfer your personal data.
1. How We Collect Information
We may collect your personal data through your interactions with us, through our websites, at physical locations, via your mobile device, or—where legally permitted—from third parties.
2. Information Collected About You
The personal data we collect from you (including but not limited to your name, age, gender, contact information, place of residence, previous rental history, and credit card details) is proportionate to the purposes specified in Section 3 below.
3. How We Use Your Personal Data
3.1
In accordance with Article 5 of the PDPA, the legal grounds for processing your personal data are as follows:
a) Your explicit consent to the processing of your personal data,
b) Cases expressly permitted by law,
c) When it is necessary to protect the life or physical integrity of the person who is unable to give consent due to actual impossibility or whose consent is not legally valid,
d) When processing is necessary for the establishment or performance of a contract,
e) When processing is necessary for compliance with a legal obligation,
f) Where the personal data has been made public by the data subject,
g) When data processing is necessary for the establishment, exercise, or defense of a legal claim,
h) When processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not violated.
3.2
Subject to the conditions set forth in the PDPA, we may use the collected information for the following purposes (based on your explicit consent and/or where legally permitted):
-
Managing the car rental and commercial relationship, contacting you about rentals, and supporting you in this regard
-
Performing customer service activities and conducting customer satisfaction calls
-
Verifying driving and credit information (including personal data) through credit agencies, licensing authorities, fraud prevention databases, and other sources, for the purpose of fraud prevention
-
Contacting you regarding incomplete online membership forms or reservations
-
Providing accident-related data to relevant insurance databases. Processing in this context may be necessary for legal claims
-
Contacting you via commercial electronic messages (email, SMS, phone, etc.) for customer satisfaction surveys, discounts, special offers, services, marketing campaigns, invitations, advertisements, celebrations, and surveys
-
Offering better products and services
-
Compiling statistics and analyses about customer use of our websites, products, and services
-
Protecting our rights and assets
-
Providing more personalized and optimized services
-
Planning and executing corporate sustainability efforts
-
Planning and carrying out marketing processes for goods or services
-
Planning and executing processes to maintain and enhance customer loyalty
-
Sharing your data with government agencies enforcing traffic regulations during your rental period
-
Sharing your personal data with tax authorities, debt collection agencies, credit institutions, and other relevant institutions
-
Processing/storing data related to incidents involving you or additional authorized drivers that may pose a risk for future rentals
-
Combining your provided data with transactional data such as rental location and vehicle type, and integrating it with information obtained from third-party service providers assisting in fulfilling requests, maintaining data, and optimizing services
4. How and Why Your Personal Information May Be Shared
Based on your explicit consent and/or where legally permitted, your personal data may be shared with the following parties for the purposes outlined in Section 3:
-
Es Rent A Car (as the data controller), including our agents in Turkey, suppliers, and other service providers (including IT providers and consultants) within Turkey or abroad. Es Rent A Car may transfer personal data to third-party service providers for the purposes specified in Section 3.
-
Where legally required or permitted, your data may be shared with business partners, service providers, public institutions, or legally authorized private persons to protect your or third-party rights, provide administrative or technical support, or to conduct business outside of Turkey.
-
In case of partial or complete transfer, ownership change, or restructuring of Es Rent A Car or its affiliates/assets, your personal data may be transferred to another company.