Personal data notice (KVKK)
- Platform
- Turkey Car Rental / turkiyearackiralama.com
- Business / data controller
- The trade title has not yet been reported by the administration.
- Communication
- info@turkiyearackiralama.com
The business name and address have not yet been completed. Until the management supplies this information and reviews the text against the business's actual practices, this text must not be treated as a complete legal notice.
Travel Companion
Travel Companion records include account IDs, routes, times, seats, declared expenses, vehicle and meeting details, participation status, messages, blocks and review records. They support matching, participation management, security and support investigations. Public listings exclude personal contact details. Vehicle and meeting information is shared with accepted participants; each conversation is available only to the relevant passenger, driver and authorised reviewing administrators. Completion is a driver declaration, not a payment or reward record. Existing personal data rights contact details remain applicable.
Service reviews and company ratings
Customers with an approved service can request publication of a 1–5 star rating and review. Records include the service relationship, account, company, rating, text, first submission month and moderation history. Only eligible published reviews contribute to public ratings. An anonymous account label and review number replace the customer’s name/contact/address; do not include personal data in the review text. Moderation reasons are visible only to the customer and administrator. Reviews may be edited or withdrawn; the text is removed when an administrator deletes the account.
The monthly company award is calculated once using the snapshot of eligible published reviews at administrator approval. The decision, review IDs, rating totals, counts and credits are retained for audit/financial history; later changes do not recalculate a closed award. A reward-ledger entry is not an on-chain transfer. Concerns and correction requests can be submitted through support.
Account security and private address
Member and company accounts are asked for a full name, country of residence and full address to complete account contact information and help reduce misuse. No identity number or identity document image is collected. These details are self-reported; official identity or residence verification is not performed. The private address is separate from the company service address and is not published or shared with other members or companies. The address is encrypted in the database and can be updated in the account profile. Authorized technical access must be restricted to necessary, lawful operations.
Email verification uses a single-use link sent through the configured SMTP provider and confirms mailbox access only. Links expire after 30 minutes; only a token hash is stored in the database. Expired records are cleaned during subsequent web requests, and resend limit records after one day. The private address is retained while the account is in use and this private account record is deleted when an administrator deletes the account. Backup retention, erasure schedules and other legal retention duties are managed separately by the operator. Requests for deletion or correction can be made through the contact channel. This notice is neither consent nor an identity verification certificate.
Scope of this text
This notice explains how personal data is processed for customer requests, company membership, user accounts and support. The privacy policy and terms of service are separate documents. Reading this notice does not, by itself, constitute explicit consent.
Data, purposes and legal reasons
| Action | Processed information | Purpose / basis |
|---|---|---|
| Membership and account | Name, email, role, password summary | Establishment and execution of membership service; KVKK m.5/2(c). |
| Rental request | Name, email, phone, location, dates, class, and demand grade | Providing the requested quote service and enabling contact with the relevant company; Article 5(2)(c). |
| Firm and wallet | Contact person details, company name, tax information, service area, bank transfer reference and transaction records | Providing company services, establishing or protecting a right, and complying with applicable legal obligations; Article 5(2)(c), (ç), (e). |
| Security and support | Session, trial limit key, transaction log, and application content | Service security and preventing misuse; legitimate interests balanced against fundamental rights, and protecting a right; Article 5(2)(e), (f). |
Passwords are not stored in plain text. Do not enter health information, identity documents, card details or other sensitive information that is unnecessary for this service in free-text fields. These forms do not request blanket, unrestricted consent for commercial messages or advertising.
To whom information is shared
The location, dates and vehicle class of a request are shown to approved companies whose service areas and vehicles match. The customer's name, phone number, email address and request notes are disclosed only to a company that successfully submits a paid reply to that request. Disclosure is limited to the quote and communication service requested. Platform administrators may access records as needed for operations and support.
Hosting and technical service providers may have access necessary to provide their services. Information may be disclosed to authorised public bodies where legally required. Password reset emails are sent through the configured SMTP provider, which processes the recipient address and message content. SMS and online payment providers are not integrated. Optional Google AdSense advertising is described in the advertising section below. If approximate location is enabled for the home page, the IP address is sent to ipwho.is; see the visitor count and location section below. The business must manage processing and transfers abroad using appropriate legal mechanisms and notices.
Collection method and storage
Information is collected electronically through web forms, sessions, user actions and support requests. Retention must be limited to the period necessary for the processing purpose and applicable statutory obligations. Once the purpose ends and no retention obligation remains, deletion, destruction or anonymisation must be carried out.
Deleting an account through the dashboard closes access and anonymises the user account; it does not automatically delete all past quotes, company records or financial records. Requests concerning those records are reviewed separately. This version has no automatic scheduled data disposal task; the business must implement its retention and disposal schedule.
Your rights and application
Your rights under Article 11 of the KVKK include learning whether your data is processed, requesting information, learning whether processing serves its purpose, identifying recipients, requesting correction and, where the conditions apply, deletion or destruction, and notification of these actions to recipients. You also retain the right to object to an adverse result arising solely from automated analysis and to seek compensation for damage caused by unlawful processing.
Send your request to info@turkiyearackiralama.com using your registered email address. You can obtain information about the process after the necessary checks of identity and authority to apply. Any postal and KEP channels supplied by the business are shown above. Applications are resolved as soon as possible, according to their nature, and within thirty days at the latest.
Source: KVKK application and response process; Communiqué on the obligation to inform.
Visiting counter and approximate location
The today/total counter counts sessions using a daily one-way identifier derived from the current server session; it does not claim to count individual people. It stores neither raw IP addresses nor device fingerprints. Daily identifiers are deleted after a window of no more than 48 hours; daily totals containing no personal data are retained.
If IP location is enabled to select home page slides by country and city, the direct connection IP address is sent to ipwho.is over HTTPS. Names, email addresses and account information are not sent. The estimated country and province are kept in the server session for no more than six hours; this is not precise physical location. The provider may process data abroad: the provider's privacy terms. Administrators can disable IP location in the site settings. Random cities are shown if location is unavailable. This location feature is not used to create advertising profiles.
Optional advertising
Google AdSense advertising may appear in guide placements enabled by management. Google ad code is not loaded before you accept advertising. Google may process IP addresses, device/browser information, cookies and ad interactions for delivery, security and measurement. Processing may take place outside Türkiye. Membership, quote and contact form fields are not sent to the advertising code.
Use “Advertising and cookie preferences” at the bottom of the page to accept or decline. The tak_ad_consent_v1 local record stores only this choice and its 180-day expiry. Declining does not prevent use of the site. Withdrawal stops new ad loading; cookies previously placed by Google can be removed separately in your browser settings. “Understood” in the information notice is not advertising consent. You can also make choices in Google’s separate consent messages.
Appearance preferences
Your chosen accessibility and appearance options are stored in this browser under tak_display_preferences_v1. No account information, page content or identity is stored in this record, and these appearance choices are not sent to the server. Reset appearance in the menu or clear your browser site data to remove them. Your language choice is kept separately in the server session.
Travel map and service rewards
Map choices are saved to your account; no precise location or GPS record is collected. Service reports, linked requests/offers, company confirmation, review notes and BBC reward/transfer history are kept to verify services and prevent duplicate rewards. Reports are visible only to the account holder, the relevant rental company and authorized admins; no public travel profile is created. A province marker or visit declaration does not verify a service.
The tab-session entry tak_discovery_visit prevents repeated province suggestions during the same visit; it contains no account, location or payment information. The server-session suggestion is renewed on a new visit after 30 minutes of inactivity.
BBC Wallet and support records
Your personal node address, last-read address activity and withdrawal requests are shown only to you and authorized admins. Node private keys are not transferred to this web application. The service reward ledger is separate from deposited BBC. Your current account password is verified for withdrawals and is not stored again. Support subjects, messages, authors and timestamps are kept to track issues and are not shared with other members. Support reply notifications appear in your account panel.
Restaurant applications
Business name, contact person, email, business phone, location, address, cuisine and description are processed to review the application and contact you. The contact person, email and internal review notes are not public. Only business information with a publication request and administrator approval appears in city guides and search. Use the contact channel in this notice for corrections, removal and personal data rights requests.