EFOL OTOMOTİV SAN. ve TİC. A.Ş.
PERSONAL DATA PROTECTION AND PROCESSING INFORMATION NOTICE
1. DATA CONTROLLER
Your personal data may be processed by EFOL OTOMOTİV SAN. ve TİC. A.Ş. and CHAMP RENT A CAR, whose trade name is stated at the beginning of the contract, in its capacity as the Lessor, a party to these General Rental Agreement Terms (the “Company”), acting as data controller, within the scope explained below pursuant to the Personal Data Protection Law No. 6698 (the “Law”). The natural person whose personal data are processed within the scope of the Vehicle Rental Agreement General Terms (the “Agreement”) is the Data Subject.
2. PURPOSE OF PROCESSING YOUR PERSONAL DATA
If the Agreement is concluded with you as the Data Subject, and in compliance with the general principles stipulated in the Law, the following data may be processed: name–surname, Turkish ID number, address information, mobile phone information, signature, rented vehicle information, driver’s licence information and copy (licence no., licence class, place of issue, date of issue and licence details), ID card information and copy, location information if roadside assistance is received or if the vehicle is equipped with a tracking device as notified, audio recording, credit card and Findeks information, passport information and copy for foreign customers, and—where consent is given—commercial electronic communication consent. Your personal data are processed for the purposes of ensuring that the Company’s activities are carried out in compliance with legislation (complying with information retention, reporting and notification obligations required by public authorities and fulfilling legal obligations), organizing and managing events, conducting sales and after-sales processes for goods/services, carrying out marketing processes for products/services and communication activities, and conducting analytical studies (activities to improve the quality of services and products). Detailed information on the purposes of processing your personal data by the Company is available in the Personal Data Protection and Processing Policy accessible at https://champrentacar.com.
3. PARTIES TO WHOM YOUR PERSONAL DATA ARE TRANSFERRED AND PURPOSES OF TRANSFER
Your processed personal data may, in accordance with the general principles set out in the Law and within the personal data processing conditions specified in Articles 8 and 9 of the Law, be transferred—limited to the purposes of ensuring the Company’s activities are conducted in compliance with legislation; conducting sales and after-sales support processes for goods/services, communication processes, information security processes, marketing processes for products/services, marketing analysis studies, and organizing and managing events—to the Company’s business partners (the call center service provider partner, the roadside assistance provider if the vehicle receives such service, the partner conducting satisfaction surveys, partners providing software and information technology services, third parties from whom services related to the Company’s marketing and customer relationship management activities are obtained, and other business partners from whom we may receive services within the process), to Ercan Group Company, to the Company’s shareholders and affiliates, to the Company’s authorized dealers that have executed an authorized dealership agreement with the Company, to legally authorized public institutions and organizations, administrative authorities, the General Directorate of Security, and to persons and organizations permitted under applicable legislation. If the Data Subject gives commercial electronic communication consent, information will be transferred in a limited manner to İYS A.Ş.
4. METHOD AND LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA
Your personal data may be obtained by the Company for the purposes listed above, wholly or partially by automatic means, or by non-automatic means provided that they are part of a data recording system. Accordingly, data may be collected physically via execution of the Agreement and printed forms, and electronically via the internet, cookies, online forms, SMS verification codes, and audio recording systems. Your processed personal data may be processed and transferred for the purposes stated in this Information Notice on the basis of the data processing conditions in Articles 5 and 6 of the Law and the legal grounds detailed below:
- Pursuant to Article 5/2(b) of the Law, where it is expressly provided for by law, and pursuant to Article 5/2(ç) of the Law, where processing is necessary for the data controller to fulfill its legal obligations (including, without limitation, the Law on the Regulation of Electronic Commerce No. 6563, the Regulation on Commercial Communication and Commercial Electronic Messages and related legislation, the Consumer Protection Law No. 6502, the Turkish Commercial Code No. 6102, the Tax Procedure Law No. 213, the Turkish Code of Obligations No. 6098, the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, and, in case of vehicle rental, the Law on Identity Notification No. 1774),
• Pursuant to Article 5/2(f) of the Law, where processing is necessary for the legitimate interests of the data controller,
• Pursuant to Article 5/1 of the Law, where the Data Subject has given explicit consent,
• Pursuant to Article 5/2(c) of the Law, where processing is necessary for the establishment or performance of a contract, provided that it is directly related to the conclusion or performance of the Agreement,
• Pursuant to Article 5/2(d) of the Law, where the data have been made public by the Data Subject.
5. YOUR RIGHTS AS THE DATA SUBJECT UNDER ARTICLE 11 OF THE LAW
As the Data Subject, you have the following rights under Article 11 of the Law:
• To learn whether your personal data are processed and, if processed, to request information regarding such processing,
• To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
• To know the third parties to whom your personal data are transferred domestically or abroad,
• To request the correction of your personal data if they are incomplete or incorrectly processed and to request that third parties to whom the data have been transferred be notified of the correction,
• Despite being processed in compliance with the Law and other relevant legislation, to request the deletion or destruction of your personal data if the reasons requiring processing cease to exist, and to request that third parties to whom the data have been transferred be notified of the deletion/destruction,
• To object to any result to your detriment arising from the analysis of the processed data exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to unlawful processing of your personal data. You can submit your applications regarding the rights listed above to the Company via the website https://champrentacar.com. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest; however, if the process requires an additional cost, a fee may be charged from you according to the tariff to be determined by the Personal Data Protection Board.
