Data Protection Notice

Your personal data is processed in accordance with Law no. 6698 by our company, identified below, acting as data controller.

We process identity data (name), contact data (e-mail, telephone, address), customer transaction data (orders, invoices, current account movements), financial data (payment method and transaction reference), legal transaction data (contract acceptances) and transaction security data (IP address, session and sign-in records).

No special categories of personal data are requested or processed. During payment, the card number, expiry date and security code are not transmitted to our company and are processed directly within the payment institution's infrastructure.

Your data is processed to assess dealership applications, create membership records and secure accounts, form and perform the sales contract, run order and delivery processes, execute and reconcile payments and collections, issue invoices and receipts, manage requests and complaints, operate information security processes and meet storage and archiving duties.

Processing relies on the legal bases set out in article 5(2) of the Law:

• Expressly provided for by law
• Directly related to the formation or performance of a contract
• Necessary for the data controller to fulfil a legal obligation
• Necessary for the establishment, exercise or protection of a right
• Necessary for the legitimate interests of the data controller, provided the fundamental rights and freedoms of the data subject are not harmed

Your personal data is collected by wholly or partly automated means through the membership, dealership application and contact forms on the website, order and account operations in the dealer portal, e-mails and telephone calls you send us, and transaction results returned by the payment institution.

Your data may be transferred, limited to the purpose concerned, to the payment institution and banks in order to complete payment, to courier and freight companies so consignments can be delivered, to our accountant for statutory records, to hosting and e-mail infrastructure providers so the service can be delivered technically, and to competent public authorities within the scope of requests arising from legislation.

Under article 11 of the Law you have the right to:

• Learn whether your personal data is processed and, if so, request information about it
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties in Türkiye or abroad to whom the data is transferred
• Request correction where the data is incomplete or incorrectly processed
• Request erasure or destruction under the conditions of article 7 of the Law
• Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
• Object to a result against you produced solely by automated analysis
• Claim compensation where you suffer loss because of unlawful processing

Requests concerning your rights can be submitted in writing to our company address, or from the e-mail address registered in our system to the e-mail address below, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Your application is concluded free of charge within thirty days at the latest, depending on the nature of the request. Where the process incurs a cost, the fee in the tariff set by the Board may be charged.