CASTLE RENT A CAR AUTOMOTIVE INDUSTRY AND TRADE LIMITED COMPANY
PROTECTION AND PROCESSING OF PERSONAL DATA
CUSTOMER INFORMATION TEXT
Data Controller
Under the Law on Protection of Personal Data numbered 6698 ("Law"), Castle Rent A Car Otomotiv San. Tic. Ltd. Şti. ("Company"), acting as the data controller, attaches great importance to the protection of your personal data.
Purpose of Processing Personal Data
Your collected personal data may be processed within the scope of the following purposes ("Purposes") and within the personal data processing conditions specified in Articles 5 and 6 of the Law in order to carry out the necessary work by our business units to benefit you from the products and services provided by our Company and to execute the relevant business processes, to carry out the necessary work by our relevant business units for the realization of the commercial activities conducted by our Company and the related business processes, and to ensure the legal, technical, and commercial-business security of our Company and the relevant individuals in business relations with our Company:
Regarding Castle products and services;
• Ensuring your benefit from our hourly/daily/monthly car or tire rental service and taking reservations or fulfilling cancellation requests within this scope,
• Conclusion and execution of rental agreements,
• Tracking of your passage information within the scope of the fast pass system (HGS) and similar systems with the vehicle allocated to you and management of penalties in this way,
• Location tracking,
• Tracking of fuel level,
• Recording of arrival location in case of using car-sharing service,
• Execution of vehicle sales,
• Provision of vehicle maintenance services,
• Execution of after-sales support services,
• Provision of vehicle expertise service,
• Execution of vehicle spare parts and accessories sales,
• Provision of installation services,
• Execution of tire sales.
Regarding all our products and services;
• Verification and/or activation processes related to your records and transactions,
• Creation of appointments and providing offers,
• Opening of sales records, online/offline payment, and invoicing activities,
• Conclusion or performance of the sales contract due to your purchase of our Company's products and services,
• Fulfillment of information and promotion activities about our products and services,
• Creation, monitoring, or cancellation of memberships,
• Provision of vehicle protection services,
• Ensuring the security of our company's operations and vehicles,
• Execution of after-sales support services,
• Conducting accounting and financial processes,
• Conducting financial risk assessments of customers,
• Receiving, evaluating, and concluding your requests, questions, complaints, and suggestions,
• Updating customer information,
• Ensuring compliance with the retention obligations stipulated in the legislation,
• Evaluation of the applications you have submitted to the Company regarding the exercise of your rights specified in Article 11 of the Law regarding your personal data processed by our Company and the conclusion of these applications in accordance with the legislation, as well as the performance of necessary procedures within this framework,
• Preservation of records during the general statute of limitations period to serve as evidence in potential future disputes,
• Planning and execution of customer relationship management processes,
• Monitoring and improving activities related to services,
• Fulfillment of official institution requests and provision of information to authorized institutions in accordance with legislation,
• Execution of information security processes,
• Conducting audit and ethical activities,
• Planning and execution of customer satisfaction and corporate communication activities,
• Conducting sweepstakes, campaigns, competitions, promotions, or advertising activities,
• Providing additional benefits to loyalty program members,
• Processing your health data in case of involvement in an accident for the purpose of providing after-sales support services, provided that you have given your consent,
• Transfer and processing of the username, password, and other account information belonging to your membership accounts on our website or applications to membership accounts of websites and/or applications belonging to our Company's brands, and
• Processing of your identity, contact, customer transaction, marketing, and vehicle-insurance data by our Company for the purposes of customizing the products and services offered by our Company according to your preferences, usage habits, and needs, and sending commercial electronic messages such as advertisements, promotions, campaigns, and similar communications to your contact information if you have given your consent.
Processed Personal Data and Who and For What Purpose They Can Be Transferred
Your collected personal data may be transferred to our business/solution partners, suppliers, legally authorized public institutions, and legally authorized private individuals within the framework of the personal data processing conditions and purposes specified in Article 8 of the Law. You can access detailed information about the parties to whom your personal data is transferred from the Policy.
In case of benefiting from Castle Car Rental services;
Your identity, contact, customer transaction, financial, and marketing data may be shared within the scope of providing daily or monthly car rental services, booking, execution of lease agreements, cancellation requests, tracking service-related activities, providing additional benefits to loyalty program members, and creating, tracking, or canceling memberships. In accordance with the decision of the Personal Data Protection Board numbered E-67322700-045.02-0000137706 dated 04.04.2023, within the framework of the personal data processing conditions specified in Article 9 of the Law.
Method of Collecting Personal Data and Legal Basis
Your personal data is collected by our Company through electronic means such as our website, mobile applications, social media accounts, email, call center, and your vehicle usage; and through physical means such as cargo/post, fax, face-to-face meetings, within the framework of the legal bases specified in Articles 5 and 6 of the Law, as well as directly related to the establishment or performance of a contract.
• Sale of vehicles,
• Provision of cash vehicle purchase services,
• Conducting vehicle purchase and sale processes through tender,
• Conducting second-hand vehicle sales,
• Ensuring that you benefit from our hourly/daily/monthly car or tire rental service, taking reservations, and fulfilling cancellation requests,
• Ensuring that you benefit from our long-term car or tire rental service, taking reservations, and fulfilling cancellation requests,
• Providing valet service,
• Providing vehicle maintenance services,
• Providing vehicle expertise service,
• Providing HGS / OGS services,
• Fulfillment of periodic vehicle maintenance processes,
• Provision of additional services such as fleet vehicle rental insurance, accident and damage management, as per your request,
• Execution of lease agreements and their execution,
• Execution of vehicle spare parts and accessory sales,
• Ensuring reservation, rental, and cancellation procedures are carried out,
• Calling for a tow truck and providing roadside assistance in case of accidents and breakdowns,
• Recording the arrival location in case of using the car-sharing service,
• Conducting tire sales,
• Providing assembly services,
• Creating appointments and providing offers,
• Opening of sales records, online/offline payment, and invoicing activities,
• Conclusion or performance of the sales contract due to your purchase of our Company's products and services,
• Updating customer information,
• Conducting verification and/or activation processes related to your records and transactions,
• Creation, monitoring, or cancellation of memberships,
• Provision of vehicle protection services,
• Execution of after-sales support services,
• Providing additional benefits to loyalty program members.
Laws and the Legal Basis for Data Processing:
Based on the legal requirement for laws to expressly provide for it and for our Company to fulfill its legal obligations:
• Fulfillment of official institution requests and provision of information to authorized institutions in accordance with legislation,
• Ensuring compliance with the retention obligations stipulated in the legislation,
• Evaluation of the applications you have submitted to the Company regarding the exercise of your rights specified in Article 11 of the Law regarding your personal data processed by our Company and the conclusion of these applications in accordance with the legislation, as well as the performance of necessary procedures within this framework.
Based on the legal requirement for establishing, using, or protecting a right:
• Receiving, evaluating, and concluding your requests, questions, complaints, and suggestions,
• Preserving records during the general statute of limitations period to serve as evidence in potential future disputes.
Based on the legal requirement not to harm the fundamental rights and freedoms of the data subject and for the legitimate interests of the data controller:
• Fulfillment of information and promotion activities about our products and services,
• Ensuring the security of our company's operations and vehicles,
• Monitoring your passage information within the scope of the fast passage system (HGS) and similar systems allocated to you and managing the penalties incurred as a result,
• Conducting verification and/or activation processes related to your records and transactions,
• Conducting accounting and financial processes,
• Conducting financial risk assessments of customers,
• Planning and execution of customer relationship management processes,
• Tracking and improving activities related to services,
• Planning and execution of customer satisfaction and corporate communication activities,
• Conducting sweepstakes, campaigns, competitions, promotions, or advertising activities.
With your explicit consent:
For your benefit from our products and services; analysis of your driving performance and determination of a low-risk rate in order to offer you customized pricing for the insurance product, discount on the insurance product, earning points based on driving, and providing advantages linked to points,
Processing your health data in case of involvement in an accident for the purpose of providing after-sales support services,
Processing your identity, contact, customer transaction, marketing, vehicle, and insurance data by our Company for the purposes of customizing the products and services offered by our Company according to your preferences, usage habits, and needs, and sending commercial electronic messages such as advertisements, promotions, campaigns, and similar communications to your contact information if you have given your consent.
Rights Specified in Article 11 of the Law:
• As the data subject, we inform you that you have the following rights under Article 11 of the Law:
• To learn whether personal data is processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred, whether domestically or abroad,
• To request correction of personal data if it is incomplete or incorrectly processed and to request notification of the transaction made within this scope to third parties to whom personal data are transferred,
• To request deletion or destruction of personal data if the reasons requiring their processing cease to exist, despite being processed in accordance with the Law and other relevant laws, and to request notification of the transaction made within this scope to third parties to whom personal data are transferred,
• To object to the occurrence of a result against oneself by analyzing the processed data solely through automated systems,
• If personal data is processed unlawfully, to demand compensation for damages incurred.
You can access the Personal Data Protection Law Text by clicking the link.
TR
EN