Privacy and Data Protection Notice

1. Data controller

Your personal data is processed by [To be filled in: owner’s full name or company name] (Oto Range) as the data controller.

• Address: Esenkent, Dudullu OSB Kadosan Oto Sanayi Sitesi, No: 20, E Blok, 34775 Ümraniye/İstanbul
• Phone: 0532 261 40 76
• Email: [To be filled in: email address for data protection requests]

2. Personal data processed and how it is collected

The site has no contact form, user accounts, visitor analytics or advertising tools. Your personal data is collected in the following cases and ways:

• When you visit the site: The server hosting the site may automatically keep access logs such as IP address, date and time of access, page viewed and browser information, for the site to work and stay secure.
• When you contact us via WhatsApp or by phone: Your phone number, your name if you share it, the content of the message or call, and information about your vehicle (make, model, licence plate, description of the fault, photos and videos you send). This data is provided by you and collected electronically (WhatsApp) or verbally (phone).
• Map: The contact section of the home page includes Google Maps. When you reach this section, the map is loaded by Google; your IP address and browser information are sent to Google, Google may use cookies, and this processing is subject to Google’s own privacy policy.

3. Purposes and legal grounds

• To respond to your service or information request, provide service for your vehicle and communicate with you during this process: processing is directly related to the formation or performance of a contract (KVKK Art. 5(2)(c)).
• To meet invoicing, accounting and other legal record-keeping obligations for the service provided: processing is necessary to comply with a legal obligation of the data controller (KVKK Art. 5(2)(ç)).
• To protect our rights in a possible dispute: processing is necessary for the establishment, exercise or protection of a right (KVKK Art. 5(2)(e)).
• To keep the site secure and working (server access logs): processing is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5(2)(f)).

4. Transfer of personal data

Your personal data may be transferred to the following recipients, limited to the purposes above:

• WhatsApp: When you choose to write to us on WhatsApp, your messages are transmitted through the infrastructure of the service provider WhatsApp (Meta) and may be processed on servers abroad. Legal basis for this transfer: [To be filled in: legal basis for transfer abroad under KVKK Art. 9 (lawyer review)].
• Hosting: Server access logs are kept by [To be filled in: hosting provider and server country], which hosts the site.
• Records and accounting: [To be filled in: where records are kept and who they are shared with (e.g. accountant)].
• Competent public authorities and courts: Only where required by law and to the extent requested (KVKK Art. 8).
• Google: When the map in the contact section loads, as described above.

5. Retention period

Your personal data is kept for as long as necessary for the purpose for which it is processed and for the retention periods set out in the applicable legislation; when these periods end, it is erased, destroyed or anonymised.

6. Cookies

Our site does not use cookies of its own and does not store any information in your browser. When Google Maps on the home page loads, Google may use its own cookies.

7. Your rights

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• learn whether your personal data is processed,
• request information if your personal data has been processed,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• know the third parties in Türkiye or abroad to whom your personal data is transferred,
• request correction if your personal data is incomplete or inaccurate,
• request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
• request that correction, erasure or destruction be notified to third parties to whom your personal data has been transferred,
• object to a result against you arising from the analysis of your data exclusively by automated systems,
• claim compensation if you suffer damage due to unlawful processing of your personal data.

8. How to apply

You can send requests regarding these rights in writing to Esenkent, Dudullu OSB Kadosan Oto Sanayi Sitesi, No: 20, E Blok, 34775 Ümraniye/İstanbul, or by email to [To be filled in: email address for data protection requests] from an email address you have previously given us and that is in our records, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Your request will be concluded free of charge within thirty days at the latest, depending on its nature; if the process requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged (KVKK Art. 13).

9. Updates

This notice is updated when necessary. Last updated: [To be filled in: publication date].