KVKK Information Notice

1. Data controller

This notice covers the online vehicle marketplace operated under the Otomedik brand.

• Legal name: Şahıs Şirketi
• Address: Denizli / Pamukkale
• KVKK requests: [email protected]
• Phone: 0551 409 75 75

2. Personal data categories

The following personal data may be processed to provide the service:

• Identity: full name or company name
• Contact: email, phone, optional WhatsApp and web / social links
• Account: account type, profile details, verified-member display, ratings
• Business profile: description, working details, staff, location
• Listings: title, description, price, city/district, photos and vehicle details
• Messaging: message content between the parties
• Booking requests: selected rental dates, status and quoted amount
• Images: profile, listing and business photos
• Reviews: rating, comment and the author’s display name
• Payment records: order details for digital services bought from Otomedik. Card numbers are not stored by Otomedik; card payments are handled by a licensed payment institution
• Website usage and conversion measurement: if you consent, page type, journey step, listing / order identifiers, value and currency; one-way hashes of contact and account identifiers
• Mobile-app usage statistics: only if you consent in the mobile app

Optional tax number and tax office on business accounts are visible only to the account owner and are not shown on public profiles.

3. Processing purposes

Personal data is processed to:

• Create and manage accounts
• Publish listings and operate the marketplace
• Display dealer, rental-company and repair-service profiles
• Enable messaging
• Forward rental booking requests
• Display reviews
• Provide digital services bought from Otomedik (such as listing promotion) and collect payment
• Protect security and prevent abuse
• Comply with legal duties
• Enable website usage and conversion measurement when you consent
• Enable usage measurement in the mobile app when you consent

We do not send marketing email or commercial electronic messages.

4. Legal bases

Performance of a contract (KVKK Art. 5/2-c). Accounts, listings, messaging, booking requests, directory profiles and digital services bought from Otomedik.

Provided by law / legal obligation (KVKK Art. 5/2-a and 5/2-ç). Retention or disclosure required by competent authorities.

Explicit consent (KVKK Art. 5/1). Non-essential website and mobile-app usage / conversion measurement and push notifications. These are not bundled into registration; you can choose analytics and marketing separately and change them later.

Legitimate interest (KVKK Art. 5/2-f). Security, fraud prevention and operating the platform.

The KVKK checkbox at registration acknowledges that you have read this notice. The terms checkbox is contractual acceptance.

5. How data is collected

Data is collected from you (registration, profile, listing, messaging, booking requests, reviews and purchases), from sign-in or address-lookup providers you use, from administrator account actions, and from website or mobile-app usage measurement when you consent. Web measurement does not transfer message or listing-description content; contact and account identifiers are one-way hashed before transfer.

6. Transfers and third parties

Personal data may be disclosed to the following recipients as needed to run the service:

• Infrastructure for sign-in, file hosting and, if you consent, website / mobile usage and conversion measurement
• Address search and map services
• Database and server hosting
• PAYTR Ödeme ve Elektronik Para Kuruluşu A.Ş. for card payments
• Competent public authorities where legally required

Some of this infrastructure may involve processing outside Türkiye. Transfers are made as needed to provide the service.

7. Retention

Account data is kept while your account exists. Listings, messages, booking requests and payment records may be kept for the service relationship and as required by law.

You may request deletion at [email protected]. Records subject to a legal retention duty may be kept until that period ends.

8. Data subject rights

Under KVKK Art. 11 you may apply to the controller to learn whether your data is processed, request information, learn the purpose, know the recipients, request correction, request deletion or destruction, request that those steps be notified to recipients, object to a result against you from automated systems, and request compensation for unlawful processing.

Apply at: [email protected]

This notice does not limit your right to complain to the Personal Data Protection Board.

9. Contact and updates

KVKK requests: [email protected]

This notice is version 1.2, effective 2026-10-27. Material changes increment the version.

English is a courtesy translation; Turkish prevails.