GEN RENT A CAR COMPANYCLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

This Clarification Text has been prepared by GEN RENT A CAR  Company for the purpose of clarifying the Company's customers regarding the processing of their personal data by the Company within the scope of the Law on the Protection of Personal Data No. 6698.

Detailed information on the processing of your personal data within the scope of this Clarification Text can be found  in the GEN RENT A CAR Company Personal Data Protection and Processing Policy at www.genrentacatr.com.

a) Methods of Obtaining Personal Data and Legal Reasons

Your personal data is collected electronically or physically. Your personal data collected for the legal reasons specified in this Clarification Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Planning and execution of the activities required for the recommendation and promotion of your personal data to the relevant persons by  customizing the products and services offered by the Company according to the likes, usage habits and needs of the relevant persons within the  framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, the Company   the execution of the necessary works by the business units and the execution of the relevant business processes in order to benefit the relevant persons from the products and services offered by the Company, the execution of the  necessary studies by the relevant business units for the realization of the commercial activities carried out by  the Company and the execution of the related business processes, the planning and execution of the commercial and / or business strategies of the Company and the  It is processed for the purposes of ensuring the legal, technical and commercial-occupational safety of the relevant persons who are in business relations with the Company.

c) Parties with whom Personal Data Can Be Shared and Purposes of Sharing

Your personal data, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, the planning and execution of the  activities required for the recommendation and promotion of the products and services offered by the Company to the relevant persons by customizing them according to the likes, usage habits and needs of the relevant persons,    the execution of the necessary works by the business units and the execution of the relevant business processes in order to benefit the relevant persons from the products and services offered by the Company, the execution of the  necessary studies by the relevant business units for the realization of the commercial activities carried out by  the Company and the execution of the related business processes, the planning and execution of the commercial and / or business strategies of the Company and the  Within the scope of ensuring the legal, technical and commercial-occupational safety of the relevant persons in business relations with  the Company, it may be shared with the Company's business partners and suppliers, legally authorized institutions and organizations and legally authorized private law legal persons.

d) Rights of Data Owners and Exercise of These Rights

As personal data owners, if you submit your requests regarding your rights specified below to the Company through the methods specified under the heading of Exercise of Rights by Data Owners, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.

In accordance with Article 11 of the Law,  you have the following rights as a personal data owner:

• To learn whether your personal data is processed or not,
• If your personal data has been processed, to request information about it,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred at home or abroad,
• In case your personal data is processed incompletely or incorrectly, to request their correction and to request that the transaction carried out within this scope be notified to the third parties to whom the personal data are transferred,
• To request the deletion or destruction of your personal data in the event that the reasons requiring the processing disappear despite being processed in accordance with the provisions of the Law and other relevant laws and to request that the transaction carried out within this scope be notified to the third parties to whom the personal data are transferred,
• To object to the occurrence of a result against the person himself by analyzing your processed data exclusively by means of automated systems,
• Requesting the compensation of the damage if your personal data is damaged due to unlawful processing.
• Article 28, paragraph 2 of the Law lists the situations in which data owners do not have the right to request and in this context;
• The processing of personal data is necessary for the prevention of crime or for the investigation of crimes,
• Processing of personal data made public by the data subject,
• The processing of personal data is necessary for the execution of supervisory or regulatory duties and for disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations that are public institutions based on the authority given by the law,
• The processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial matters,
• In such cases, the rights specified above for the data will not be exercised.
• According to Article 28, paragraph 1 of the Law, since the data will be outside the scope of the Law in the following cases, the requests of the data owners will not be processed in terms of these data:
• Processing of personal data by natural persons within the scope of activities related entirely to themselves or family members living in the same residence, provided that they are not given to third parties and the obligations regarding data security are complied with.
• Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
• Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or does not constitute a crime.
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations mandated and authorized by law in order to ensure national defense, national security, public security, public order or economic security.
• Processing of personal data by judicial or enforcement authorities in connection with investigation, prosecution, trial or execution proceedings.

e) Exercise of Rights by Data Owners

• Data subjects may apply [www.genrentacar" to exercise the above-mentioned rights. com] link "Form for Applications to be Made by the Personal Data Owner to the Data Controller".
• Applications will be made by one of the following methods, together with documents that will determine the identity of the data subject concerned:
• Fill out the form and submit a wet signed copy by hand, through a notary public or by registered letter with return receipt to Saray Cumhuriyet Mad. As Cad. 9/B Pursaklar-Ankara -Turkey ,
• Signing the form with a secure electronic signature issued within the scope of the Electronic Signature Law No. 5070  and sending it by  registered electronic mail to the genotomotiv@hs03.kep.tr address,
• Following a method prescribed by the Personal Data Protection Board.
• The Company responds to the data owners who want to use these rights within the limits stipulated in the Law within a maximum of thirty (30) days as stipulated in the Law. In order for third parties to request an application on behalf of personal data owners, there must be a special power of attorney issued by the data owner on behalf of the person who will apply through a notary.
• Although data owner applications are processed free of charge as a rule, charges may be made over the fee schedule stipulated by the Personal Data Protection Board.
• The Company may request information from the relevant person in order to determine whether the person making the application is the personal data owner or not, and may ask the personal data owner about the application in order to clarify the issues specified in the application.