USER DISCLOSURE TEXT
GÜR-SEL TURİZM TAŞIMACILIK VE SERVİS TİCARET A.Ş. ("Gürsel" or "Company") ensures the security of your personal data with great sensitivity. Gürsel, in terms of processing personal data, holds the status of "data controller" within the scope of the Law on the Personal Data Protection Law No. 6698 ("PDPL") in relation to the individuals whose personal data is processed ("Data Subjects"). In this context, Gürsel, in accordance with the principles set forth in the PDPL, meticulously handles the processing, deletion, destruction, anonymization, transfer, informing of the Data Subjects, and ensuring data security of your personal data.
This Disclosure Text is prepared and provided to inform you, as a customer/user ("User") of the mobile application ("Application") developed by Gürsel, that your personal data will be processed and stored in accordance with the law and in compliance with the obligations of our Company under the PDPL, in the context of your use of the Application.
Scope and Purpose of the Disclosure Text
This Disclosure Text explains the methods and legal grounds for collecting personal data, the personal data processed when you use the Application as a User, the purposes for which such personal data is used, to whom and for what purposes personal data may be transferred, the cases for erasing, destroying, and anonymizing personal data, and the rights of Data Subjects and how these rights can be exercised.
Data Controller’s Identity
Through the data collection methods mentioned below, regarding your shared personal data, the Data Controller is registered with the Istanbul Trade Registry under registration number 304963, with MERSIS number 0439034903200018, and is based at the address Soğanlık Orta Mah. Sok. Bektaş No:1 Kartal/İstanbul under the name GÜR-SEL TURİZM TAŞIMACILIK VE SERVİS TİCARET A.Ş.
Your Processed Personal Data
Identity
Name-surname, date of birth, gender, Turkish ID number/passport number, nationality, driver's license registration number
Contact Us
Telephone number, e-mail address
Finance
Legal action
Marketing
IBAN number, debt amount, invoice number, payment and payment methods
Correspondence with judicial authorities, information in the case file
Location-based campaign data, usage-based campaign data
Customer Transaction
date of membership, customer ID, complaint and suggestion records, trip details, usage details, call center records
Transaction Security
IP address, device ID, user transaction logs, traffic data, application usage information, device operating system and version, device type, hardware model
Location
GPS data to be obtained during the performance of the service
Audiovisual Recording
Photo
Collection Methods of Your Personal Data
Gürsel collects the personal data listed in the categories above through electronic means and/or via a call center channel through the website and/or mobile application channels."
Purposes and Legal Reasons for Processing Your Personal Data
Pursuant to Article 5 of the Law;
To provide services to you through our application, create membership records, perform our contractual obligations, and ensure our Company's compliance with legal requirements, we process personal data such as name, surname, T.C. identification number/passport number, date of birth, gender, nationality, driver's license registration number, phone number, email address, GPS data obtained during service, IP address, device operating system and version, device type, hardware model, user transaction records, and traffic data, based on the necessity of processing personal data for the performance of a contract to which the data subject is a party and the explicit provisions of the law.
To provide services to you through our application, manage billing, payment, and customer relationship processes, we process your personal data such as name, email address, phone number, application usage data, location information, device ID, complaint and suggestion records, bank IBAN number, and payment-related information, based on the legal ground of processing personal data being necessary for the legitimate interests pursued by our Company, provided that it complies with the principles of suitability, proportionality, and data minimization and does not harm your fundamental rights and freedoms.
To perform billing processes, monitor financial and/or accounting matters, we process your personal data such as name, Turkish ID number, phone number, IBAN number, debt amount, invoice number, and payment-related information, based on the legal ground of processing personal data being necessary for the fulfillment of a legal obligation to which our Company is subject.
To manage, control, and improve the Company's services and operations, conduct market research, carry out strategic planning processes, perform non-personalized marketing activities, ensure the security of our services, detect fraudulent or illegal activities, prevent and identify fraud, and manage internal audits, internal controls, legal, financial, reporting, and internal operations, we process personal data such as correspondence with judicial authorities, information contained in legal files, membership date, customer ID, complaint and suggestion records, call center logs, photographs, and Application usage information, based on the legal ground of processing personal data being necessary for the legitimate interests pursued by our Company, provided that it does not harm your fundamental rights and freedoms, and in accordance with the principles of data processing for specific, explicit, and legitimate purposes and data minimization.
To report traffic accidents that occur during the use of our services and take necessary actions, we process personal data such as name, email address, phone number, location data, and information related to the accident based on the legal ground of processing personal data being necessary for the legitimate interests pursued by our Company, provided that it does not harm your fundamental rights and freedoms, and in accordance with the principles of data processing for specific, explicit, and legitimate purposes and data minimization.
For users who provide explicit consent based on their free will, we process location-based campaign data and usage-based campaign data to create individual campaigns for users, provide special opportunities by our business partners, determine target audiences, enhance user experience, personalize the application, and conduct direct and personalized marketing activities, based on the legal ground of processing personal data being the consent of the data subject.
Purposes, Legal Reasons for Transfer of Personal Data and Third Parties to whom Personal Data is Transferred
Gürsel, in accordance with the purposes stated in this Privacy Statement and in compliance with Article 8 of the Personal Data Protection Law (PDPL), transfers your personal data to third parties located within the country.
Gürsel discloses the personal data mentioned above to authorized individuals, institutions, or organizations for the purpose of providing information, fulfilling legal obligations, conducting legal processes, and carrying out its activities in compliance with the legislation.
Furthermore, our company shares your personal data with business partners and suppliers in order to provide the promised services, conduct its operations, ensure the security and satisfaction of users, and perform quality control of the services provided.
With your explicit consent, our company may share location-based campaign data, usage-based campaign data, customer ID, mobile phone number, gender, age, membership date, and usage details with business partners for the purpose of creating individual campaigns for users, offering special opportunities by our partners, determining target audiences, enhancing the user experience, personalizing the Application, and conducting direct and personalized marketing activities.
The personal data mentioned above, which is subject to domestic transfer, is transferred and stored by Gürsel and the third parties involved in the transfer, taking all necessary security measures and technical precautions. In addition to this, your personal data is legally protected through data processing agreements concluded between Gürsel as the data controller and the third parties to whom personal data is transferred.
Deletion, Destruction and Anonymization of Your Personal Data
The personal data collected in accordance with the purposes and methods described above will be processed by Gürsel in compliance with the PDPL, with care and confidentiality. Your personal data is processed for the duration required by the purpose of processing by our company and for the period foreseen in the relevant legislation, and then it is anonymized. During the period in which your personal data is processed, only authorized persons within our company, subject to the necessity of the work, may access your personal data.
Upon the expiry of the envisaged period, your personal data will be immediately destroyed in accordance with the relevant provisions of the Personal Data Protection Law, (PDPL), the Turkish Penal Code, the Regulation on Deletion, Destruction, or Anonymization of Personal Data, and our company policies.
Rights of the Data Subject
Within the scope of Article 11 of the PDPL, you, as the personal data owner, are granted the following rights:
a) To find out whether their personal data are processed or not,
b) To request information if their personal data have been processed,
c) To find out about the purpose of processing your personal data and whether they have been processed for the intended purpose or not,
d) To find out about the third parties to whom your personal data have been transferred either domestically or abroad,
e) In the event that your personal data have been processed incompletely or incorrectly, to demand the correction thereof,
f) To demand the deletion or elimination of personal data within the scope of the conditions set forth in Article 7 of PDPL,
g) To request that transactions made pursuant to subparagraphs (e) and (f) are notified to third parties to whom personal data were transferred,
h) To object to the emergence of any consequences to their detriment through the analysis of the processed data exclusively by automated systems,
i) To claim for any damages that you may incur as a consequence of the illegitimate processing of personal data.
How to Contact Us
If you have any questions, comments, or requests regarding this Privacy Notice, you can contact us through the methods specified in accordance with the provisions of the Regulation on Procedures and Principles for Application to the Data Controller dated 10.03.2018 and numbered 30356. You may send your requests along with documents proving your identity to the following address: "Soğanlık Orta Mah. Bektaş Sk. Bektaş Sk. No:1 Kartal/İSTANBUL," with a wet signature. Alternatively, you can send your inquiries, comments, or requests to the registered email address gursel@hs05.kep.tr using a secure electronic signature, mobile signature, or the email address info@gurseltur.com.tr, which you have previously provided and is registered in our system. Your requests submitted in accordance with this Privacy Notice will be evaluated and concluded as soon as possible, and no later than 30 days. Our company reserves the right to charge a fee in accordance with the fee schedule (if any) determined by the Personal Data Protection Board for requests related to personal data.