Personal Data Protection

Oto55 takes the highest level of security measures to ensure that your personal data is collected, stored, and shared in accordance with the law, and to protect your privacy.

Our goal is to provide the most transparent information regarding the methods of collection, purposes of processing, recipients of the data, legal grounds, and your rights, in accordance with Article 10 of the Personal Data Protection Law No. 6698, and to ensure your satisfaction.

a) Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("Law"), your personal data will be collected and processed by Oto55 ("Company") as the data controller, within the scope explained below.

b) Purpose of Processing Personal Data

Personal data such as identity information, contact information, customer information, transaction security information, legal transaction and compliance information, and marketing and sales information may be collected from customers, employees, potential customers, job candidates, business partners, and suppliers.

The purposes for processing the collected personal data include:

• Providing Company products and services, fulfilling our obligations to you, organizing records and documents, complying with local and international legal regulations regarding data storage, reporting, informing, tax, and other obligations,

• Offering personalized advertising, campaigns, advantages, and other benefits for sales and marketing activities aimed at improving the quality of services and products,

• Managing and monitoring commercial operations, including finance, accounting, billing, collections, information systems, document and print management,

• Communication for transferring necessary information regarding IT requirements, system structure, and processing support services,

• Conducting traffic measurement, statistical analysis, segmentation/profiling, and CRM studies for sales and marketing activities,

• Measuring and increasing customer satisfaction, managing complaints, receiving feedback and suggestions on new services and products, informing you about issues, errors, complaints, and requests,

• Receiving your orders, processing payments, collaborating with third parties for logistics and product delivery, offering products and services that may interest you, online behavioral advertising, marketing, portfolio management, and quality measurement of services,

• Providing comparative product/service offers, modeling, product development, and using your personal data in relation to the Company's main contract and applicable laws and regulations in providing all types of products and services to you,

• Complying with legal requirements for information storage, reporting, and notification obligations, fulfilling contractual obligations, and meeting legal obligations for services,

• Managing the Company’s commercial and business strategies, including finance, communication, market research, corporate social responsibility activities, procurement operations, internal system and application management, and legal operations,

• Complying with applicable laws and regulatory obligations, including anti-money laundering and counter-terrorism laws, responding to requests from official and governmental authorities.

c) Transfer of Personal Data to Third Parties and Purposes

Your collected personal data may be shared with the following recipients within the limits of the aforementioned purposes:

• The Company’s business partners, suppliers, shareholders, Yıldız Holding, and its affiliates,

• Authorized persons or institutions under the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on the Prevention of Laundering Proceeds of Crime, Anti-Money Laundering Law, Turkish Commercial Code, and other relevant legal provisions,

• Legally authorized public institutions, administrative authorities, and judicial bodies,

• Overseas companies and affiliates,

• Real and legal persons and institutions with whom we cooperate for product/service comparison, analysis, evaluation, advertising, and other services.

ç) Methods and Legal Basis for Personal Data Collection

Your personal data is collected by the Company through verbal, written, or electronic means, including the Company’s headquarters, affiliated websites, institutions with whom we have service agreements, the internet site and mobile application, call centers, social media accounts, and other communication channels.

Personal data is collected within the framework of the legal regulations mentioned above and for the stated purposes.

d) Rights of the Personal Data Owner Under Article 11 of the Law No. 6698

As a personal data subject, you have the following rights regarding your personal data:

• Learning whether your personal data is processed,

• Requesting information if your personal data has been processed,

• Learning the purpose of processing your personal data and whether they are used in accordance with the purpose,

• Learning the third parties to whom your personal data has been transferred, both domestically and internationally,

• Requesting correction of any incomplete or inaccurate personal data,

• Requesting the deletion or destruction of your personal data when the reasons for processing no longer exist,

• Objecting to any consequences arising from the processing of your data solely by automated systems,

• Requesting compensation for damages in case of any unlawful processing of your personal data.

You can exercise these rights by submitting a request through the channels provided below. The Company will respond to your request as soon as possible, and at most within thirty days. No fee will be charged for responses up to 10 pages. A fee of 1 Turkish Lira will be charged for each page over 10. If the response is provided in a recording medium (e.g., CD, flash drive), the fee will not exceed the cost of the recording medium.

To exercise your rights, you can contact us by:

• Email: info@oto55.com

• KEP (Registered Electronic Mail): info@oto55.com

Please ensure that you provide all the necessary information and documents to enable us to verify your identity. Incomplete or inaccurate information may delay the process, and the Company reserves the right to not fulfill the request under these circumstances.

When submitting a written request, please include the following information:

• Your name, surname, and signature (if written),

• Your Turkish ID number (if applicable), or your nationality, passport number, or ID number (for foreign nationals),

• Your residential address or business address for notifications,

• Your email address, phone, and fax numbers (if applicable),

• The subject of your request,

• Any supporting documents for your request (if any).

You can send written requests, along with necessary documents, to the Company’s address as the data controller. Alternatively, you can access the request form from the website.