Privacy notice (KVKK Aydınlatma Metni)

The data controller is [data controller: to be confirmed before launch]. Questions about your data: [privacy contact email: to be confirmed before launch].

This notice is given under Article 10 of the Turkish Law on the Protection of Personal Data No. 6698 (KVKK).

When you send a booking request:

• name, email, phone and, if you give it, WhatsApp number;
• age, driving licence category and the country that issued it;
• the vehicle, the dates, how you pick it up (at the shop or delivery) and any note you add;
• the language you use on the site.

When you leave a review: the rating, the text if you write one, and your first name only if you choose to show it. Otherwise the review is signed Guest.

When a rental shop applies to become a partner: the contact person's name, the shop's name, phone, WhatsApp, email, district, fleet size, vehicle classes and comment.

We do not ask for a passport or ID copy, and we do not take card details: there is no online payment on Gezmoto.

• to pass your request to the rental shop and tell you its answer;
• to send you the status link and booking emails;
• to check that the vehicle matches your licence and age;
• to publish your review after moderation;
• to review partner applications and run partner accounts.

Legal basis: processing is needed to set up and perform the rental you ask for (KVKK Article 5(2)(c)). We ask for explicit consent only where the law requires it.

The rental shop you book with sees your name, dates, vehicle and licence details at once. It gets your phone, email and WhatsApp only after it confirms the booking.

Service providers that run the site for us: database and login (Supabase, servers in Frankfurt, Germany), hosting (Vercel), email delivery. They process data only on our instructions.

Because these servers are outside Turkey, your data is transferred abroad. The legal ground for this transfer is part of the legal review before launch.

We do not sell personal data and do not pass it to advertisers.

We keep data only as long as the purpose or the law requires. Then we delete, destroy or anonymise it.

Rejected partner applications

6 months, from the decision

Booking requests and customer details

not decided yet, pending accountant and legal review, from the end of the rental

Reviews

not decided yet, pending accountant and legal review, tied to the booking they belong to

Audit and deletion records

not decided yet, pending accountant and legal review, as Turkish data protection law requires

Under KVKK Article 11 you can ask whether we process your data, get information about it, learn the purpose, know who receives it in Turkey or abroad, have it corrected, have it deleted or destroyed, object to a result that goes against you and claim damages for unlawful processing.

Write to [privacy contact email: to be confirmed before launch]. We answer within 30 days. If you disagree with the answer, you can complain to the Personal Data Protection Board (kvkk.gov.tr).