Personal Data Protection Notice

Note: The official commercial title (trade registry name), MERSIS, tax ID and KEP address have not yet been verified in the admin panel. This text is based on verified contact records; it is not treated as a fully approved legal policy until legal review is completed.

This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”).

Identity of the data controller

ONURLU OTO (trading name / brand: ONURLU OTO)

Address: Toybelen Sanayi Sitesi, 9021. Cadde, 55020 İlkadım/Samsun
Phone: +90 533 293 10 88
KVKK application email: iletisim@onurluoto.com

Trade-registry title, MERSIS, tax ID or KEP address are not invented in this notice when they are not verified in the admin panel.

Personal data processed

• Identity: Full name
• Contact: Phone, email, preferred contact channel
• Vehicle and service data: Model, year, fuel, transmission, mileage, plate, service request
• Request records: Messages, appointment preferences, notice acknowledgement and optional marketing consent records
• Transaction security: Technical records related to session and CSRF protection

Processing of special categories of personal data is not assumed.

Purposes of processing

• Receiving, evaluating and responding to contact and service requests
• Planning appointment workflows and informing customers
• Keeping records and managing customer relations
• Information security and abuse prevention
• Complying with legal obligations
• Limited marketing communication only where separate consent is given

Legal bases

• Handling contact / appointment requests: KVKK Art. 5/2 (c); where needed Art. 5/2 (f) legitimate interests
• Record keeping and disputes: Art. 5/2 (e) and Art. 5/2 (ç)
• Site security (session/CSRF): Art. 5/2 (f) and Art. 5/2 (ç)
• Optional marketing: Art. 5/1 explicit consent (only when given)

Collection methods

• Website contact form
• Online service appointment form
• Phone
• Messages after a WhatsApp link is opened
• Email
• Technical system logs for site security

Transfers

We do not claim that data is never shared with any third party. In practice:

• Hosting and email infrastructure providers — to operate the site and notifications
• WhatsApp / Meta — when you intentionally open WhatsApp
• Google — directions links and the embedded map after permission
• Measurement providers — only if configured and consent is granted

Cross-border transfers may arise depending on provider locations and are assessed under KVKK Art. 9; unverified adequacy decisions or SCCs are not asserted here.

Data subject rights

Under KVKK Art. 11 you may learn whether your data are processed; request information; learn the purpose; learn third parties to whom data are transferred; request correction of incomplete or inaccurate data; request deletion/destruction under Art. 7 conditions; request that correction/deletion be notified to recipients; object to results against you arising solely from automated analysis; and claim compensation if you suffer damage due to unlawful processing.

How to apply

Send applications to iletisim@onurluoto.com or in writing to Toybelen Sanayi Sitesi, 9021. Cadde, 55020 İlkadım/Samsun. Provide information sufficient to identify you. Applications are concluded within the periods set by KVKK and related rules.

Update date

Current version date: 25.10.2026. The notice can be updated via the CMS.