Personal Data Processing Information Notice

At Yeniköy Motors, the protection of your personal data obtained while carrying out our processes is one of our primary priorities. We attach great importance to ensuring the security of your personal data and to its use/processing in compliance with applicable legislation.

This information notice contains details on how we process personal data in our capacity as a data controller within the scope of our relationships with our customers.

For what purposes and on what legal grounds we process your personal data

Articles 5 and 6 of the Personal Data Protection Law regulate the legal grounds for processing personal data. Below, we explain the purposes for which we process personal data and the legal grounds on which we rely for these purposes:

Based on the legal ground that processing personal data is necessary for the establishment or performance of a contract, for the following purposes:

• Creating and managing your customer records,
• Evaluating and fulfilling your requests for sales, leasing, after-sales services and trade-in pricing,
• Managing quotation, order, work order, request and contract processes,
• Managing credit-related processes if you wish to use financing for vehicle purchases/leases,
• Managing financial and accounting transactions, including the execution of payments,
• Managing insurance, comprehensive insurance and warranty processes,
• Managing operational processes related to the performance of the contract between us and our customers, such as vehicle registration and license plate procedures, vehicle delivery and license changes, damage handling and roadside assistance.

Based on the legal ground of fulfilling our legal obligations, for the following purposes:

• Managing operational processes arising from legislation, such as issuing invoices, identity verification, technical action notifications and recall procedures,
• Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where we are required to make notifications to such institutions (for example, sharing your information with a public authority in the event of a request regarding a transaction suspected to be unlawful),
• Ensuring that our activities are carried out in compliance with applicable legislation.

Based on the legal ground that data processing is mandatory for the establishment, exercise or protection of a right, for the following purpose:

• Protecting and exercising our rights and managing legal processes in the event of a potential legal dispute.

Based on the legal ground that data processing is mandatory for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject, for the following purposes:

• Receiving and resolving your suggestions, requests and complaints,
• Ensuring security during your visits to our showrooms, facilities or authorized dealers/service centers,
• Conducting customer satisfaction activities,
• Developing and improving our products, services and processes,
• Reporting, auditing and reviewing our business processes, and ensuring compliance with the policies, practices and rules of our group companies and manufacturer standards.

Based on your explicit consent, for the following purposes:

• Informing you about campaigns, promotions, events, surveys and opportunities in line with your communication preferences (such communications enable us to increase your engagement with and satisfaction regarding our products/services),
• Personalizing your experiences related to our products/services, offering products and services aligned with your preferences and interests, and conducting marketing analysis processes,
• Conducting marketing cooperation activities with business partners.

Your explicit consent is requested separately and independently of this information notice, and even if you provide consent, you have the right to withdraw it at any time.

Which personal data we process

Within the scope of the purposes and processes described above, we process identity information, contact information, vehicle information, customer transaction data including invoice, order and activity history, marketing data, transaction security data, financial data, legal process data, physical location security data and risk management data.

In processes relating to our fleet and corporate customers, we also process signature circulars and title-position information.

With whom and for what purposes we share your personal data

In order to fulfill the purposes set out in this information notice, we share your personal data—based on the legal grounds stated above—with our authorized dealers and service centers, group companies, authorized institutions and organizations, manufacturers, suppliers and business partners located domestically and abroad, in accordance with the rules on the transfer of personal data specified in Articles 8 and 9 of the Personal Data Protection Law.

How and on what legal grounds we collect your personal data

We collect your personal data in accordance with the nature of your relationship with us via our showrooms, telephone, email communication channels or digital platforms. We collect your personal data based on the legal grounds set out in Articles 5 and 6 of the Personal Data Protection Law, namely: that processing personal data is necessary for the establishment or performance of a contract, fulfillment of our legal obligations, necessity of data processing for the establishment, exercise or protection of a right, and necessity of data processing for our legitimate interests provided that it does not harm the fundamental rights and freedoms of the data subject. Details of the purposes for which we carry out data processing activities based on these legal grounds can be found in the first section of this information notice.

How you can exercise your rights regarding your personal data

Article 11 of the Personal Data Protection Law regulates the rights of data subjects. In accordance with this article, you have the following rights:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request the correction of your personal data if it is incomplete or inaccurately processed, and to request notification of such correction to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the law, and to request notification of such actions to third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against you arising from the analysis of your processed data exclusively through automated systems,
• To request compensation for damages if you suffer damage due to the unlawful processing of your personal data.

The main methods through which you can exercise your rights are as follows:

• You may complete the Application Form provided under the “Personal Data Protection” sections of our websites,
• You may send an email containing your request to info@yenikoymotors.com using the email address registered in our systems,
• You may also submit your requests using other methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.

Within the scope of credit processes, our business partners with whom we cooperate process your personal data in accordance with the legislation to which they are subject and within the framework of evaluating and finalizing credit applications. To obtain information about how such business partners process your personal data within the scope of credit operations, you may contact the relevant institution directly.