Skip to main content
DefCar Rental

KVKK Information Notice

1. Data Controller

Under the Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by RND Otomotiv Turizm Ticaret Limited Şirketi, operating under the DefCar Rental brand, in its capacity as data controller.

Address: Altınova Bulvarı, Altınova Orta Mahallesi No:140/2, Kepez, Antalya
E-mail: [email protected]
Phone: +90 532 369 41 88
Website: https://www.defcar.com.tr

2. Personal Data Processed

Within the scope of the website and vehicle rental services, the following information may be processed depending on the nature of the transaction:

  • Identity and driver information: First name, surname, Turkish ID or passport number, date of birth, nationality and driving licence information.

  • Contact information: Phone number, e-mail address and contact information provided within the scope of the reservation.

  • Reservation and rental information: Vehicle preferences, rental dates, delivery and return records, contract and additional driver information.

  • Financial information: Payment, invoice, deposit and collection records.

  • Vehicle usage information: Location and usage information accessed via GPS, damage, traffic fine and toll records.

  • Digital transaction information: IP address, session and security records, and customer account information.

  • Communication records: Customer requests, messages and complaints.

3. Purposes and Legal Grounds for Processing Personal Data

Your personal data is processed for the following purposes and on the following legal grounds:

  • Establishment or performance of the contract (KVKK Art. 5/2-c): Managing reservations, checking driver eligibility, delivering and returning vehicles, and carrying out payment and rental transactions.

  • Legal obligations (KVKK Art. 5/2-a and ç): Fulfilling tax, invoicing, accounting, statutory record-keeping and notification obligations to competent authorities.

  • Establishment, exercise or protection of a right (KVKK Art. 5/2-e): Managing damage, traffic fines, toll charges, receivables and legal disputes.

  • Legitimate interest (KVKK Art. 5/2-f): Ensuring the security of vehicles, preventing theft and unauthorised use, website security and evaluating customer requests.

  • Explicit consent (KVKK Art. 5/1): Analytical and marketing cookies requiring consent, and optional marketing activities based on personal data.

With regard to sending commercial electronic messages, the permission and exemption conditions under the applicable legislation shall also apply separately. The necessary explicit consents are obtained separately from this privacy notice.

4. Collection of Personal Data

Your personal data is obtained through the website, reservation and contact forms, customer account, telephone, e-mail, WhatsApp, rental agreements, vehicle delivery/return transactions, vehicle tracking system and technical security infrastructure.

Data is collected electronically by automatic or partially automatic methods, and in physical transactions by non-automatic methods, provided that it forms part of a data recording system.

Vehicle location information is accessed through the API infrastructure of the tracking service, and DefCar Rental does not maintain a separate GPS location history database.

5. Transfer of Personal Data

Your personal data may be transferred, to the extent necessary for the provision of the relevant services or fulfilment of legal obligations, to competent public authorities, payment and insurance organisations, vehicle tracking, IT, hosting and communication service providers, and legal and financial advisers, within the scope of the conditions set out in Article 8 of the KVKK.

Within the scope of website security and traffic routing services, IP addresses and technical connection information may be processed on systems located abroad.

Transfers of personal data abroad are carried out within the framework of the valid transfer conditions and necessary safeguards regulated under Article 9 of the KVKK.

6. Retention of Personal Data

Personal data is retained for the period necessary for the purposes of processing and the retention obligations under the applicable legislation.

When the reasons requiring processing cease to exist and there is no other legal basis for retention, the data is deleted, destroyed or anonymised.

7. Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK, you have the right to learn whether your personal data has been processed, to request information if it has been processed, to learn the purpose of processing, to know the third parties to whom it has been transferred, to request the correction of incomplete or inaccurate data, to request its deletion or destruction under the statutory conditions, and to request that these actions be notified to the relevant third parties.

You may also object to results arising against you as a result of analyses carried out exclusively by automated systems and request compensation for the damage you have suffered due to unlawful processing of data.

8. Applications and Contact

You may submit your requests under the KVKK through the following channels in accordance with the relevant application legislation:

Address: Altınova Bulvarı, Altınova Orta Mahallesi No:140/2, Kepez, Antalya
E-mail: [email protected]

For applications submitted by e-mail, the identity verification and application method requirements prescribed by the legislation shall apply.

Your applications shall be concluded within 30 days at the latest. In addition, a fee determined in accordance with the applicable legislation may be charged for transactions requiring a cost.

Last Updated: 15.10.2026