Personal Data Protection Policy

In accordance with Law No. 6698 on the Protection of Personal Data

General Information

As Berg Rent a Car, we take all necessary technical and administrative measures to ensure full compliance with Law No. 6698 on the Protection of Personal Data ("KVKK") and related legislation.

The security and privacy of your personal data is our priority. This policy has been prepared to inform you about how your personal data is collected, processed, stored, and protected.

Data Security

We take the following technical and administrative measures to ensure the security of your personal data:

  • Encrypted data transmission with SSL certificate
  • Secure server infrastructure and regular security updates
  • Access control and authorization mechanisms
  • Regular data backup and recovery procedures
  • Staff training and awareness activities
  • Regular checks to detect and fix security vulnerabilities

Data Retention Periods

Your personal data is stored for the period required by the processing purpose and within the framework of our legal retention obligations:

  • Reservation Information: 10 years after reservation completion
  • Customer Contact Information: 10 years after the service relationship ends
  • Marketing Permissions: Until canceled or 3 years
  • Technical Data: 2 years

Data Breach Notification

In case of any breach that may affect the security of your personal data, in accordance with Article 12 of the KVKK:

  • The breach is reported to the Personal Data Protection Authority within 72 hours at the latest from the time it is detected
  • If the breach poses a high risk to the rights and freedoms of individuals, the relevant persons are also notified
  • Necessary measures are taken and systems are updated to prevent the breach from recurring

Your personal data is processed for the following legal reasons:

  • Establishment and performance of service contract
  • Fulfillment of legal obligations
  • Our legitimate interests (improving service quality, ensuring security)
  • Your explicit consent (for marketing activities)

International Data Transfer

Your personal data may be transferred abroad for the purpose of providing our services. In this case, in accordance with Article 9 of the KVKK:

  • The country to which the transfer will be made must have an adequate level of protection
  • If there is no adequate protection, appropriate safeguards must be provided (contracts, binding corporate rules, etc.)
  • Your explicit consent must be obtained

Changes and Updates

This policy may be revised from time to time due to changes in legal regulations, technological developments, or updates to our business processes. We will inform you through our website in case of significant changes.

Contact and Application

To exercise your rights under the KVKK or for questions about the policy:

  • You can send your written application to our address
  • You can contact us via email
  • You can file a complaint with the Personal Data Protection Authority