User Information Text

REGARDING THE PROCESSING OF PERSONAL DATA
DRIVEE SAFECALL SYSTEM USER INFORMATION TEXT

Data Controller: Company

Drivee Technology Automotive Fleet Leasing Trade Joint Stock

Gürsel Mah.İmrahor Caddesi No:29 Premier Campus Plaza A Blok Office 87 Kağıthane/İstanbul

Drivee Technology Automotive Fleet Leasing Trade Joint Stock Company(hereinafter referred to as “Drivee”), you, the person receiving products or services, regarding the processing, storage and transfer of your personal data through the Drivee SafeCall System within the framework of its activities arising from the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation and legal regulations. This information text has been prepared to inform its employees and officials

A. Regarding employees who receive products or services within the scope of our activities carried out through the Drivee SafeCall System:

1. Which Personal Data Are Processed?

Identity Information
Processed Personal Data	Full Name, Vehicle Plate Information, Gender, Date of Birth, Driver's License Number, Signature, Signature Circular, Marital Status, Turkish Citizenship Number.
Purposes of Processing Personal Data	Management of Emergency Response Processes, Management of Information Security Processes, Management of Access Permissions, Conducting Activities in Compliance with Legislation, Management of Finance and Accounting Operations, Management of Communication Activities, Management / Audit of Business Operations, Management of Goods / Services Sales Processes, Management of After-Sales Support Services, Management of Goods / Services Production and Operations, Management of Customer Relationship Management Processes, Conducting Customer Satisfaction Activities, Management of Contract Processes, Tracking Requests / Complaints, Management of Supply Chain Processes, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your identity information is processed by Drivee in line with the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Explicitly foreseen by law, Necessary for the establishment or performance of a contract, provided that it is directly related to the contract, Necessary for the data controller to fulfill its legal obligation, legal grounds.
Methods of Collecting Personal Data	Printed Forms, Information Systems and Electronic Devices, Email Environment, Electronic Systems/Applications, Data Subject's Statement, Existing Data Usage, Phone, Contracts.

Contact Information
Processed Personal Data	Full Name, Email Address, Phone Number.
Purposes of Processing Personal Data	Management of Emergency Response Processes, Management of Information Security Processes, Management of Access Permissions, Conducting Activities in Compliance with Legislation, Management of Finance and Accounting Operations, Management of Communication Activities, Management / Audit of Business Operations, Management of Goods / Services Sales Processes, Management of After-Sales Support Services, Management of Goods / Services Production and Operations, Management of Customer Relationship Management Processes, Conducting Customer Satisfaction Activities, Management of Contract Processes, Tracking Requests / Complaints, Management of Supply Chain Processes, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your contact information is processed by Drivee in line with the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Explicitly foreseen by law, Necessary for the establishment or performance of a contract, provided that it is directly related to the contract, Necessary for the data controller to fulfill its legal obligation, legal grounds.
Methods of Collecting Personal Data	Printed Forms, Information Systems and Electronic Devices, Email Environment, Electronic Systems/Applications, Data Subject's Statement, Existing Data Usage, Phone, Contracts.

Personal Information
Processed Personal Data	Company Information, Start Date of Employment, Dismissal Date, Position/Title Information, Provided Personal Rights Information, Request Information.
Purposes of Processing Personal Data	Execution of Access Authorization Processes, Carrying out Communication Activities, Execution / Supervision of Business Activities, Execution of Goods / Services Sales Processes, Execution of After-Sales Support Services for Goods / Services, Execution of Goods / Services Production and Operation Processes, Execution of Contract Processes, Execution of Supply Chain Management Processes.
Legal Grounds for Processing Personal Data	Your personal data is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: It is necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract. based on these legal grounds.
Methods of Collecting Personal Data	Printed Forms, Information Systems and Electronic Devices, Email Environment, Electronic Systems/Applications, Statement of the Data Subject, Current Data Usage, Contracts.

Financial Information
Processed Personal Data	IBAN Information
Purposes of Processing Personal Data	Carrying out Finance and Accounting Affairs, Carrying out Communication Activities, Execution/Supervision of Business Activities, Execution of Goods / Services Sales Processes, Goods / Services Production and Operation Processes, Execution of Customer Relationship Management Processes, Execution of Contract Processes.
Legal Grounds for Processing Personal Data	Your financial information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: It is necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract. based on these legal grounds.
Methods of Collecting Personal Data	Email Environment,

Operational Security Information
Processed Personal Data	Network Traffic Data, Device IMEI Number, Device MAC Address, IP Address Information, Website Access/Exit Information, Username and Password Information, Log Records
Purposes of Processing Personal Data	Execution of Information Security Processes, Execution of Access Authorization Processes, Execution of Activities in Compliance with Regulations, Execution / Supervision of Business Activities, Execution of Communication Activities, Execution of Goods/Services Production and Operation Processes, Execution of Contract Processes
Legal Grounds for Processing Personal Data	Your operational security information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: Explicitly required by law, Necessary for the data controller to fulfill a legal obligation, based on these legal grounds.
Methods of Collecting Personal Data	Information Systems and Electronic Devices, Electronic Systems/Applications, Statement of the Data Subject, Current Data Usage

Physical Security Information
Processed Personal Data	CCTV Recording Information
Purposes of Processing Personal Data	Conducting Audits/Ethical Activities, Ensuring Physical Security, Execution/Monitoring of Business Activities, Ensuring the Security of Movable Assets and Resources, Ensuring the Security of Data Controller Operations.
Legal Grounds for Processing Personal Data	Your physical security information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: Processing of data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Based on these legal grounds.
Methods of Collecting Personal Data	CCTV Devices

Visual and Auditory Recording Information
Processed Personal Data	Photographs, Auditory Records.
Purposes of Processing Personal Data	Conducting Emergency Management Processes, Execution of Access Authorization Processes, Execution/Monitoring of Business Activities, Conducting Communication Activities, Executing Post-Sales Support Services, Executing Goods/Services Production and Operation Processes, Executing Customer Relationship Management Processes, Executing Activities Aimed at Customer Satisfaction, Conducting Contract Processes, Tracking Requests/Complaints, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your visual and auditory recording information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: Processing of personal data is necessary for the performance of a contract or the establishment of a contract with the data subject. Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Based on these legal grounds.
Methods of Collecting Personal Data	Electronic Systems/Applications, Statement of the Data Subject, Current Data Usage, Phone.

Family Member Information
Processed Personal Data	Family Member Information (Name, Surname, Gender, Phone Number, Address, Relationship Information/Relationship Type)
Purposes of Processing Personal Data	Execution/Monitoring of Business Activities, Execution of Post-Sales Support Services, Execution of Goods/Services Production and Operation Processes, Execution of Contract Processes.
Legal Grounds for Processing Personal Data	Your family member information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: Processing personal data is necessary for the establishment or performance of a contract directly related to the data subject's personal data. Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Based on these legal grounds.
Methods of Collecting Personal Data	Electronic Systems/Applications, Statement of the Data Subject, Current Data Usage,

Customer Transaction Information
Processed Personal Data	Vehicle Information (Plate, Vehicle Make-Model, Daily Mileage, Vehicle Score, Inspection and Maintenance Information, Tire Information, Fuel Information, MTV Information) Device Serial Number Access-Entry Authorization User Status Information Customer Number Travel Information (Total Number of Trips, Total Number of Risky Driving Instances, First and Last Trip Dates, Last Signal Date, Maximum Travel Distance, Maximum Travel Duration, Travel Start and End Dates, Travel Duration, Distance Traveled, Alarm Count, Travel Score, Average Speed, Travel Details, Accident Information, Warning Information) Driver Score Information Driving Information (Total Idle Time, Maximum Idle Time, Total Mileage, Turn Information, Speed Information, Braking Information) Chassis Number Request/Complaint Information
Purposes of Processing Personal Data	Execution of Access Authorizations, Execution of Communication Activities, Execution/Monitoring of Business Activities, Execution of Post-Sales Support Services, Execution of Goods/Services Production and Operation Processes, Execution of Customer Relationship Management Processes, Execution of Activities Aimed at Customer Satisfaction, Execution of Contract Processes, Tracking of Requests/Complaints, Execution of Supply Chain Management Processes
Legal Grounds for Processing Personal Data	Your customer transaction information is processed by Drivee for the purposes listed above, in accordance with Article 5 of the KVKK, based on the following legal grounds: Processing personal data is necessary for the establishment or performance of a contract directly related to the data subject's personal data. Based on these legal grounds.
Methods of Collecting Personal Data	Printed Forms, Electronic Systems/Applications, Email Environment, Statement of the Data Subject, Current Data Usage, Contracts, Phone.

Location Information
Processed Personal Data	Location Information of the Current Position.
Purposes of Processing Personal Data	Execution of Emergency Management Processes, Execution of Communication Activities, Execution/Monitoring of Business Activities, Execution of Post-Sales Support Services, Execution of Customer Relationship Management Processes, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your location information is processed by Drivee for the purposes listed above, based on the following legal grounds in Article 5 of the KVKK: Processing personal data is necessary for the establishment or performance of a contract directly related to the data subject's personal data. Based on these legal grounds.
Methods of Collecting Personal Data	Drivee Device, Electronic Systems/Applications.

Other Information (Emergency Contact Information)
Processed Personal Data	Emergency Contact Information (Name, Surname, Relationship Degree, Email, Phone, Address Information)
Purposes of Processing Personal Data	Execution of Emergency Management Processes, Execution of Access Authorizations, Execution/Monitoring of Business Activities, Execution of Post-Sales Support Services, Execution of Goods/Services Production and Operation Processes, Execution of Contract Processes.
Legal Grounds for Processing Personal Data	Your family and/or relative information is processed by Drivee for the purposes listed above, based on the following legal grounds in Article 5 of the KVKK: Processing personal data is necessary for the establishment or performance of a contract directly related to the data subject's personal data. Processing personal data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Based on these legal grounds.
Methods of Collecting Personal Data	Electronic Systems/Applications, Statement of the Data Subject, Current Data Usage.

Special Qualified Persons Data

Special personal data; Data regarding a person's race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data.

Special categories of personal data require higher protection than other data categories. It is regulated in accordance with KVKK that additional information must be provided in order to process such data.

Health Information
Processed Personal Data	Blood Type, Allergic Reactions, Chronic Diseases, Surgeries, Medications Used, Health Insurance Number/Company, Health Document and Explanation Information.
Purposes of Processing Personal Data	Execution/Supervision of Business Activities, Execution of Post-Sale Support Services, Execution of Goods/Services Production and Operational Processes, Execution of Contract Processes.
Personal of data processing of Legal reasons	Your health information is processed by Drivee for the purposes listed above, based on the legal grounds specified in the second paragraph of Article 6 of the KVKK: Explicit Consent
Personal Datas Collection Methods	Electronic Systems/Applications, Statement of the Relevant Person, Existing Data Usage.

B.Regarding the authorized persons who receive products or services within the scope of our activities carried out through the Drivee SafeCall System:lişkin olarak:

1. Which Personal Data Are Processed?

Identity Information
Processed Personal Data	Full Name, Signature, Signature Circular, Stamp, Turkish Republic ID Number, Tax Identification Number.
Purposes of Processing Personal Data	Execution of Information Security Processes, Execution of Access Permissions, Execution of Activities in Compliance with Legislation, Execution of Financial and Accounting Tasks, Tracking and Execution of Legal Matters, Execution of Communication Activities, Execution/Supervision of Business Activities, Execution of Goods/Services Sales Processes, Execution of Post-Sale Support Services, Execution of Goods/Services Production and Operational Processes, Execution of Customer Relationship Management Processes, Execution of Activities for Customer Satisfaction, Execution of Contract Processes, Tracking of Requests/Complaints, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your identity information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Explicitly stipulated in laws, Processing personal data of the parties to a contract as necessary for the formation or performance of a contract, Necessary for the data controller to fulfill its legal obligation,
Personal Datas Collection Methods	Printed Forms, Information Systems and Electronic Devices, Official Channels, Email Environment, Electronic Systems/Applications, Statement of the Relevant Person, Existing Data Usage, Phone, Contracts.

Personnel Information
Processed Personal Data	Working Hours Information, Position-Title Information, Request Information.
Purposes of Processing Personal Data	Execution of Access Permissions, Execution of Activities in Compliance with Legislation, Execution of Financial and Accounting Tasks, Execution/Supervision of Business Activities, Execution of Communication Activities, Execution of Goods/Services Sales Processes, Execution of Post-Sale Support Services, Execution of Goods/Services Production and Operational Processes, Execution of Contract Processes.
Legal Grounds for Processing Personal Data	Your personnel information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Processing personal data of the parties to a contract as necessary for the formation or performance of a contract,
Methods of Collecting Personal Data	Email Environment, Electronic Systems/Applications, Statement of the Relevant Person, Existing Data Usage, Contracts.

Financial Information
Processed Personal Data	Bank Account Information, IBAN Information, Payment Information, Collateral Information.
Purposes of Processing Personal Data	Execution of Activities in Compliance with Legislation, Execution of Financial and Accounting Tasks, Execution and Tracking of Legal Tasks, Execution of Communication Activities, Execution/Supervision of Business Activities, Execution of Goods/Services Sales Processes, Execution of Goods/Services Production and Operational Processes, Execution of Customer Relationship Management Processes, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions, and Organizations.
Legal Grounds for Processing Personal Data	Your financial information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Processing personal data of the parties to a contract as necessary for the formation or performance of a contract,
Methods of Collecting Personal Data	Printed Forms, Email Environment, Statement of the Relevant Person, Existing Data Usage, Phone.

Transaction Security Information
Processed Personal Data	Network Traffic Data, Device IMEI Number, Device MAC Address, IP Address Information, Website Login/Logout Information, Username and Password Information, Log Records.
Purposes of Processing Personal Data	Execution of Information Security Processes, Execution of Access Permissions, Execution of Activities in Compliance with Legislation, Execution of Assignment Processes, Execution/Supervision of Business Activities, Execution of Communication Activities, Execution of Goods/Services Production and Operational Processes, Execution of Contract Processes.
Legal Grounds for Processing Personal Data	Your transaction security information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: Explicitly prescribed by law, It is necessary for the data controller to fulfill its legal obligations,
Methods of Collecting Personal Data	Information Systems and Electronic Devices, Electronic Systems/Applications, Statement of the Relevant Person, Existing Data Usage.

Physical Facility Security Information
Processed Personal Data	CCTV Recording Data
Purposes of Processing Personal Data	Execution of Audit/Ethical Activities, Ensuring Physical Facility Security, Execution/Supervision of Business Activities, Ensuring the Security of Movable Property and Resources, Ensuring the Security of Data Controller Operations.
Legal Grounds for Processing Personal Data	Your physical security information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: It is necessary for the processing of data for the legitimate interests of the data controller, provided that it does not violate the fundamental rights and freedoms of the relevant person.
Methods of Collecting Personal Data	CCTV Devices

Visual and Auditory Record Information
Processed Personal Data	Auditory Records
Purposes of Processing Personal Data	Execution of Communication Activities, Execution of Post-Sale Support Services, Execution of Customer Relationship Management Processes, Execution of Customer Satisfaction Activities, Tracking of Requests/Complaints.
Legal Grounds for Processing Personal Data	Your visual and auditory record information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: It is necessary for the establishment or performance of a contract, It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.
Methods of Collecting Personal Data	Phone

Customer Transaction Information
Processed Personal Data	Vehicle Information (Vehicle Brand-Model, Daily Mileage, Vehicle Score, Inspection and Maintenance Information, Tire Information, Fuel Information, Motor Vehicle Tax Information) Travel Information (Alarm Count, Average Speed, Travel Duration, Travel Detail Warning Information) Contract Information (Contract Type, Subject and Amount of the Contract, Contract Start and End Date) Request/Complaint Information
Purposes of Processing Personal Data	Execution of Access Rights, Execution of Communication Activities, Execution/Supervision of Business Activities, Execution of Post-Sale Support Services, Execution of Goods/Services Production and Operation Processes, Execution of Customer Relationship Management Processes, Execution of Customer Satisfaction Activities, Execution of Contract Processes, Tracking of Requests/Complaints.
Legal Grounds for Processing Personal Data	Your customer transaction information is processed by Drivee for the purposes listed above, based on the legal grounds specified in Article 5 of the KVKK: It is necessary for the establishment or performance of a contract,
Methods of Collecting Personal Data	Electronic Systems/Applications, Email Environment, Relevant Person's Declaration, Existing Data Usage, Phone.

2. To Whom and For What Purposes Can Your Personal Data Be Transferred?

Your personal data may be transferred within the country to:

Authorized Public Institutions and Organizations for the purposes of managing emergency processes, conducting business activities/supervision, ensuring activities are carried out in accordance with regulations, and providing information to relevant persons, institutions, and organizations.
Suppliers for the purposes of managing emergency processes, conducting access rights, ensuring activities are carried out in accordance with regulations, executing finance and accounting tasks, monitoring and carrying out legal activities, supervising business activities, conducting communication activities, managing sales processes, providing post-sale support services, managing goods/services production and operation processes, managing contract processes, and managing supply chain processes.
Natural Persons or Private Law Legal Entities for the purposes of conducting communication activities, supervising business activities, gathering and evaluating suggestions for improving business processes, providing post-sale support services, managing customer relationships, carrying out customer satisfaction activities, and tracking requests/complaints.
Business Partners for the purposes of conducting communication activities, supervising business activities, providing post-sale support services, and managing customer relationships.

The transfer will be made in compliance with the 8th article of the KVKK or the 9th article for transfer abroad, and only to the extent necessary for the realization of the relevant purpose, with the necessary technical and administrative measures taken.

3. How Long Will Your Personal Data Be Stored?

Your personal data will be stored for at least the period specified in the law or relevant regulations, if a retention period is determined. If no period is specified in the law or relevant regulations, the data will be stored for a reasonable period determined, in connection with the purposes of processing, and in a limited and measured manner.

4. What Are Your Rights Regarding Your Personal Data as the Data Subject?

Regarding your personal data, you have the following rights:

To learn whether your personal data is processed,
If your personal data is processed, to request information about it,
To learn the purpose of processing your personal data and whether they are used in accordance with this purpose,
To know the third parties to whom your personal data has been transferred, both domestically and abroad,
If your personal data has been processed incorrectly or incompletely, to request its correction,
To request the deletion or destruction of your personal data in accordance with the conditions prescribed in the KVKK legislation,
If you request the correction of incomplete or incorrect data or the deletion/destruction of your personal data, to request that this be communicated to the third parties to whom your personal data has been transferred,
To object to the result arising from the exclusive analysis of the processed data through automated systems, which is unfavorable to you, and
If you suffer damage due to the unlawful processing of your personal data, to request compensation for this damage.

You have these rights.

5. How Can You Exercise Your Rights as the Data Subject?

You can submit your applications and requests related to your personal data through the "Data Subject Application Form" if you wish;

By sending it with a wet signature and a copy of your ID to the address: Gürsel Mah. İmrahor Caddesi No:29 Premier Kampüs Plaza A Blok Office 87 Kağıthane/Istanbul,
By applying in person to Drivee Teknoloji Otomotiv Filo Kiralama Ticaret A.Ş. with a valid ID,
By sending it via Registered Electronic Mail (KEP) address and using a secure electronic signature or mobile signature to our registered electronic mail address: drivee.teknoloji@hs01.kep.tr,
By signing it with a mobile signature or secure electronic signature and sending it via email to info@drivee.io,
By sending it from the electronic mail address previously notified by the Data Subject to Drivee Teknoloji Otomotiv Filo Kiralama Ticaret A.Ş. and registered in our system, to our email address info@drivee.io,

You can send your request to Drivee Teknoloji Otomotiv Filo Kiralama Ticaret A.Ş.

According to the Regulation on the Application Procedures and Principles to the Data Controller, the application of the Data Subject must include the following information: full name, surname, signature (if the application is written), Turkish ID number (if the applicant is foreign, nationality, passport number or ID number if available), address for notification (residence or workplace), email address (if applicable), phone number and fax number, and information regarding the subject of the request.

The Data Subject must clearly and understandably state the subject of the request in the application, along with explanations regarding the rights they wish to exercise. Supporting documents and information related to the request must be attached to the application.

While the request must concern the Data Subject personally, if acting on behalf of someone else, the person submitting the request must be authorized, and this authorization must be documented (power of attorney). In cases involving special categories of data, the applicant must be specifically authorized according to Article 10 of the Regulation on Personal Health Data. Moreover, the application must include identification and address information, and identity verification documents must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be considered.

6. How Soon Will Your Requests Regarding the Processing of Your Personal Data Be Answered?

Your requests related to your personal data will be evaluated and answered as quickly as possible, and no later than 30 days from the date they reach Drivee. If your request is accepted or rejected with an explanation, the response will be sent to the address you provided in the application, either by mail or email, or if possible, using the same method as the request was made. In cases where the evaluation and decision-making process requires additional costs, the fee set by the Personal Data Protection Board's tariff will be applied.