Data Controller
This disclosure notice has been prepared by DUSA Rent a Car ("Company" or "we") in accordance with the Turkish Personal Data Protection Law no. 6698 ("KVKK" — Turkey's GDPR-equivalent). The Company, acting as data controller, processes your personal data within the scope, purposes and methods set out below.
Contact
- Legal name: DUSA Rent a Car
- Address: Gevher Nesibe Mah. Kocasinan Bulvarı Yazırdağ Apt. No:188/2 Kocasinan, Kayseri
- Phone: 0534 876 37 73
- Email: info@dusarentacar.com
1. Personal Data Processed
We process the following categories of personal data to provide our rental service:
- Identity data: full name, Turkish ID number, passport number, date of birth, nationality.
- Contact data: address, phone number, email address.
- Driver licence data: licence number, issue date, class, issuing country.
- Financial data: credit card details (stored masked), billing information, payment records.
- Flight / reservation data: flight number, pickup-return times, location preferences.
- Vehicle usage data: pickup and return mileage, fuel level, damage records.
- Site log data: IP address, cookie data, reservation preference history, messages sent via contact form.
2. Purposes of Processing
Your personal data are processed on the lawful bases set out in KVKK articles 5 and 6, for the following purposes:
- Formation and performance of the rental contract;
- Identity verification and driver-eligibility checks;
- Reservation confirmation, cancellation and tracking;
- Payment, invoicing and accounting operations;
- Legal reporting and insurance processing in case of accident, damage or theft;
- Customer service, support and complaint handling;
- Compliance with legal obligations (tax legislation, reporting to authorised public bodies etc.);
- Service-quality improvement and statistical analysis;
- Marketing and campaign communication — only if you have given explicit consent.
3. Parties to Whom Data Is Transferred
Within the scope of the purposes above, your data may be transferred only to the extent necessary to the following parties:
- Insurance companies: in case of accident, damage or theft.
- Payment institutions and banks: for processing payments and deposit holds.
- Authorised public bodies: as required by law (police, tax office, courts etc.).
- Our service providers: IT infrastructure, email delivery, accounting software providers — acting as data processors under confidentiality agreements.
Your personal data are, as a rule, not transferred abroad. If a cross-border transfer becomes necessary or you provide explicit consent, it will be carried out within the safeguards of KVKK article 9.
4. Method and Legal Basis for Collection
Your personal data are collected through reservation forms on our website, phone reservations, the contract and declaration forms signed at vehicle handover, email, the contact form and cookies.
Legal bases: necessity for the formation or performance of a contract (KVKK art. 5/2-c), compliance with a legal obligation (art. 5/2-ç), legitimate interest (art. 5/2-f) and — for marketing — your explicit consent (art. 5/1).
5. Data-Subject Rights under KVKK Art. 11
Under KVKK article 11 you have the following rights:
- To learn whether your personal data are processed;
- To request information if they are processed;
- To learn the purpose and whether processing fits that purpose;
- To know the third parties to whom data have been transferred domestically or abroad;
- To request correction if data are incomplete or inaccurate;
- To request erasure or destruction under the conditions of KVKK art. 7;
- To request that correction / erasure / destruction be notified to third parties to whom data have been transferred;
- To object to outcomes against you arising from exclusively automated analysis of data;
- To claim compensation for damages arising from unlawful processing.
6. How to Exercise Your Rights
To exercise your rights, you can submit a request via one of the following channels:
- Written application: by post to Gevher Nesibe Mah. Kocasinan Bulvarı Yazırdağ Apt. No:188/2 Kocasinan, Kayseri, with wet-ink signature and documents evidencing your identity.
- Email: to info@dusarentacar.com from the email address registered in our system.
Requests will be answered free of charge, within 30 days at the latest. If the request creates an additional cost, a fee may be charged in line with the tariff published by the Turkish Personal Data Protection Authority.
7. Retention Period
Your personal data are retained for the period required by the purpose of processing and, in any case, until the statutes of limitation defined in applicable legislation expire. At the end of that period, the data are deleted, destroyed or anonymised.
This notice is published by Dusa Rent a Car with the right reserved to update it. Updated versions are announced on our website.