Clarification Text

Clarification Text

As the Data Controller, Tripy Mobility Teknoloji A.Ş. (“Tripy Mobility Teknoloji” or “Company”) conducts the processing and protection of your personal data in a secure and meticulous manner.

This clarification text has been prepared and provided to inform you that your personal data will be processed and stored in accordance with the law when using the mobile and web application developed by Tripy Mobility Teknoloji (“Application“) as a customer or user (“User“), and to fulfill the Data Controller’s obligation to clarify as required by the PDPL.

Tripy Mobility Teknoloji fulfills its obligations under the PDPL, including the collection, deletion, destruction, anonymization, transfer, clarification of data subjects, and ensuring data security, among other responsibilities.

With a full understanding of its responsibilities under the PDPL, Tripy Mobility Teknoloji processes your personal data as the “Data Controller” as defined in the PDPL, in the manner described below and within the limits set by the legislation.

Identity of the Data Controller

Company Name : Tripy Mobility Teknoloji Anonim Şirketi

Address : Bahçelievler Mah. 323/1 Cad. C Blok Gazi Üniversitesi Teknokent Binası No:10/50C/101 Gölbaşı / Ankara / Türkiye

Trade Registry Number : Ankara – 481067 MERSİS Numarası 0859134889100001

Purposes and Legal Grounds for the Processing of Your Personal Data

Personal Data Processed

Identity	Name and surname, date of birth, Turkish ID number/passport number, nationality
Contact	Phone number, email address, address, phone ID
Finance	Credit/bank card number, wallet balance, debt amount, invoice number, payment and payment method information
Marketing	Location-based campaign data, usage-based campaign data
Legal Process	Correspondence with judicial authorities, information in the lawsuit file
Customer Transaction	Membership information, customer ID, complaints and suggestions, travel details, Tripy usage details, call center records
Transaction Security	IP address, device ID, user transaction logs, traffic data, application usage information, device operating system and version, device type, hardware model
Location	Location data obtained during the provision of the service

Methods of Collecting Your Personal Data

The personal data categorized above is collected by Tripy Mobility Teknoloji through electronic channels such as the Application and/or email channels and/or via the call center.

Purposes and Legal Grounds for the Processing of Your Personal Data

Tripy Mobility Teknoloji processes your personal data for the purposes and legal grounds listed below in accordance with Article 5 of the Law.

Processed Personal Data	Purpose of Data Processing	Legal Grounds
Name and surname, date of birth, Turkish ID number/passport number, username, nationality, phone number, email address, membership information, customer ID, IP address, user transaction logs, phone ID.	Provision of Services via the Application, creation of membership registration, performance of the user agreement, identity verification, verification of eligibility for vehicle use, ensuring the security of the application and users.	(PDPL/5/2/c) The processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of the contract. (PDPL/5/2/ç) It is mandatory for the data controller to fulfill its legal obligations.
Name and surname, email address, phone number, application usage data, location information, device ID, complaint and suggestion records, credit/bank card number, wallet balance, payment amount, and payment method.	Provision of services via the Application, billing, collection, payment, and customer relationship management processes.	(PDPL/5/2/c) The processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of the contract. (PDPL/5/2/e) Data processing is mandatory for the establishment, exercise, or protection of a right. (PDPL/5/2/f) Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Name and surname, Turkish ID number, phone number, address, credit/bank card number, debt amount, invoice number, payment amount, and payment method.	Managing billing processes, tracking finance and accounting operations.	(PDPL/5/2/c) The processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of the contract. (PDPL/5/2/ç) It is mandatory for the data controller to fulfill its legal obligations. (PDPL/5/2/e) Data processing is mandatory for the establishment, exercise, or protection of a right.
Correspondence with judicial authorities, information in the lawsuit file, membership date, customer ID, complaint and suggestion records, vehicle usage details, call center records, location data, payment information, and application usage information.	Management, supervision, and improvement of services and operations, execution of strategic planning processes, ensuring the security of services, operations, and the application, detection of fraudulent or illegal activities, preventing and detecting fraud and abuse, internal audits, internal control, legal, financial, reporting, and execution of internal operations.	(PDPL/5/2/f) Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Name and surname, email address, phone number, location data, and legal process information.	Reporting potential accidents during the use of the service and notifying relevant public institutions and organizations.	(PDPL/5/2/f) Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Membership information, customer ID, complaints and suggestions, travel details, vehicle usage details, call center records, name and surname, email address, phone number, location data.	Creating individual campaigns for users, offering special opportunities, determining target audiences, conducting activities to enhance user experience, personalizing the Application, conducting direct and personalized marketing activities.	(PDPL/5/1) The explicit consent of the data subject.
Name and surname, phone number, and email address.	Contacting for promotional and advertising purposes.	(PDPL/5/1) The explicit consent of the data subject.

Purposes and Legal Grounds for the Processing of Your Personal Data

Your personal data is transferred to the service provider from whom we receive server (storage) services for the purpose of storing and retaining your personal data, based on the legal ground stated in Article 5, Paragraph 2, (f) of the PDPL: “Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

Your Rights Under the Personal Data Protection Law

By applying to our company, under the PDPL, you have the right to:

Learn whether your personal data has been processed, and if processed, request information regarding it.
Learn the purpose of processing your data and whether it is being used in accordance with its intended purpose.
Learn about third parties to whom your data has been transferred, whether domestically or internationally.
Request correction of any incomplete or inaccurate personal data, and request that this correction be communicated to third parties to whom the personal data has been transferred.
Even if processed in accordance with the PDPL and other relevant laws, request deletion or destruction of your personal data if the reasons for processing no longer exist.

Request the deletion or destruction of personal data and request that this action be communicated to third parties to whom the personal data has been transferred.

Object to the result arising against the individual as a result of analysis through automated systems exclusively (e.g., voice recordings, website cookies, malware, etc.).
Request compensation for damages incurred due to unlawful processing of personal data.

If the application for these purposes requires an additional cost, you may need to pay the fee determined by the Personal Data Protection Authority based on their established tariff. Your requests in the application will be concluded as soon as possible, and at the latest within 30 (thirty) days, depending on the nature of the request.

The rights related to personal data can only be exercised regarding data that belongs to the individual themselves.

In accordance with Article 13, Paragraph 1 of the PDPL, you can submit your requests related to the use of the above rights to our company in writing or through other methods specified by the Personal Data Protection Authority. The channels and procedures for submitting your application to our company under Article 11 of the PDPL are provided below.

How to Contact Us

If you have any questions, comments, or requests regarding this Clarification Text or the processing of your personal data, you can submit your request in accordance with the procedures specified in the “Regulation on the Procedures and Principles of Application to the Data Controller” dated 10.03.2018 and numbered 30356, along with documents showing your identity and the “Application Form for Exercising the Rights of Data Owners under the Personal Data Protection Law No. 6698” available on our website:

You can apply by sending a signed copy to the address: Bahçelievler 323/1 Cad. C Blok Gazi Üniversitesi Teknokent Binası No:10/50c/101 Gölbaşı / Ankara / Turkey
You can apply via your registered KEP (Certified Electronic Post) address by using a secure electronic signature or mobile signature to: [email protected].
You can also send an email to: [email protected].

By reading this Clarification Text, you acknowledge that you have been informed about the processing of your personal data.