KVKK Disclosure

PERSONAL DATA PROTECTION LAW (KVKK) DISCLOSURE

Data Controller: Drivora Teknoloji A.Ş. — kvkk@drivora.com

1. PERSONAL DATA PROCESSED AND PURPOSES

As Drivora, we process the following personal data to provide services through our platform, ensure user security, and fulfill our legal obligations:

• •Name and surname
• •Email address
• •Phone number
• •IP address and device information (for security and verification)
• •Listing data (vehicle information, photos, price)
• •Messaging records

2. LEGAL BASIS

Your personal data is processed based on: Article 5/2 of KVKK (performance of a contract), Article 5/2-(ç) (legitimate interest), and Article 5/1 (explicit consent).

3. DATA RECIPIENTS

Your personal data may be shared with technical infrastructure providers (server/cloud), SMS service providers, and public authorities when legally required. Your personal data is never sold to third parties.

4. RETENTION PERIODS

• •User profile: 3 years after account deletion request
• •Listing data: 5 years after expiry
• •KVKK consent records: 10 years (legal obligation)
• •Server access logs: 2 years

5. DATA SUBJECT RIGHTS (KVKK Article 11)

You may exercise the following rights by contacting kvkk@drivora.com:

• •Learning whether your personal data is being processed
• •Requesting information about processing if applicable
• •Learning the purpose of processing and whether it is used accordingly
• •Knowing the third parties to whom data is transferred
• •Requesting correction of incomplete or incorrect data
• •Requesting deletion or destruction of data
• •Requesting notification of corrections/deletions to third parties
• •Objecting to results arising from automated analysis of processed data
• •Claiming compensation for damages arising from unlawful processing

6. CONTACT

For KVKK requests, contact kvkk@drivora.com or use the data request form on the platform.