DATA PROTECTION NOTICE
Under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK), we inform you how we process your personal data. Updated October 2026.
Data controller
Hasan Enes Özdere - Total Rent a Car (sole proprietorship). Address: Altınova Orta Mah. Vadi Sk. No: 37, 07090 Kepez / Antalya, Türkiye. Tax office: Düden Vergi Dairesi, Antalya. Phone: +90 532 334 52 48. E-mail: info@antalyarentacarservice.com.
Personal data processed
- Identity: full name; at vehicle handover, driving licence and passport/ID details and date of birth (not asked for in the booking form on this website); for bookings made by phone, optionally the month and year of birth
- Contact: e-mail address, phone number
- Transaction: booking record, rental contract, payment method choice, flight details
- Security: IP address, browser and device information, on-site activity logs
Purposes
- Forming and performing the car rental contract
- Confirming the booking and contacting the customer
- Meeting legal retention, tax and accounting obligations
- Measuring service quality and evaluating marketing activity
Legal basis
Processing rests on Article 5 of the KVKK: necessity for forming and performing a contract, explicit provision in law, compliance with a legal obligation, and our legitimate interest. In practice: processing to take and confirm bookings, to stay in touch with you and to conclude and perform the rental contract rests on the necessity of forming or performing a contract; processing for legal record-keeping, tax and accounting duties rests on compliance with our legal obligation; measurement and advertising cookies rest solely on your explicit consent.
Transfers
Your data may be transferred to the providers of hosting, server functions and our database (İlkbyte, Netinternet Bilişim Teknolojileri A.Ş.), of e-mail delivery (Resend), of bot protection and e-mail forwarding (Cloudflare) and of the Google services we use to manage bookings operationally (Gmail, Calendar, Contacts); to measurement providers — Google and, only on our Russian-language pages, Yandex Metrica (Russia); and to public authorities on lawful request. Resend, Cloudflare and Google have their company headquarters in the United States; our database, the site's pages and our server functions run on our server in Türkiye, and the site's content is delivered directly from that server. Until 2 November 2026 our database provider was Supabase (its contracting company is based in Singapore); an old copy of the records created up to that date remains on Supabase's infrastructure in France (Paris, European Union), and no new records are written to it. Measurement and advertising cookies and Yandex Metrica run only with your explicit consent; even if you do not consent, the Google tag still loads and sets no cookies, but sends cookieless signals that include your IP address and the address of the page you are viewing. Transfers abroad are subject to the conditions of Article 9 of the KVKK; you may contact us for detailed information. For the transfer to Russia we obtain your separate, explicit consent, which you may withdraw at any time.
How we collect it
Data is collected partly by automated means: through booking forms on this website, through e-mail, phone or WhatsApp exchanges, and through the rental contract signed at vehicle handover.
Your rights under Article 11
- Learn whether your personal data is processed
- Request information about the processing
- Learn the purpose and whether the data is used accordingly
- Know the third parties, in Türkiye or abroad, to whom it is transferred
- Request correction if it is incomplete or wrong
- Request erasure or destruction where the conditions are met
- Request that corrections and erasures be notified to those third parties
- Object to a decision reached solely by automated analysis that works against you
- Claim compensation for loss caused by unlawful processing
How to apply
Send your request to info@antalyarentacarservice.com or in writing to the address above. We answer free of charge within thirty days at the latest. If you find our answer inadequate, your request is refused, or you receive no answer in time, you may lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days of learning our answer and, in any case, within sixty days of your request (Article 14 of the KVKK).