Privacy Notice under the Turkish Personal Data Protection Law (KVKK)

Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data, we inform you about the following processing carried out through Kenscan. The data controller is Özkoruyucu Yazılım Limited Şirketi.

We process the username you provide in the membership form and the other data collected at membership: your email address, first and last name, password, your mobile phone number and its country if you verify it by SMS, and your profile photo if you add one, electronically in order to create your account, give you access to it and manage your membership. Data necessary for setting up or carrying out the membership service is processed under Article 5(2)(c) of the Law. In published listings, the listing owner is shown by their account's username (pseudonym).

We process the vehicle licence plate you enter in the listing form and other listing data such as the vehicle type, brand, model, model year, mileage or operating hours, price and currency, the vehicle's location, its features, number of previous owners, description and photos electronically in order to create the listing and link it to the vehicle. Those of these operations that are necessary to provide the listing service are based on Article 5(2)(c) of the Law.

We verify identity and the authorisation to list a vehicle through the Electronic Listing Verification System (EİDS). During verification, your mobile phone number and the vehicle's licence plate (and, for dealer accounts, the tax number and dealer licence number) are transmitted electronically; from EİDS we receive your verified first and last name, the Ministry of Trade's user code for you, the result of the listing authorisation check, and the vehicle's brand, trade name, model year and the end date of the listing authorisation. Data required for the mandatory verification is processed under Article 5(2)(ç) of the Law so that the platform can fulfil its legal obligation.

The plate scan feature is used to match a scanned plate with vehicle listings on Kenscan. If there is a match, the relevant listing is shown. The listing owner's username (pseudonym) is displayed instead of their first and last name.

The plate is read electronically from the camera image. The camera image is not processed on the device: the photo is sent to Kenscan's server, where the plate is read with the help of artificial intelligence. Neither the image nor the searched plate is stored on Kenscan's servers. Use of the plate collected when the listing was created for this search is based on Article 5(2)(c) of the Law, as it is necessary to provide the listing service. Processing of data in the scan carried out by the searching user is based on Article 5(2)(c) of the Law, to provide the search the user requested; where the scanned plate may belong to a third party, it is based on Article 5(2)(f) of the Law (legitimate interest), as the data is used only for matching and is not stored.

As a listing owner, your username can be seen in your published listing by registered users with an active membership. To verify your authorisation to list and your identity, your mobile phone number and the vehicle's licence plate (and, for dealer accounts, the tax number and dealer licence number) are passed to the Ministry of Trade through EİDS. To provide the service, your personal data is transferred, only to the extent needed for each service, to these recipient groups: server and data-hosting providers (running the platform and storing data); a notification service provider (delivering app and browser notifications); the Apple and Google app stores and a subscription-management provider (handling in-app membership payments and subscriptions); a payment institution (taking membership payments made on the website); an SMS service provider (verifying phone numbers); an email service provider (sending verification codes and account notifications); a location-search provider (choosing a listing's location); and an artificial-intelligence service provider (reading the plate from a plate photo). Where requested, data may also be transferred to authorised public authorities under our legal obligations. Some of these providers are located abroad; only the data each service requires is transferred to them, and the transfer is carried out under Article 9 of the Law by signing the standard contracts announced by the Personal Data Protection Board and notifying them to the Authority.

Under Article 11 of the Law, you may learn whether your data is processed and, if so, request information about it, and learn the purpose of the processing and whether your data is used in line with that purpose. You may also learn the third parties in Turkey or abroad to whom your data is transferred, and request that inaccurate or incomplete data be corrected and, where the conditions are met, deleted or destroyed. You may request that these actions be notified to the third parties to whom the data was transferred, object to a result against you that arises solely from automated analysis, and claim compensation for damage you suffer because of unlawful processing.

You may send your application in writing to Ekinli Mah. Ekinli Sk. No: 91, Erenler / Sakarya or by email to contact@ken-scan.com, sent from the email address registered in your Kenscan account, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller. Applications are concluded as quickly as possible depending on the nature of the request, and within 30 days at the latest.