Purpose and scope
This policy sets out the principles DriveX Motion applies to comply with the Turkish Personal Data Protection Law No. 6698. It covers customers, members, dealer and supplier representatives, job applicants and website visitors.
Principles
Personal data is processed:
- lawfully and fairly,
- accurately and kept up to date where necessary,
- for specified, explicit and legitimate purposes,
- relevant, limited and proportionate to those purposes,
- and retained only as long as required by law or by the purpose.
Retention and destruction
Data is kept for statutory periods (e.g. 10 years for commercial records) or as long as the purpose requires, then deleted, destroyed or anonymised in periodic destruction cycles.
Security
- Encrypted connections and irreversible password storage
- Two-step verification and role-based access
- Access logs and regular backups
- Confidentiality undertakings and staff training
- Data security clauses in supplier contracts
Data subject rights
Data subjects may exercise their rights under Article 11 KVKK via our application form. Applications are concluded free of charge within 30 days at the latest.
This is a translation for information purposes. In case of any discrepancy, the Turkish version prevails.