As Kidu Bilişim Teknolojileri (hereinafter referred to as the "Company"), we show maximum sensitivity to the security of your personal data.

​

With this awareness, we take the necessary technical and administrative measures to process and preserve all kinds of personal data belonging to all persons related to our Company, especially you, our valued business partners, in accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the "Law"). . Conscious of the responsibility we bear and in the capacity of Data Controller, you can collect your personal data as explained below and within the limits ordered in Article 4 of the Law;

​

In accordance with the law and honesty rules,

​

accurately and up to date,

​

For specific, explicit and legitimate purposes,

​

Relating to the purpose for which they are processed, limited and measured,

We process it by keeping it in suitable times for the purposes of processing.

​

1. Types of Personal Data Processed, Purposes of Processing and Legal Basis

​

As Kidu, we process your personal data below in line with the stated purposes in order to fulfill our legal and contractual obligations regarding you, our valued business partners.

Accordingly, your personal data specified below will be processed for the purposes described.

​

a. Identity and Contact Data

​

Your Identity and Communication Data will be processed in accordance with subparagraphs a and c of paragraph 5/2 of the Law for the purpose of fulfilling the transactions arising from the Law and fulfilling the contractual obligations. In this context, the relevant data will be processed in order to receive your driver application transactions through the application, to carry out the appointment and cancellation processes within the scope of the journey, and to make the necessary notifications, such as your Name-Surname, TR Identity Number, Personal e-mail address, Personal Mobile Phone number, and the address you have shared.

​

b. Background Location Data

​

Your Location Data will be processed in accordance with subparagraphs a and c of paragraph 5/2 of the Law for the purpose of fulfilling the transactions arising from the Law and fulfilling the Contractual obligations. In this context, the relevant data, location information regarding your current location will be processed while the application is used in order to communicate with the Customer within the scope of the transportation service and to make the necessary notifications.

​

c. Transaction Security Data

​

In order to carry out your driver membership transactions securely, the MACID and Internet Protocol (“IP”) information of the device you are using, the records of the transactions you have made, your application login password. will be processed for the purpose of performance of obligations.

​

d. Driver and Vehicle Information

​

All kinds of diplomas, certificates, course documents, including your D2 Driver's license, required for the provision of transportation service, as well as the license plate and vehicle image information of the vehicle where transportation service will be provided. It will be processed by our company. In this context, the information will be processed for the purposes of providing the transportation service in accordance with the legislation, enabling the customer to communicate quickly with the driver and ensuring service security.

​

e. Financial Data

​

In order to realize the service fee payments resulting from the service you have received from our company, your payment amount in accordance with the clause c (personal data processing is mandatory due to the performance of transportation service) of the Law and within the scope of the company fulfilling its legal obligations within the framework of the Tax Procedure Law, your credit card information, bank account information, IBAN number will be processed. Your personal data can be stored on the electronic platform of a business partner company whose servers are located in Turkey, which will be used by our Company for accounting transactions.

​

f. Legal Transaction Information

​

Correspondence with the judicial authorities belonging to you or related to you, and in case of dispute, information regarding the case/execution files will be processed for the purpose of fulfilling the transactions arising from the Law in accordance with subparagraphs a and c of paragraph 5/2 of the Law. In this context, your relevant personal data is stored for the purpose of responding to court/executive information requests or sharing it if requested by any relevant state institution.

​

g. Image and Audio Data

Your personal data within

the scope of the image and sound recordings obtained within the scope of the negotiations with the Company officials and customer services regarding the requests and complaints regarding the transportation service provided and your personal data within the scope of the profile picture in your account profile may be considered as special quality data, It will be processed and stored in accordance with the measures determined pursuant to the Decision of the Personal Data Protection Board dated 31/01/2018 and numbered 2018/10 regarding "Adequate Precautions to be Taken by Data Controllers in the Processing of Special Quality Personal Data", together with the conditions indicated in Article 6 of the title.

​

h. Risk Management Data

​

Address information, travel time information, service payment method information obtained through the transportation services you have provided within the scope of your use of the application, scoring and comments made on the application related to you, Management and reduction of the technical, administrative and commercial risks of the Company in accordance with paragraph f of paragraph 5/2 of the Law. will be processed within the scope of the Company's legitimate interest for its purposes.

​

I. Marketing Data

​

The reservation information you have made within the scope of your use of the application, the address, location and duration information regarding the journey, the promotion and campaign information you have used within the scope of the application, the past journey and payment information, all the transaction records obtained within the scope of the Company's cookie policy are in accordance with paragraph 5/2 of the Law. Pursuant to paragraph f, it will be processed within the scope of the Company's legitimate interest for the purposes of planning and managing the Company's marketing strategies and obtaining statistical information.

​

j. Your Judicial Registry Information

​

The archived criminal record document that you will share on the application within the scope of the driver application will be kept for the completion of your personal file in accordance with Article 5/2 a of the Law, and this data, which is in the status of special quality data, will not be shared with third parties except for the request of the official authorities.

​

All data specified to be processed by the Company within the scope of this article, in order to provide the transportation service in a safe and flawless manner, with real or legal persons who will provide transportation service, with business partner organizations providing server and infrastructure services to our Company, and with relevant government institutions if requested in accordance with the law. It can be shared under the specified conditions or in the presence of your explicit consent.

​

2. Legal Rights of the Personal Data Owner

​

In this context, our valued Customers may apply to our Company, which has the title of data controller within the scope of Article 11 of the Law, whenever they deem appropriate, and use the following rights for their persons and their children, of whom they are parents.

​

Accordingly, the persons concerned;

​

Learning whether his personal data is processed or not,

​

Requesting information about the processed personal data, if any,

Learning the purpose of processing personal data and whether these data are used in accordance with the purpose,

Knowing the third parties whose personal data is transferred, correcting the errors in their personal data and requesting this correction from the relevant third party, if the transfer has been made,

​

In the event that the reasons requiring the processing of personal data disappear, to request that these data be deleted, destroyed or anonymized within thirty days in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data, and if the transfer has been made, to request that this request be forwarded to the transferred third parties,

​

Objecting to a negative result related to the person as a result of the processed data,

In case of damage due to illegal data processing, they have the right to claim the damage within the framework of the law.

​

3. Application Procedure and Content

​

Applications for the above-mentioned requests;

After filling the 'Data Owner Application Form' of our company, it can be made in writing or electronically using the methods listed below.

In case of a written request;

​

You can submit a wet-signed copy of the Data Owner Application Form to our Company personally with a document identifying your identity, or by proxy, which indicates that you are authorized to apply for the rights listed in Article 11 and with a notarized power of attorney, or you can submit it via a notary public on our Company's website. You can send it to your address.

​

In case of electronic request;

By signing the Data Owner Application Form with an electronic or mobile signature with a “secure electronic signature” certificate defined in the Electronic Signature Law No. 5070, you can send it to our Company's info@kidu.co address, or you can send it to our Company. and using the e-mail address registered in the Company's information systems, by e-mail.

4. Answering Applications

​

Applications written in Turkish, which will come to our company and contain the requests of the person concerned, will be responded to as soon as possible and within 30 (thirty) days at the latest, via e-mail or physical letter, and the necessary actions will be taken by our relevant units.

 

Within the scope of the Communiqué on Application Procedures and Principles to the Data Controller (“Communiqué”) published by the Personal Data Protection Authority, if the answering process requires a separate cost, this process will be carried out with a fee based on the pricing set out in the Communiqué.