Privacy and Information Security Policy

Company information

1. Platform and information security

The Company takes appropriate technical and organisational measures to prevent unlawful processing of and unlawful access to personal data, and to ensure that data are stored securely.

Depending on the nature of the data processed and related risks, measures such as access authorisation, transaction logging, system security, backup, access controls and service-provider management may be used.

Because internet and electronic communication systems cannot provide absolute security, it is also important that users protect their own access credentials for account and device security. This statement does not limit the Company’s legal obligations regarding personal data security. The data controller is obliged to take the technical and organisational measures necessary to ensure an appropriate level of security.

2. Service providers

In operating the platform and providing services, third parties that provide hosting and technical infrastructure, email, CRM, customer support, analytics and payment infrastructure may be used.

Data are shared with these providers only to the extent necessary to perform the relevant service, and applicable contractual, technical and organisational measures are taken to protect personal data.

Recipient groups, purposes and legal bases for transfers connected with vehicle rental, transfer, chauffeur, yacht/boat and air mobility services are explained in the KVKK Disclosure Notice.

3. Retention and destruction

Personal data are retained for as long as necessary for the purposes for which they are processed and for the retention periods required by applicable legislation.

When the reasons requiring processing cease to exist, data are deleted, destroyed or anonymised in accordance with applicable legislation and the Company’s retention and destruction procedures. Carrying out these steps when processing grounds end is an obligation of the data controller.

4. Cookies and similar technologies

Detailed information on cookies used on the platform, their purposes, durations and preference options is set out in the Cookie Policy.

Use of non-essential cookies is managed in line with user preferences, depending on the cookie type and applicable legislation.

5. Contact and KVKK applications

You may send general questions about our privacy practices to info@lenacars.com.

You may submit formal applications regarding your rights under KVKK:

• in writing to the Company address stated above,
• to the Company’s registered electronic mail (KEP) address, if any,
• using a secure electronic signature or mobile signature,
• via an email address previously notified to the Company and recorded in its systems, to info@lenacars.com

Applications must include information that allows verification of the applicant’s identity and request. Methods that may be used for KVKK applications are regulated in the Communiqué on the Principles and Procedures for Applications to the Data Controller.

6. Policy changes

This policy may be updated due to changes in legislation, services or personal data processing processes. The current version and last update date are published on this page.