PRIVACY NOTICE AND PRIVACY POLICY (KVKK)

LAWASHARİNG TURİZM LİMİTED ŞİRKETİ (“Lawasharing” or the “Company”)
places the highest importance on the security and protection of personal data.
In accordance with Turkish Law No. 6698 on the Protection of Personal Data
(Kişisel Verilerin Korunması Kanunu, “KVKK”), the Company acts as a data
controller with respect to individuals whose personal data are processed
(“Data Subjects”).
In this context, Lawasharing operates in compliance with the principles set forth
under KVKK and ensures the lawful processing, storage, transfer, deletion,
destruction, or anonymization of personal data, as well as their security.
This document has been prepared for the purpose of informing users (“User”)
who use the Lawasharing mobile application and/or website (“Application”)
about the purposes, methods, and legal grounds for the processing of their
personal data.

1. Scope and Purpose of the Document
This Privacy Notice and Privacy Policy explains:
• the methods and legal grounds for collecting personal data;
• the categories of personal data processed;
• the purposes of processing personal data;
• the persons and organizations to whom personal data may be
transferred;
• the retention periods of personal data;
• the rights of Data Subjects under KVKK.

2. Data Controller
Pursuant to KVKK, the data controller is:
Company Name: LAWASHARİNG TURİZM LİMİTED ŞİRKETİ
MERSİS No: 0608182744400001
Address: ALTINTAŞ MAH. 31120 SK. A BLOK 29 NOLU B.B NO: 9 AF, AKSU /
ANTALYA, TURKEY
Tax Office: ANTALYA KURUMLAR
Tax Identification Number (VKN): 6081827444
Activity Code: 771101 — Rental of motorized light land vehicles without a driverContact e-mail: hello@lawatechnology.com

3. Processed Personal Data
Identification Data
Name, surname, date of birth, nationality, identity card or passport details,
driver’s license details.
Contact Data
Phone number, email address.
Customer Transaction Data
Registration date, user identifier, rental and service usage data, transaction
history, customer support requests.
Financial Data
Payment details, invoice and receipt information, balance and outstanding debt
information.
Transaction Security Data
IP address, device information, application usage logs.
Location Data
Rental start and end points, GPS data, vehicle location information.

4. Methods of Collecting Personal Data
Personal data are collected electronically:
• through the mobile application;
• through the website;
• via electronic communication channels;
• within the scope of customer support processes.

5. Purposes and Legal Grounds for Processing Personal DataIn accordance with Article 5 of KVKK, personal data are processed for the
following purposes:
• providing vehicle rental services;
• creating and managing user accounts;
• concluding and performing contracts;
• conducting payment and billing transactions;
• providing customer and technical support;
• preventing fraud and abuse;
• complying with legal requirements and fulfilling legal obligations;
• ensuring the security of the service, users, and vehicles.
Personal data are processed based on the following legal grounds:
• necessity for the conclusion or performance of a contract;
• fulfillment of the Company’s legal obligations;
• the legitimate interests of the Company;
• the explicit consent of the user (where required).

6. Transfer of Personal Data
Personal data may be transferred to:
• authorized public authorities;
• payment and infrastructure service providers;
• business partners and technical service providers,
strictly to the extent necessary for the provision of services and in
accordance with Article 8 of KVKK.
Personal data are not transferred to third parties for marketing
purposes without the explicit consent of the user.

7. Retention and Destruction of Personal Data
Personal data are retained:
• for the period required to achieve the purposes of processing;
• within the time limits stipulated by applicable legislation.
Upon the expiration of these periods, personal data are deleted, destroyed,
or anonymized in accordance with KVKK and relevant secondary legislation.

8. Rights of the Data SubjectPursuant to Article 11 of KVKK, you have the right to:
• learn whether your personal data are processed;
• request information regarding the processing of your personal data;
• learn the purpose of processing and whether data are used in
accordance with such purpose;
• request the correction, deletion, or destruction of personal data;
• claim compensation for damages arising from the unlawful processing
of personal data.

9. Requests and Contact Information
You may submit your requests and inquiries regarding the processing of
personal data:
• in writing to the Company’s address:
ALTINTAŞ MAH. 31120 SK. A BLOK 29 NOLU B.B NO: 9 AF,
AKSU / ANTALYA, TURKEY
• by e-mail:
hello@lawatechnology.com
Requests will be reviewed and finalized within a maximum of 30 calendar
days from the date of receipt.
Breniger Strasse 16,
53332 Bornheim, Germany

Head office