Privacy Policy & Data Protection Notice

1. Data Controller

This text has been prepared by Otoroto (the “Platform”) in its capacity as data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Otoroto provides an online directory service listing automotive service businesses across Türkiye. Contact: info@otoroto.com.

2. Personal Data Processed

• Account data: full name, e-mail address, phone number, password (stored in an irreversibly hashed/digested form).
• Business data: business name, category, address, location, contact details, images and description (entered by the business owner).
• Usage data: session information, the pages you request and technical logs (for security and service continuity).

3. Purposes and Legal Grounds of Processing

Your personal data is processed for the purposes of creating and managing membership, business registration/publication, e-mail verification, account security, responding to requests and complaints, and fulfilling legal obligations; relying, within the scope of Article 5/2 of the KVKK, on the legal grounds of the establishment/performance of a contract, legal obligation and legitimate interest. Where explicit consent is required, your consent is obtained separately.

4. Transfer and Infrastructure

The Platform uses Cloudflare infrastructure for hosting, content delivery and database services, and the Brevo (Sendinblue) service for verification and notification e-mails. The servers of these service providers may be located abroad; your data is transferred solely for the purpose of providing the service and with the necessary security measures in place. Your data is not sold to third parties for marketing purposes.

5. Retention Period

Your personal data is retained for as long as your membership continues and throughout the limitation/retention periods stipulated in the relevant legislation; once the purpose ceases to exist, it is deleted, destroyed or anonymised.

6. Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed, request information if it has been processed, learn whether it is used in accordance with its purpose, request its correction if it has been processed incompletely/incorrectly, request its deletion/destruction within the framework of Article 7 of the KVKK, request that these operations be notified to third parties to whom the data has been transferred, object to a result arising against you as a result of analysis carried out exclusively by automated systems, and claim compensation should you suffer damage.

You may submit your requests via info@otoroto.com. Your applications are concluded within 30 days at the latest.

7. Changes

This text may be updated when necessary; the current version is published on this page.