Personal Data
Notice

Data Controller

Velox Taxi acts as the data controller for your personal data under the KVKK.

Personal Data We Process

Depending on your relationship with the Service, we may process:

• Identity and contact data: name, surname, phone number, email address and user ID.
• Ride and location data: pickup and destination, route, duration, distance, live or approximate location.
• Transaction and payment data: fare, payment method type, transaction and invoice information.
• Vehicle and driver data: driving license, vehicle and professional qualification information submitted with driver applications.
• Device and security data: IP address, device model, operating system, app version, logs and error records.
• Requests and communications: support requests, form submissions, feedback and correspondence.

Processing Purposes

• Creating memberships and verifying accounts.
• Creating ride requests, matching drivers and passengers, and calculating routes and fares.
• Providing live tracking, ride sharing and safety features.
• Managing payments, invoicing and accounting.
• Evaluating driver and corporate partnership applications.
• Responding to support requests and managing user communications.
• Preventing fraud and misuse, securing systems and improving service quality.
• Meeting legal obligations and responding to competent authorities.

Collection Methods

Personal data may be collected automatically or partly automatically through the mobile application, website, membership and application forms, telephone and support channels, email, cookies, device permissions, location services and transaction records generated while providing the Service.

Legal Grounds

Depending on the processing activity, we rely on conditions under Articles 5 and, where applicable, 6 of the KVKK:

• Processing being necessary for the establishment or performance of a contract.
• Compliance with the data controller’s legal obligations.
• Processing being necessary to establish, exercise or protect a right.
• Processing being necessary for legitimate interests without harming your fundamental rights and freedoms.
• Processing being expressly provided for by law.
• Your explicit consent, only where required and requested separately.

Data Transfers

Your data may be transferred, solely as necessary for the stated purposes and subject to appropriate safeguards, to:

• The relevant driver or passenger to perform a ride.
• Banks and payment institutions to process payments.
• Suppliers providing hosting, maps, notifications, communications, analytics and technical support.
• Authorized advisers providing legal, financial or operational support.
• Competent public institutions, judicial authorities and law enforcement where legally required.

If a new activity requires an international data transfer, lawful transfer mechanisms will be applied and additional information will be provided where required.

Retention and Security

Your data is retained for the period necessary for its purpose and any statutory retention or limitation period. It is then deleted, destroyed or anonymized. Technical and administrative measures such as access control, authorization, logging, backups and appropriate encryption are applied to prevent unauthorized access, loss and unlawful processing.

Your Rights

Under Article 11 of the KVKK, you may apply to the data controller to:

• Learn whether your personal data is processed and request information if it is.
• Learn the purpose of processing and whether data is used accordingly.
• Learn the third parties to whom data is transferred in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction where statutory conditions are met.
• Request notification of correction, deletion or destruction to recipients.
• Object to an adverse result produced exclusively through automated analysis.
• Claim compensation if you suffer damage due to unlawful processing.