Privacy Notice and Policy

1. Data Controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK" — Turkey's personal data protection law), TPT OTO SAN. TİC. LTD. ŞTİ. (the "Company") acts as the data controller and processes your personal data as part of the TemassizArac service operated via arac.temassizapp.com.

2. Nature of the Service

TemassizArac is a communication intermediary service that lets a person near a vehicle — after scanning an NFC tag or QR code placed on its window/body — send the vehicle owner a voice call, SMS, and (if configured) backup email notification, without ever seeing the owner's phone number. The system never displays the owner's phone number to the visitor at any stage.

3. Personal Data Processed

a) As a vehicle owner activating a tag:

• License plate
• Full name
• Phone number
• Email address (optional, as a backup notification channel)

b) As a visitor wishing to contact the vehicle owner:

• If you use the "I'd like you to contact me" option: your name and phone number
• Any optional note text you add
• Your IP address and the date/time of submission (to prevent misuse)

c) Technical data: Session cookie, browser IP address.

4. Purposes of Processing

• Enabling notification delivery between the vehicle owner and the visitor without either party's phone number being disclosed to the other
• Carrying out tag activation and verification processes
• Sending SMS and email notifications through the relevant service providers
• Preventing misuse, false notifications, and fraud
• Providing technical support and customer service
• Fulfilling legal obligations

5. Legal Basis

Your data is processed under the following legal bases set out in Article 5 of the KVKK:

• Performance of a contract: establishing and operating the Service for the vehicle owner who activates the tag (Art. 5/2-c)
• Legitimate interest: service security and the prevention of misuse and fraud (Art. 5/2-f) — under this basis, the visitor's IP address and submission time are recorded
• Explicit consent: the visitor sharing their own name and phone number via the "contact me" option (Art. 5/1)
• Legal obligation: records that must be kept under applicable law (Art. 5/2-ç)

6. Data Transfers

Your personal data is shared with the following service providers only to the extent technically necessary for the Service to function. Your data is never sold, rented out, or used for advertising purposes.

• Netgsm — to send SMS notifications (the vehicle owner's phone number and message content are transmitted)
• Brevo — to send backup email notifications (only if the vehicle owner has added an email address)
• PayTR — to process extension package payments (your card details are never seen or stored by this website; they are processed directly by PayTR's secure payment infrastructure)
• The server/hosting provider where the Service is hosted

7. Data Retention Period

Tag activation information (plate, full name, phone, email) is retained for as long as the vehicle owner continues to use the tag. Notification records (who sent a notification, when, and for what reason) may be retained for a reasonable period for misuse detection and the resolution of potential disputes. Upon your deletion request, data is deleted or anonymized within a reasonable period, subject to any applicable legal retention obligations.

8. Cookies

Our Service uses only a strictly necessary session cookie for purposes such as displaying error messages and admin panel login. This cookie is automatically deleted when the browser is closed. No third-party cookies are used for advertising or tracking purposes.

9. Your Rights (KVKK Art. 11)

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information about it if so; learn the purpose of processing; know the third parties to whom it is transferred domestically or abroad; request correction if processed incompletely or incorrectly; request deletion under the conditions set out in Article 7 of the KVKK; object to a result that is to your detriment arising from analysis exclusively through automated systems; and request compensation for damages arising from unlawful processing.

You may submit your requests to the following address:

10. Data Security

• All connections are protected with SSL/TLS encryption
• Administrator account passwords are stored hashed using the bcrypt algorithm, never in plain text
• The vehicle owner's phone number is never displayed to the visitor in any interface
• Database access is restricted to authorized personnel only

11. Policy Changes

This policy may be updated as needed. The current policy is always available at arac.temassizapp.com/kvkk.php.