Privacy Policy
Last updated:
At Vosgen Otomotiv (“Vosgen”, “we”), we take the protection of your personal data seriously. This policy explains how we process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Controller
- Controller: Vosgen Otomotiv
- Email: [email protected]
- Phone: +90 507 636 30 09
2. Personal data we process
Depending on how you use our services and contact us, we may process:
- Identity and contact data: name, phone number, email address.
- Vehicle data: make, model, registration number, mileage and details of the service you request.
- Service data: appointment dates, requests and complaints, correspondence.
- Security data: IP address, browser and device information, and anti-abuse signals when you submit a form (Google reCAPTCHA).
- Usage data: only with your consent, analytics data such as pages visited and time spent on the website (Google Analytics).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Receiving, scheduling and carrying out appointments, maintenance and repair requests | Performance of a contract, Art. 6(1)(b) |
| Answering your questions and requests | Performance of a contract or legitimate interest, Art. 6(1)(b), (f) |
| Handling insurance claims | Performance of a contract, Art. 6(1)(b) |
| Complying with legal obligations | Legal obligation, Art. 6(1)(c) |
| Securing the website and preventing spam and abuse | Legitimate interest, Art. 6(1)(f) |
| Analysing website usage to improve our services | Consent, Art. 6(1)(a) |
| Sending offers, service reminders and news by email, SMS and phone (optional box in the contact form) | Consent, Art. 6(1)(a) |
You can withdraw your consent at any time via the “Cookie preferences” link at the bottom of the website. Withdrawal does not affect the lawfulness of processing carried out before it.
4. Recipients
We share personal data only as far as necessary for the purposes above:
- Service providers (processors): website hosting (Hostinger), content delivery and security (Cloudflare), form security (Google reCAPTCHA) and, with your consent, website analytics (Google Analytics) and branch maps (Google Maps).
- Business partners: insurance companies and loss adjusters, where the service requires it.
- Public authorities: where we are legally required to do so.
5. International transfers
Some of our service providers process data outside the European Economic Area, including in Türkiye and the United States. Such transfers are based on an adequacy decision (for example the EU–US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses.
6. Retention
We keep personal data only for as long as necessary for the purpose for which it was collected and for the retention periods required by law. After that, the data is deleted or anonymised.
7. Your rights
Under the GDPR you have the right to:
- access your personal data,
- have inaccurate data rectified,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on legitimate interests,
- withdraw your consent at any time.
To exercise your rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.
8. Changes
We may update this policy to reflect changes in the law or in our services. The current version is always published on this page.