Protection of Personal Data
ARAS KARGO YURT İÇİ YURT DIŞI TAŞIMACILIK ANONİM ŞİRKETI
PRIVACY NOTICE ON SHIPMENT ACCEPTANCE, TRANSPORTATION, AND DELIVERY PROCESSES
1. Data Controller
As Aras Kargo Yurt İçi ve Yurt Dışı Taşımacılık A.Ş. (“ Aras Kargo ” or the “ Company ”), we respect your privacy and your rights regarding the protection of your personal data. Within this scope, we provide a high standard of protection by taking all necessary technical and administrative measures to ensure the security of your personal data.
Our Company operates as a postal service provider within the framework of the Authorization Regulation on the Postal Sector published in the Official Gazette dated 03.06.2014 and numbered 29019, in accordance with all legislative provisions to which it is subject, including the Postal Services Law No. 6475 and the decisions of the Information Technologies and Communication Board (“ BTK ”), primarily the decision dated 27.12.2016 and numbered 2016/DK-YED/517 regarding the Procedures and Principles for Security Measures for Postal Shipments, the Road Transport Law No. 4925, and the Road Transport Regulation.
In this regard, within the scope of shipment acceptance, transportation, and delivery processes under the provided postal services, we would like to inform you through this Privacy Notice on Shipment Acceptance, Transportation, and Delivery Processes (“ Privacy Notice ”) regarding which categories of your personal data are processed, the methods of collecting your personal data, the purposes and legal grounds of processing, to whom and for what purposes it may be transferred, and the exercise of your rights listed in Article 11 of the KVKK, in our capacity as the data controller pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“ KVKK ”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
2. Methods of Collecting Your Personal Data
As Aras Kargo, we may collect your limited personal data in the categories set forth in the tables below, through fully or partially automated means or non-automated means provided that they are part of any data filing system, via electronic or physical environments, our Company's websites and mobile applications, printed forms (e.g., contracts, shipment creation forms, documents proving service delivery), senders, call center, e-mail, telephone, SMS, fax, cargo/mail, request/complaint/suggestion platforms, online meeting platforms, Company headquarters, regional offices, branches, agencies, and all units affiliated with our Company, our Company's suppliers, business partners and intermediary couriers, internal information technology systems, and integrated systems belonging to authorized public institutions and organizations and other relevant third parties.
3. Categories of Personal Data Processed, Purposes and Legal Grounds for Processing
The purposes and legal grounds for the processing and transfer of your limited personal data within the categories of personal data collected as part of the shipment acceptance, transportation, and delivery processes are explained in detail in the tables prepared specifically for each data subject category below.
A. Senders (Individual or Corporate)
When you wish to send your shipment via Aras Kargo, we process the following information based on your status as a sender within the framework of the purposes and legal grounds explained in the table.
Data Category | Legal Ground | Purpose of Processing |
Identity | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Acceptance of the shipment and creation of the shipment record Management of transportation contract processes Execution of transportation operations, distribution, and delivery activities Execution of business activities and ensuring continuity Execution of sales, finance, and accounting transactions Execution of communication activities Tracking of requests/complaints and management of customer relations and satisfaction Ensuring our Company's operations and shipment security Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities |
Finance * |
KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Execution of sales, finance, and accounting transactions Tracking of requests/complaints and management of customer relations and satisfaction Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
Legal Action * |
KVKK Art. 5/2(e) Necessity of data processing for the establishment, exercise, or protection of a right; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
* Financial information may only be processed if the shipping fee is paid by you.
* Legal action information may only be processed in the event of a legal dispute.
B. Persons Delivering the Shipment to Aras Kargo (If different from the Sender)
If you are not the person specified as the sender on the shipment but are the person delivering the relevant shipment to Aras Kargo, we process your information listed below based on your status as the person delivering the shipment within the framework of the purposes and legal grounds explained in the table.
Data Category | Legal Ground | Purpose of Processing |
Identity | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Acceptance of the shipment and creation of the shipment record Execution of transportation operations, distribution, and delivery activities Execution of business activities and ensuring continuity Execution of sales, finance, and accounting transactions Execution of communication activities Tracking of requests/complaints and management of customer relations and satisfaction Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities |
Legal Action * |
KVKK Art. 5/2(e) Necessity of data processing for the establishment, exercise, or protection of a right; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
* Legal action information may only be processed in the event of a legal dispute.
C. Employees/Authorized Persons/Representatives of Corporate Senders
When you wish to send a shipment via Aras Kargo on behalf of the legal entity for which you are an employee/authorized person/representative, we process your information listed below based on your status as the natural person authorized to send the shipment within the framework of the purposes and legal grounds explained in the table.
Data Category | Legal Ground | Purpose of Processing |
Identity | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Acceptance of the shipment and creation of the shipment record Management of transportation contract processes Execution of transportation operations, distribution, and delivery activities Execution of business activities and ensuring continuity Execution of sales, finance, and accounting transactions Execution of communication activities Tracking of requests/complaints and management of customer relations and satisfaction Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities |
Legal Action * |
KVKK Art. 5/2(e) Necessity of data processing for the establishment, exercise, or protection of a right; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
* Legal action information may only be processed in the event of a legal dispute.
D. Recipients
When a shipment is sent to you via Aras Kargo, we process your information listed below, which is submitted to our Company by the sender based on your status as the recipient, within the framework of the purposes and legal grounds explained in the table.
Data Categories | Legal Grounds | Purposes of Processing | |
Identity Contact Customer Transaction | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Acceptance of the shipment and creation of the shipment record Management of transportation contract processes Execution of transportation operations, distribution, and delivery activities Execution of business activities and ensuring continuity Execution of sales, finance, and accounting transactions Execution of communication activities Tracking of requests/complaints and management of customer relations and satisfaction Ensuring our Company's operations and shipment security Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
| |
Visual Record* | KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Execution of transportation operations, distribution, and delivery activities Tracking of requests/complaints and management of customer relations and satisfaction Ensuring our Company's operations and shipment security Audit / internal audit management Management of storage and archive activities
| |
Finance * | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Execution of sales, finance, and accounting transactions Tracking of requests/complaints and management of customer relations and satisfaction Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
| |
Legal Action * |
KVKK Art. 5/2(e) Necessity of data processing for the establishment, exercise, or protection of a right; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
| |
* Visual records may only be processed by taking a photograph of the delivery address to prove that the address was visited in cases where the recipient is not at home.
* Financial information may only be processed if the shipping fee is paid by you.
* Legal action information may only be processed in the event of a legal dispute.
E. Persons Receiving the Shipment (If different from the Recipient)
If you are not the person specified as the recipient on the shipment but are the person receiving the relevant shipment from Aras Kargo on behalf of the recipient, we process your information listed below based on your status as the person receiving the shipment within the framework of the purposes and legal grounds explained in the table.
Data Categories | Legal Grounds | Purposes of Processing |
Identity Customer Transaction | KVKK Art. 5/2(a) Explicitly stipulated in laws; KVKK Art. 5/2(ç) Necessity for the data controller to fulfill its legal obligation; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
Acceptance of the shipment and creation of the shipment record Execution of transportation operations, distribution, and delivery activities Execution of business activities and ensuring continuity Execution of sales, finance, and accounting transactions Tracking of requests/complaints and management of customer relations and satisfaction Ensuring our Company's operations and shipment security Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
Legal Action * |
KVKK Art. 5/2(e) Necessity of data processing for the establishment, exercise, or protection of a right; KVKK Art. 5/2(f) Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
| Audit / internal audit management Conducting activities in accordance with the legislation Follow-up of legal and compliance affairs Providing information to authorized persons, institutions, and organizations Management of storage and archive activities
|
* Legal action information may only be processed in the event of a legal dispute.
4. Transfer of Your Personal Data
Your personal data processed within the scope of shipment acceptance, transportation, and delivery processes may be transferred to the following recipient groups if the conditions for transfer regulated in Articles 8 and/or 9 of the KVKK are met:
| Transferred Parties | Data Categories | Purpose of Transfer |
|---|---|---|
| Our Suppliers (parties providing us with products and services in areas such as information technology, accounting, legal processes, and archiving) | Identity Contact Customer Transaction Finance Legal Action | For the purposes specified in each data category above, primarily to provide our services and conduct our corporate activities. |
| Senders, recipients, and persons receiving the shipment | Identity Contact Customer Transaction | For the purposes specified in each data category above, primarily to conduct transportation operations, perform shipment tracking and delivery, and ensure shipment security. |
| Our Business Partners (parties with whom Aras Kargo has a solution partnership in the sales and provision of postal services, who mediate in the sale or provision of postal services, or who ensure the provision of additional products, services, and benefits in these processes) | Identity Contact Customer Transaction Finance Legal Action | For the purposes specified in each data category above, primarily to benefit from the opportunities provided by our business partners while providing our services and conducting our corporate activities. |
| Authorized public institutions and organizations (BTK, courts, consumer arbitration committees) | Identity Contact Customer Transaction Finance Legal Action | For the purposes specified in each data category above, primarily to fulfill our legal obligations and to establish, exercise, and protect our rights in case of dispute. |
5. Your Rights as a Data Subject
Your rights as a data subject are regulated in Article 11 of the KVKK, and you may submit your applications regarding your rights to our Company in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller.
To guide you in exercising your rights as a data subject, you can follow the instructions in the Roadmap for Application to the Data Controller .
Important Note: We would like to remind you that no special categories of personal data (e.g., religion or blood type information) should be included within the scope of data subject applications.