1. Data Controller

As BOM Motor Sports and Trade Inc. ("BOM" or "the Company"), the protection of your personal data obtained during the execution of our processes is one of our primary priorities. We attach great importance to ensuring the security of your personal data and its use/processing in accordance with the legislation. This disclosure text contains information on how we process your personal data in our capacity as data controller.

2. For what purposes and on what legal grounds do we process your personal data?

Articles 5 and 6 of the Personal Data Protection Law regulate the legal grounds for personal data processing. Below, we have listed the purposes for which we process personal data and the legal grounds we rely on for these purposes:

For What Purposes Are Your Data Processed?

• Creation of your customer record,

• Evaluation and fulfillment of your requests for driving experiences, events, and competition participation,

• Execution of financial and accounting transactions, including payment processing,

• Contacting you within the scope of the products and services we offer (e.g., making a call to provide information about a driving experience you are interested in),

• Execution of financial and accounting affairs related to payments,

• Receiving and concluding your suggestions, requests, and complaints,

• Carrying out customer satisfaction activities,

• Conducting activities aimed at developing and improving our products, services, and processes,

• Reporting, auditing, and reviewing our business processes, and ensuring our compliance with the policies, practices, and rules of our group companies and manufacturer standards.

• Fulfilling legal obligations arising from the current legislation (e.g., processing your data for invoicing).

• Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where we are required to notify these institutions (e.g., sharing your information when a public authority requests information regarding a transaction suspected of being unlawful).

• Protecting and exercising our rights and carrying out legal processes in case of a dispute,

• Detecting fraudulent or unlawful transactions within the scope of providing products and services; in this context, protecting the rights of our customers and our Company.

On What Legal Grounds Are Your Data Processed?

• Law Art. 5/2 (c) It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract.

• Law Art. 5/2 (f) It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• Law Art. 5/2 (ç) It is mandatory to process data for the data controller to fulfill its legal obligation.

• Law Art. 5/2 (e) It is mandatory to process data for the establishment, exercise, or protection of a right.

Processed Personal Data

• Identity: (Name, Surname, Date of Birth, Turkish ID Number, Copy of ID, Copy of Driver's License, Customer Number)

• Contact: (Phone Number, E-mail Address, Address)

• Financial: (Information regarding Payments and Payment Instruments, Invoice Information)

• Customer Transaction: (Order Information (Product/Services Subject to Order, Order Amount, Delivery Information Included), Invoice Information, Corporate Customer's Authorized Company Information, Request/Complaint Information)

• Professional Experience: (Occupation Information, Title)

• Vehicle Information: (License Plate Number, Make, Model information)

• Risk Management: (Information related to preventing irregular or unlawful transactions)

• Legal Action: (Correspondence with Judicial Authorities, Information regarding Lawsuit/Enforcement Files in case of a Dispute)

 

3. With whom and for what purposes do we share your personal data?

Your personal data is shared with third parties in accordance with the provisions of the Law and relevant legislation, within the scope of the purposes and legal grounds stated above, in order to fulfill the purposes set out in this disclosure text. Accordingly, the parties with whom we share your personal data and the purposes are specified below:

• Our Suppliers and Business Partners: Receiving support from domestic and international suppliers and business partners within the scope of product or service supply (e.g., obtaining infrastructure support from a supplier for SMS deliveries), and carrying out financial and accounting processes.

• Our Group Companies: Reporting, auditing, and reviewing our business processes, and ensuring our compliance with the policies, practices, and rules of our group companies.

• Manufacturer: Reporting, auditing, and reviewing our business processes, and ensuring our compliance with the policies, practices, and rules of the international manufacturer.

• Authorized Institutions and Organizations: Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where we are required to notify these institutions.

Within the scope of transferring your personal data abroad, the Company acts in accordance with the rules stipulated in Article 9 of the Law. It takes all necessary technical and administrative measures for the secure transfer of your personal data by third parties and its processing in accordance with this Disclosure Text.

 

4. How and on what legal grounds do we collect your personal data?

 

Your personal data is collected by automatic, partially automatic, and non-automatic methods, provided that it is part of a data recording system, through your physical or electronic sharing.

 

5. How can you exercise your rights regarding your personal data?

 

Article 11 of the Personal Data Protection Law regulates the rights of data subjects. Pursuant to this article, you have the following rights:

• To learn whether your personal data is being processed,

• To request information if your personal data has been processed,

• To learn the purpose of the processing of your personal data and whether they are used in accordance with their purpose,

• To know the third parties to whom your personal data is transferred domestically or abroad,

• To request the rectification of your personal data if it is incomplete or incorrectly processed, and to request that the transaction made in this context be notified to third parties to whom your personal data has been transferred,

• To request the deletion or destruction of your personal data if the reasons requiring its processing have disappeared, despite being processed in accordance with the Law and other relevant laws, and to request that the transactions made in this context and in case your personal data is incomplete or incorrectly processed, be notified to third parties to whom your personal data has been transferred,

• To object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,

• To demand compensation for damages if you suffer damage due to the unlawful processing of your personal data.

The main methods you can use to exercise your rights are as follows:

By filling out the Application Form:

• You can send documents regarding your requests by mail to the Company's address: Firuzköy Bulvarı No.21 Avcılar/İstanbul.

• You can send an e-mail containing your request to botopyu@borusanotomotiv.com from your e-mail address registered in our systems.

You can also submit your requests to us by using other methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.