It turned out that car rental companies have filed their customers and created a black list. With a software developed according to the statements made by KVKK, customer comments were shared with numerous rental companies.
Personal Data Protection Board (KVKK), made an important statement about car rental companies. It is stated that a notice received is evaluated and within the scope of this notice, the car rental companies plagiarizing customers Explaining that it has reached the conclusion that it is a system, KVKK announced that the legal process has been started regarding the issue.
According to the information obtained, car rental companies, shared their opinions about customers with each other and communicated a blacklist they created to industry stakeholders.. Thus, all companies saw which customers had negative experiences, and they did not rent a car to that person or institution. The authorities, who determined that a special software was developed for this job, said how many rental companies the black list reached in Turkey. they could not detect.
The statement made by KVKK is as follows:
- As a result of the examinations carried out by the Board, in the car rental sector “black list” software/programs/applications.
- Including the “black list” feature of car rental software developers and dealers to car rental companies. car rental software they offer,
- Personal data of real persons who rent a vehicle, who are their own customers, are processed in this software, and the negative effects that occur during the use of the vehicles among these processed data. car rental company reviews including “black list” information, this information is processed,
- Other car rental companies of these software to open are designed as systems that enable
- Thus, personal data of people who rent a car mutually is being shared detected.
- Personal data processed by a car rental company through software unknown number of From the general principles regulated in the fourth article of the law, sharing with the car rental company to the principles of “compliance with the rules of law and honesty”, “processing for certain, clear and legitimate purposes”, “being limited and proportional to the purpose”. would constitute a violation is being evaluated.
- On the other hand, in the blacklist applications that are the subject of the report, car rental companies are the ones that collect personal data from real person customers first hand. are data controllers.
In the light of all these evaluations;
- By putting an end to such unlawful practices, necessary technical and administrative measures regulated in Article 12 of the law in order to ensure that personal data processing processes in the car rental sector comply with the law. should be taken by data controllers,
- About data controllers who apply to the black list application in the car rental sector without taking the aforementioned measures and contrary to the provisions of the law. process will be established It was unanimously decided to inform the public about the issue.
Source :
https://www.sozcu.com.tr/2022/ekonomi/kvkkdan-kiralik-aracta-fisleme-karari-6899551/