TraxOps
Request Demo

Personal Data Protection Notice (KVKK / GDPR)

Last updated: 2 June 2026

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"), the data controller for personal data processed through TraxOps public sites and contractual relationships is TURUSA LLC (TURUSA Yazılım), Fethiye Mah., Sanayi Cd. No:323, Nilüfer / Bursa, Türkiye. Contact: info@turusa.com.tr | info@traxops.com.

2. Processed Data and Purposes

We process the categories described in our Privacy Policy. Main purposes include providing the TraxOps logistics platform, user authentication, fleet and load management, billing, customer support, security, and compliance with law.

  • Identity and contact data: Name, business email, phone, and company details—processed for contract performance (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) and legal obligations (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)).
  • Location and operational data: Driver location and trip-related data entered by the customer—processed for contract performance and legitimate interest in fleet management (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)), provided that balancing tests and transparency obligations are met.
  • Financial and transaction data: Invoices, payment references, and subscription history—for billing and accounting obligations.

Important: When a TraxOps customer uploads driver or employee data, that customer is generally the data controller toward those individuals; TURUSA acts as a data processor processing data on the customer's documented instructions.

3. Method of Collection and Storage

Data is collected through registration forms, use of the TraxOps web and mobile interfaces, API integrations, support channels, and automated logs. Data is stored on secured servers with access controls and encryption in transit.

4. Transfers to Third Parties and Abroad

Data may be shared with subprocessors (cloud, maps, email, payments) under data processing agreements. Where servers or backups are located outside Türkiye, transfer is carried out based on explicit consent where required, or other mechanisms permitted by the Personal Data Protection Board. Public authorities may receive data only when legally compelled.

5. Retention and Destruction

We retain personal data for the duration of the commercial relationship and statutory periods thereafter. When retention ends, data is deleted, anonymized, or destroyed in accordance with our retention and destruction policy.

6. Rights of Data Subjects

Under KVKK Article 11 (and GDPR where applicable), you may request:

  • To learn whether your personal data is processed
  • To request information if it has been processed
  • To learn the purpose of processing and whether it is used accordingly
  • To know third parties to whom data is transferred domestically or abroad
  • To request correction if processed incompletely or inaccurately
  • To request deletion or destruction under KVKK Article 7
  • To request notification of correction or deletion to third parties
  • To object to results arising solely from automated processing to your detriment
  • To claim compensation for damage due to unlawful processing

7. How to Submit a Request

Send your request in Turkish or English to info@turusa.com.tr with identity verification information. We respond within statutory deadlines (generally 30 days under KVKK). You may also apply to the Turkish Personal Data Protection Authority (KVKK Kurumu) if your request is rejected or unanswered.