Order&Load

KVKK Information Notice

Draft: requires review by a lawyer before publication.

Last updated: 06 Oct 2026

1. Data controller

This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). The data controller is the operator whose name and address are given in the imprint.

2. Categories of personal data processed

Identity (full name), contact (email, phone), professional information (company, role), customer transactions (loads, offers, orders, messages, ratings), location (latest location and nearest city while sharing is turned on in the driver app), visual records and documents (CMR, delivery note, delivery photo), transaction security (IP address, session record, password hash).

3. Purposes of processing

Membership and company verification; handling load, offer and order processes; tracking transport and its documents; communication between companies; information security and fraud prevention; fulfilling legal obligations and providing evidence in disputes.

4. Legal grounds

Art. 5(2)(c) KVKK (conclusion and performance of a contract), Art. 5(2)(ç) (legal obligation), Art. 5(2)(e) (establishment, exercise or protection of a right) and Art. 5(2)(f) (legitimate interest). Driver location is processed for the performance and tracking of the transport, and only when the driver turns on sharing in the app.

5. Method of collection

Data is collected electronically through the registration and company forms, the dashboard, the driver app and session cookies.

6. Transfers

Data may be transferred to the companies that are the other party to a job (in Turkey or abroad), to data processors providing services to us (hosting) and, upon request, to competent public authorities and institutions. The basis for transfers abroad under Art. 9 KVKK will be added to this notice once the company structure is settled.

7. Your rights under Art. 11 KVKK

You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used for that purpose; to know the third parties to whom it has been transferred; to request rectification if it is incomplete or inaccurate, erasure or destruction when the conditions are met, and notification of these actions to the parties to whom it was transferred; to object to an outcome against you resulting from analysis by automated systems; and to claim compensation if you suffer damage due to unlawful processing.

You can send your requests to the address on the Contact page from the email address registered to your account. Requests are concluded free of charge within thirty days at the latest.