1. Identity of the Data Controller
Your personal data is processed by vita RnD Teknoloji Anonim Şirketi, as data controller, within the scope described below.
- Trade Registry No: 325714
- MERSIS No: 0926103237400001
- Tax Office / No: Pendik Tax Office / 9251032374
- Address: Sanayi Mah. Teknopark Bul. No: 1/4C İç Kapı No: 307 Pendik / İstanbul
- Email: kvkk@vitarnd.com
2. Personal Data Processed
Your personal data in the following categories is processed:
- Identity Data: First name, last name.
- Contact Data: Email address.
- Customer Transaction Data: Subscription plan, payment history, billing information (Turkish ID number or tax ID number, tax office, billing address).
- Transaction Security Data: Encrypted password, session tokens, IP address.
- Technical Data: API usage logs (endpoint, timestamp, response time, status code, number of nodes, number of vehicles).
- Website Usage Data: Visit and page view information (unless analytics cookies are turned off; for visitors arriving via a link in one of our emails, also linked to their customer record).
- Marketing Data: Email communication preferences (based on explicit consent only).
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Creating your membership and managing your account
- Providing the API service and managing access keys
- Carrying out subscription and payment transactions
- Keeping invoice and accounting records within the scope of legal obligations
- Providing technical support
- Monitoring service usage, quota management and analysis
- Ensuring information security and preventing fraud
- Product development and improving service quality
- Where explicit consent exists, informing you about products and campaigns
4. Legal Grounds for Processing Personal Data
Your data is processed on the following legal grounds under KVKK Art. 5 and Art. 6:
- Establishment and performance of a contract (Art. 5/2-c): Providing the service under the terms of use.
- Being expressly provided for by law (Art. 5/2-a): Obligations under tax legislation and the Turkish Commercial Code.
- Legitimate interest (Art. 5/2-f): Service security, analysis and development activities, and linking visits from email links to the customer record (without harming fundamental rights and freedoms; you can stop it by turning off analytics cookies).
- Explicit consent (Art. 5/1): Marketing and promotional communications.
5. Parties to Whom Personal Data Is Transferred
Your personal data may be transferred to the following parties within the framework of KVKK Art. 8 and Art. 9:
- Infrastructure service providers: Infrastructure services required to provide the service, such as hosting, database, authentication, email delivery and security (bot protection). Transfers are carried out in accordance with KVKK Art. 9.
- Analytics and ad measurement services: Statistical data on site usage (unless you turn off analytics and marketing cookies).
- PayTR Ödeme Hizmetleri A.Ş. (Türkiye): Payment transactions. A data processing agreement is in place.
- Paraşüt / Fonzip Yazılım A.Ş. (Türkiye): E-invoicing and accounting integration.
- Authorized Public Institutions and Organizations: Within the scope of legal obligations or official requests.
6. Method of Collecting Personal Data
Your personal data is collected electronically through the registration forms on the vitaRoute website and mobile application, API usage, the payment form and support requests.
7. Rights of the Data Subject
Under KVKK Art. 11, you have the following rights:
- To learn whether your personal data is processed
- If it has been processed, to request information about it
- To learn the purpose of processing and whether it is used in line with that purpose
- To know the third parties to whom it is transferred in Türkiye or abroad
- To request correction of incomplete or incorrectly processed data
- To request deletion or destruction within the conditions set out in Article 7 of the Law
- To request that corrections and deletions be notified to third parties to whom the data was transferred
- To object to a result against you arising from the analysis of processed data exclusively through automated systems
- To claim compensation for damages if you suffer harm due to unlawful processing
You can send your applications to kvkk@vitarnd.com or mail a petition bearing your wet signature to the address above. Applications are answered within 30 days at the latest after identity verification.
If your application is rejected, the response is found insufficient or no response is given in time, your right to file a complaint with the Personal Data Protection Board is reserved.