1. Introduction and scope
This privacy policy explains how the KentPlanner mobile application, developed by Kent Kart Ege Elektronik Sanayi ve Ticaret A.Ş. (Kentkart), processes personal data.
The application is used by drivers, vehicle owners, field personnel and users authorised by the organisation. User accounts are not created through the application. Accounts are defined by the organisation that assigns the application to its personnel.
2. Data controller and data processor
This distinction matters because it determines who you should address your requests to.
The data controller is the organisation that assigns the application to its personnel. That organisation determines the purposes and means of processing personal data. It is also responsible for the accuracy of the data entered into the system.
As a data processor, Kentkart acts under Article 3 of Law No. 6698 on the Protection of Personal Data, in accordance with the instructions of the data controller and solely for the purpose of providing the service. Kentkart does not use this data for its own purposes.
Kentkart acts as data controller for the limited processing activities listed in Article 12 of this policy.
3. Personal data processed and purposes of processing
3.1 User information
Full name, e-mail address, personnel registration number, profile photograph, the organisation you belong to, user role and account status. This information is processed to identify the user, to authorise access and to show task information to the correct user.
This information is not created through the application and cannot be changed from within it. It is defined in the system by the organisation that assigns the application to you; the application only uses it.
3.2 Authentication data
Your password, session key and device identifier, processed to ensure session security and prevent unauthorised access. Passwords are stored in irreversibly encrypted form.
3.3 Location data
Your location is processed for the operation of live job tracking, and only while the application is open and the live job tracking screen is displayed. Your location is not collected while the application is closed or running in the background; the application performs no background location tracking.
When you leave the planned route, your current location is transmitted to the route suggestion service so that a return route can be calculated.
Location data is not processed for measuring employee performance, auditing productivity or general monitoring.
3.4 Visual data
Photographs you take during a vehicle inspection or select from your gallery, and the damage point information you mark on the vehicle image, processed to create and document vehicle inspection records. Photographs are resized and compressed before upload.
3.5 Audio data
The audio stream and call recording of voice calls made between the driver and the control centre through the application, processed to provide and record operational communication. Voice calls are recorded. Bluetooth access is used to connect to an audio device during a call.
3.6 Device and usage data
Device identifier, platform information, application version, application language and notification key, processed to send notifications, to ensure the application runs correctly on the device and to apply the language preference.
3.7 Error logs
When an unexpected error occurs in the application, the error message and technical trace are sent to our servers in order to resolve the error and improve the stability of the application. This record may be associated with your session information.
3.8 Feedback data
The description text you submit through the feedback screen that opens when you shake your device, and any image you choose to attach, processed to investigate and resolve the reported issue. The shake detection that opens the screen is performed on the device; it is not recorded and is not sent to our servers. The screenshot shown on the feedback screen is sent only if you approve it.
3.9 Data not processed
The application does not collect the following: telephone number, national identification number, driving licence details, date of birth, home or work address, advertising identifier, behavioural profiling and marketing data.
The application contains no third party analytics, advertising or user tracking software.
4. How personal data is collected
Your personal data is obtained electronically, partly by automated means while you use the application and partly through the information you enter directly. Your account information is defined in the system by the organisation that assigns the application to you.
5. Parties to whom personal data is transferred
Your personal data is transferred to the following parties solely so that the relevant service can be provided:
- The organisation that assigns the application to you (data controller): operations management
- Notification infrastructure providers: push notification delivery
- Voice call infrastructure provider: provision of the voice call service
- Map service provider: map display
- Route service: calculating the return route when the planned route is left
- Corporate communication platform provider: forwarding feedback to the relevant team
- Application update infrastructure: distribution of application updates
- Authorised public authorities and courts: fulfilment of legal obligations
Kentkart does not sell or rent personal data and does not share it with third parties for marketing purposes.
Service providers are contractually required to protect personal data at a level equivalent to the level of protection set out in this policy.
6. International transfers
To enable the application to function, providers established abroad are used for notification delivery, voice calls, map display, forwarding of feedback and application updates. Because the servers of these providers are located outside Türkiye, the data listed in Article 5 may be transferred abroad.
Which servers the data passes through, and which technical records are kept on those servers, may vary depending on the infrastructure of the provider concerned.
International transfers are carried out within the framework of Article 9 of Law No. 6698 and the relevant secondary legislation.
Notification content is not stored permanently; it is processed only temporarily for the purpose of delivery.
7. Retention and destruction
Your personal data is retained for as long as the purpose of processing requires and for the statutory retention periods laid down in the applicable legislation. At the end of that period the data is erased, destroyed or anonymised.
Retention and destruction periods are determined in accordance with the retention and destruction policy of the data controller organisation. The treatment of your data on deletion of your account is explained in Article 11.
8. Data stored on your device
To function, the application stores your session information, your device identifier and your in-app preferences on your device. When you sign out, the information relating to your session and your account is cleared from the device.
Location data is not stored permanently on the device.
9. Application permissions
The application requests location (while using the application only), camera, photo library, microphone, Bluetooth and notification permissions for the processing activities described in Article 3.
You can withdraw the permissions you have granted at any time from your device settings. When a permission is withdrawn, only the related feature stops working; the other parts of the application remain usable.
10. Data security
Kentkart takes the technical and administrative measures necessary to ensure an appropriate level of security in order to prevent the unlawful processing of personal data and unlawful access to it, and to safeguard its retention. These measures include:
- Access to data restricted to personnel and managers with defined access rights, on an authorisation basis
- All communication with servers carried out over encrypted connections
- Network security measures applied and up to date software used
- Access and transaction logs maintained
- Regular backups of data
- Personnel bound by confidentiality obligations
- Periodic auditing of systems
Under Article 12(2) of the Law, responsibility for taking data security measures is shared jointly with the data controller.
11. Deletion of your account and your data
You can request the deletion of your account and your data through the application. Once your request is confirmed, your account is closed and your data is deleted within thirty days.
Because your account is defined by the organisation that assigned the application to you, deleting your account may affect the obligations arising from your employment relationship. We recommend that you speak to your organisation before submitting a deletion request.
Data subject to a statutory retention obligation continues to be retained for the relevant period, irrespective of a deletion request.
12. Data processed by Kentkart as data controller
For the following limited processing activities, Kentkart determines the purposes and means of processing and therefore acts as data controller:
- Collection and examination of application error logs
- Evaluation of feedback content
- Application version and update management
These activities are carried out on the basis of Kentkart’s legitimate interest, for the purpose of keeping the application technically operational and improving it.
13. Requests and applications
You should address requests relating to your personal data to your own organisation first. For personnel data processed through the application, the data controller is the organisation that assigned the application to you.
For the processing activities listed in Article 12 of this policy, you may submit your applications directly to Kentkart. Other requests reaching Kentkart are forwarded to the relevant data controller and the applicant is informed.
Detailed information on the rights listed in Article 11 of Law No. 6698 and on how to exercise them is set out in the data controller’s privacy notice.
14. Map service
The application contains Google Maps features and content. Use of these features and content is subject to the Google Maps Additional Terms of Service (https://maps.google.com/help/terms_maps/) and the Google Privacy Policy (https://policies.google.com/privacy). Google acts as an independent data controller in respect of the data it processes within the scope of the map service, for the purposes it determines itself.
15. Contact
For questions and applications concerning privacy, you can reach Kentkart through the following channels.
Kent Kart Ege Elektronik Sanayi ve Ticaret A.Ş.
Address: Gümüşsuyu Mahallesi, Muhtar Kamil Sokak No:3 Kat:4, 34437 Beyoğlu / İstanbul
E-mail: [email protected]
Registered electronic mail (KEP): [email protected]
Telephone: +90 232 445 61 81
Website: https://www.kentkart.com
Applications must be made in accordance with the procedures set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
16. Updates to this policy
This policy may be updated in line with changes in legislation or changes in how the application operates. The current text takes effect on the date it is published. Users are informed through the application in the event of substantial changes.
This policy took effect on 19 August 2026.