Privacy and Personal Data Notice (KVKK)
This is an English translation for information. The official text is the Turkish version; if the two differ, the Turkish text applies.
Explains how we process your personal data and your rights under KVKK. Last updated: August 2026.
As Konsey Özel Servis ("Konsey", "we"), we care about the security of your personal data. This notice has been prepared to inform you about the personal data processed through our website and services, under Personal Data Protection Law No. 6698 ("KVKK").
1. Data controller
Data controller: Konsey Özel Servis – Atlantik İş Merkezi, İnönü Mah., 1733. Sk., Başkent Sanayi Sitesi No:5/33, Yenimahalle / Ankara. (Legal entity title and MERSİS/tax details are shared on request.)
2. Personal data we process
Through the contact form, phone, WhatsApp and the "Get a maintenance price" tool, we may process: name and surname, phone, email, vehicle details (brand, model, year, engine; plate/chassis number where needed) and the content of your request or message.
3. Purposes of processing
This data is processed to prepare quotes and prices, carry out the booking and service process, contact you, improve service quality and meet the related legal obligations.
4. Legal basis
Under KVKK Article 5, your personal data is processed on the legal grounds that it is directly related to entering into or performing a contract, that it is necessary to meet our legal obligations, and our legitimate interests; and, where required, based on your explicit consent.
5. Transfer
Your data may be shared with business partners/suppliers to the extent the service requires, and with legally authorised institutions. Contact data collected through forms is not sold to third parties for marketing.
6. Retention period
Your personal data is kept for as long as the purpose of processing requires and for the periods set out in the relevant legislation; at the end of that period it is deleted, destroyed or anonymised. In conversations with the website assistant (Baron), information such as phone and plate numbers is masked and kept for at most 30 days; messages are processed with Google Cloud's AI service in the European Union region so they can be understood.
7. Your rights under KVKK (Article 11)
You have the right to learn whether your personal data is processed, to request information, to learn whether it is used for its intended purpose, to request correction if it is incomplete or incorrect, to request deletion/destruction when the conditions are met, and to request compensation for damage if processing is unlawful.
8. How to apply
You can send requests about your rights through the channels on our contact page (phone / WhatsApp: +90 532 203 81 68). See our Terms of Use page for the rules of using the site.
9. Cookies and third-party services
Our site uses cookies for basic functions and includes third-party services such as an embedded map, live chat (AI assistant) and a social media feed. These services are subject to their own privacy policies.
Analytics and advertising preferences: Google Analytics/Ads, Meta Pixel, TikTok Pixel (only on the relevant pages) and Microsoft Clarity load only after you choose "Accept". If you do not decide or you reject, no measurement request is sent to these providers; Google Consent Mode is kept in the "no consent" state and no cookieless ping is sent either. You can change your preference from the "Cookie preferences" link at the bottom of the page.
Microsoft Clarity: Clarity is used to understand page usage (scrolling, clicks, heat map). Clarity loads only after you choose "Accept", uses cookies and transfers data to Microsoft; it does not load if you do not decide or you reject.
Other advertising and analytics tools (active when an ID is set): the infrastructure is ready for the X (Twitter) Ads pixel, LinkedIn Insight Tag, Microsoft Ads UET tag and Yandex Metrica; none of these load unless the relevant ID is set. When set, they also load only after you choose "Accept", may use cookies and transfer data to the relevant provider; they do not load if you do not decide or you reject. Which tool is active is updated in this notice.
Cookieless counter: When phone, WhatsApp, booking and quote links are clicked, and when "Accept" or "Reject" is chosen in the cookie banner, only the page address, click type and day are counted as totals on our own server. This counter writes no cookies, creates no device or user ID, does not store IP address or browser information, and works regardless of your cookie preference; no personal data is processed. The aim is to see which pages help people reach the service and to improve measurement accuracy.
Photos, videos and reading the vehicle registration at intake
Vehicle photos and videos optionally added to a booking request or taken during service are used to understand the complaint, document the vehicle's condition on arrival and departure, explain the work done and manage the service record. Do not include people's faces, ID/registration documents, addresses, payment details or unrelated third-party data in the images.
These files are not published on public pages. A time-limited link valid for at most 15 minutes may be created so that authorised staff can view them in the protected service panel. Copying this link within its validity period or sharing it with an unauthorised person creates an access risk; the link must not be shared. Files should be kept only for as long as needed for the service and applicable retention obligations, and deleted when the purpose ends.
Plate and mileage photos: At vehicle intake, up to three photos per section may be taken to document the plate and the odometer. Temporary photos not yet linked to a booking, work order or vehicle record are kept in a protected area for at most 24 hours and are then put into the automatic deletion process. Photos linked to the service record with the intake approval are moved to the service media archive to document the arrival condition and the approved mileage; they are removed when the purpose or applicable retention obligation ends, or when authorised staff explicitly delete them. Staff email/phone details or storage paths are not shown to the client in temporary upload and linking records.
Reading the vehicle registration at intake: An image of the registration document taken by authorised staff during service intake is processed through Google Cloud Vision to read the vehicle information and, where needed, check for missing records. The raw registration photo is normally kept accessible to the application for at most 7 days in a separate, non-public Storage area; apart from automatic reading, only authorised staff with an active Administrator role can open the image. When an authorised Administrator explicitly confirms that the check is complete, they can permanently delete the image from application access earlier; only viewing the image or closing the viewing window is not deletion. Even if the scheduled technical clean-up is delayed, normal panel access closes at the end of day 7. An object deleted from the application may be kept, for the configured period, in a provider recovery copy that cannot be accessed from the panel while Google Cloud Storage soft-delete is enabled in the live storage policy (current policy: at most 7 days); if this feature or period changes, the actual policy applies. No public or time-limited sharing link is created. No raw image or raw OCR text is written to Firestore. Name, address, Turkish ID number and chassis number are not taken into the result record. Only the plate, make-model, model year, fuel, engine displacement and, if clearly shown on the document, the engine code are written to the booking/vehicle record if staff check and approve them on screen. A separately taken plate photo may be added to the protected media archive to document the vehicle's arrival condition.
"My Garage" customer pre-registration: A verified customer account may enter, before coming to the service, its relationship to the vehicle, the registration holder's name and phone, the plate and optional vehicle details; adding a registration photo is not mandatory and at most three photos can be added. Temporary photos that are not submitted are kept in a protected area for at most 24 hours, and photos submitted for review are kept in normal application access for at most 7 days for Administrator review. Only an active Administrator can open the image; no public or time-limited sharing link is created. Automatic reading only produces editable suggestions; raw OCR text is not stored. A record submitted by the customer has the status "awaiting review" and does not by itself prove vehicle ownership or Konsey service history. A definite vehicle relationship is not established until the registration holder's phone is verified and the Administrator review is completed. Pre-registration and security records are kept for a limited period; approved registration holder and vehicle details are stored for managing the customer account and service relationship.