1. Data Controller
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data provided to us; may be processed and transferred by Solara Insurance Brokerage Services Ltd. ("Company" or "Solara Insurance") as the data controller within the scope described below.
Company Contact Information
- Address
- Küçükbakkalköy Mahallesi, Dereboyu Caddesi, R5 Blok No:3A/42 34750 Ataşehir/İstanbul
- kvkk@solarasigorta.com
- KEP Address
- solarasigorta@hs01.kep.tr
2. Your Personal Data Being Processed, Purposes of Processing, and Legal Bases
For the purpose of obtaining an insurance quote, policy issuance, claims processes, and other insurance transactions with our company, your personal data listed below is processed. Our processing activities are based on the legal bases specified in Articles 5 and 6 of the KVKK.
Identity Data
- Personal Data Processed
- Name-surname, TR ID Number, passport number (for foreign nationals), date of birth, place of birth, gender, marital status, photocopy of identity card or driver's license.
- Purposes of Processing
- Establishment of insurance contract, preparation of quote, policy issuance, identity verification, and fulfillment of MASAK regulatory obligations.
- Legal Basis
- KVKK Art. 5/2 (c): Directly related to the establishment or performance of a contract. KVKK Art. 5/2 (ç): Fulfillment of a legal obligation.
Contact Data
- Personal Data Processed
- Phone number, email address, residence address, work address.
- Purposes of Processing
- Transmission of insurance quotes to you, delivery of policy and documents, information and reminder notifications, measurement of customer satisfaction.
- Legal Basis
- KVKK Art. 5/2 (c): Performance of a contract. KVKK Art. 5/2 (f): Legitimate interest of our company (customer communication).
Vehicle and Insurance Information
- Personal Data Processed
- Vehicle plate, chassis number, engine number, license information, vehicle usage type, claim-free information, current policy information, accident report, and photos of damaged parts.
- Purposes of Processing
- Preparation of quotes for traffic insurance, auto insurance, and other vehicle insurances, risk assessment, policy issuance, claim notification, and management of claims processes.
- Legal Basis
- KVKK Art. 5/2 (c): Establishment and performance of a contract.
Financial Data
- Personal Data Processed
- Bank account number (IBAN), credit card information (stored securely), payment and claim-related receipt information.
- Purposes of Processing
- Collection of insurance premiums, premium refunds, and payment of claim compensation.
- Legal Basis
- KVKK Art. 5/2 (c): Performance of a contract.
Transaction Security Data
- Personal Data Processed
- IP address collected during your visit to our website, log records, audio recordings of calls made to our call center.
- Purposes of Processing
- Security of information processing systems, measurement of call center service quality, fulfillment of legal retention obligations.
- Legal Basis
- KVKK Art. 5/2 (ç): Fulfillment of a legal obligation. KVKK Art. 5/2 (f): Legitimate interest of our company (security).
Special Category Personal Data
- Personal Data Processed
- Health data (health history, chronic disease information, test results — only for life, accident, and health insurance), criminal record information (for risk assessment in some products such as driver's license insurance).
- Purposes of Processing
- Risk assessment, quote preparation, policy issuance, and management of necessary processes in case of claims for life, health, and accident insurance.
- Legal Basis
- KVKK Art. 6/3: Your explicit consent is required for the processing of special category personal data.
3. Transfer of Personal Data
Your collected personal data may be transferred to the following persons, institutions, and organizations within the framework of the personal data processing conditions and transfer provisions specified in Articles 8 and 9 of the KVKK, in line with the purposes stated above:
- Insurance and Reinsurance Companies
- For the purposes of obtaining insurance quotes, policy issuance, risk assessment, claim notification, and management of compensation payment processes.
- Authorized Public Institutions and Organizations
- For the fulfillment of legal obligations, primarily insurance legislation (MASAK, Undersecretariat of the Treasury, courts, enforcement offices).
- Service Providers and Business Partners
- For the provision of services such as information technologies (cloud computing, server hosting), archiving, call center, legal consultancy (they have limited access to your data).
- Assistance Companies, Experts, and Repair Shops
- For the provision of necessary services (towing, roadside assistance, expertise, vehicle repair) in the event of a claim.
International Transfer
Your personal data may be transferred abroad in a limited manner for the stated purposes, to service providers residing abroad (email service providers, cloud computing service providers) for technical support, in accordance with Article 9 of the KVKK and relevant regulation provisions, with necessary security measures taken.
4. Method of Personal Data Collection
Your personal data is collected verbally, in writing, or electronically, through automatic or non-automatic methods, via our company headquarters, our website (www.solarasigorta.com), our mobile applications, our call center, our agency office, other organizations we collaborate with, or information transferred from insurance companies. Within this scope, your data is processed on paper (application forms, policies) or digitally (website visits, emails, phone calls).
5. Retention Period of Personal Data
Your personal data is retained for the period necessary for the purposes for which they are processed and for the statute of limitations and legal retention periods stipulated in relevant legislation (Turkish Commercial Code, Insurance Law, Tax Procedure Law, etc.). Upon the expiration of legal retention periods or the disappearance of the processing purpose, your data will be deleted, destroyed, or anonymized by our Company, either ex officio or upon your request.
6. Rights of the Data Subject
KVKK Article 11
In accordance with Article 11 of the KVKK, as the data subject, you have the following rights:
- To learn whether your personal data is being processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether they are used in accordance with this purpose
- To know the third parties to whom your personal data is transferred, domestically or abroad
- To request the correction of your personal data if they are incomplete or incorrectly processed, and to request notification of the transaction made within this scope to third parties
- To request the deletion or destruction of your personal data, although they have been processed in accordance with the provisions of the KVKK and other relevant laws, if the reasons requiring their processing have disappeared
- To object to the emergence of a result against you by analyzing your processed data exclusively through automatic systems
- To claim compensation for the damage you have suffered due to the unlawful processing of your personal data
How to Exercise Your Rights
To exercise your rights stated above, you may submit your request to our Company with documents identifying your identity through one of the following methods:
- In-Person Application
- You may deliver your wet-signed petition to our Company headquarters address in person with your identity document.
- Via Notary
- You may send your wet-signed petition through a notary.
- Registered Electronic Mail (KEP)
- You may send your application form signed with a secure electronic signature to our Company's KEP address.
- You may send it to kvkk@solarasigorta.com using your email address registered in our Company system.
Our Company will conclude your application as soon as possible and, depending on the nature of the request, within a maximum of 30 (thirty) days free of charge. However, if the transaction requires a separate cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.
Explicit Consent Declaration
I have read, understood, and been informed about the "Personal Data Processing and Protection Disclosure" presented to me by Solara Insurance Brokerage Services Ltd. Within the scope of this Disclosure;
- For my Special Category Personal Data: For the purposes of risk assessment, quote preparation, policy issuance, and management of claims processes for life, health, and accident insurance products; my health data (health history, test results, chronic disease information) and criminal record data to be processed and transferred to relevant insurance companies, experts, health institutions, and assistance companies limited to this purpose,
- For Commercial Electronic Messages and Marketing: For me to receive information about new products, campaigns, promotions, renewal reminders, surveys, and other commercial electronic message content offered by your Company via SMS, email, automatic call, or call center,
I declare that I give my explicit consent with my free will.