Personal Data Protection (KVKK)

Last updated: 12.09.2026

Data controller

This notice is prepared under Article 10 of Turkish Personal Data Protection Law no. 6698 (“KVKK”) by the data controller DRD Group Sigorta Aracılık Hizmetleri Limited Şirketi (“the Company”).

Registered office: Aktarhüssam Mah. 1. Değirmen Sk. Değirmen İş Hanı No: 9 İç Kapı No: 404, Osmangazi / Bursa. Contact: 0543 789 66 55 — info@drdgroupsigorta.com.

Personal data processed

We process the data you submit through the quotation and contact forms on this site, or by telephone, WhatsApp and e-mail:

• Identity data: name, surname, national ID number where required to issue a policy
• Contact data: telephone number, e-mail address, address, city and district
• Insured asset data: vehicle plate and model, property address, floor area and construction type
• Health data: only for health and life classes, based on your explicit consent and limited to the insurer's requirements
• Transaction security data: IP address, date and time of the request

Purposes of processing

Your data is processed to prepare insurance quotations, issue and renew policies, open and follow claim files, communicate with you, meet statutory obligations and keep a record of your request.

Your data is never sold, nor shared with third parties for marketing purposes without your explicit consent.

Legal grounds

Processing relies on Article 5/2 of the KVKK — necessity for the conclusion or performance of a contract, compliance with a legal obligation and legitimate interest — and, for health data, on your explicit consent under Article 6/3.

Transfers

Your data is transferred only as required by your request and only to the extent necessary:

• Licensed insurance companies from which quotations are obtained and which issue the policy
• Authorised bodies and pools such as the Insurance Information and Monitoring Centre, TARSIM and DASK
• Public authorities and judicial bodies where legally required
• Software, hosting and archiving suppliers, under confidentiality undertakings

Retention

Data is retained for the limitation and record-keeping periods required by insurance legislation and the Turkish Commercial Code, as a rule for 10 years from the end of the policy relationship. Requests that remain at quotation stage and do not become policies are deleted or anonymised within 2 years at the latest.

Your rights

Under Article 11 of the KVKK you have the right to learn whether your data is processed, to request information about it, to learn the purpose of processing and the recipients, to request correction of incomplete or inaccurate data, to request erasure or destruction, to request restriction of processing, to object to adverse results of automated analysis, and to claim compensation for damage.

You may submit requests in writing to info@drdgroupsigorta.com or to our registered office. Applications are answered free of charge within 30 days at the latest.