Turkish source updated: August 4, 2026

Personal Data Protection Notice

This notice explains our personal-data processing activities across the website, mobile apps, call center, and service channels under Turkish data-protection law.

This notice is separate from any explicit-consent statement. Reading or acknowledging it does not constitute explicit consent. This English version is provided for convenience; the Turkish text prevails in case of discrepancy.

Data controller and scope

The data controller that determines the purposes and means of processing is NOWASS YOL YARDIM VE DESTEK HIZMET SANAYI TICARET LIMITED SIRKETI. The data processed varies according to the service used, the breakdown or accident process, membership or package scope, and the request you submit.

Nowass provider and contact details
Corporate information	Details
Registered company name	NOWASS YOL YARDIM VE DESTEK HIZMET SANAYI TICARET LIMITED SIRKETI
MERSIS number	0632155487800001
Tax identification number	6321554878
Registered office	Bahçelievler, 317. Sk. No:1/6 06830 Gölbaşı/Ankara
Contact	+90 312 911 08 06 info@nowass.com.tr https://nowass.com

Personal-data categories processed

Personal-data categories that may be processed depending on the activity
Category	Examples that may be processed depending on the activity
Identity	Full name and, where necessary, national identity/passport, date of birth, nationality, signature, and identity-verification data
Contact	Phone, e-mail, contact address, and billing address
Location	GPS/location, incident or damage location, route, and destination where permission is given or required for the service
Professional information	Occupation, title, or position where required for a campaign, corporate proposal, or business relationship
Legal transactions	Legal requests, authority applications, powers of attorney, and legal-representative data
Customer transactions	Package and service agreement, fuel and mileage data, policy, accident or damage, roadside-assistance, request, complaint, and flight or accommodation data where required
Vehicle	Plate, chassis/VIN, brand, model, model year, fuel and transmission type, and vehicle attributes required for the service
Financial	Payment method, payment-provider transaction/reference/result data, bank-account data required for refunds, collection and compensation data. Nowass does not store raw card data.
Physical security	Security-camera records controlled by a partner facility where a service takes place
Marketing	Permitted communication preferences, surveys, purchase history, campaign and offer preferences, and cookie choices
Transaction security	IP, device/browser, session and access-security records, form/transaction history, permissions, and consent records
Audio-visual records	Call-center recordings and necessary, proportionate visual records relating to the service

Purposes and legal bases

Purposes and principal legal bases for personal-data processing
Processing activity	Main purposes	Legal basis
Vehicle protection, roadside assistance, and assistance services	Contract formation and performance; request management; vehicle repair and roadside coordination; customer, driver, and provider communication	Contract formation or performance under Article 5/2-c; legitimate interest where its conditions are met
Payment, invoicing, compensation, and recourse	Managing payment; creating invoicing, accounting, refund, compensation, and legal records	Express statutory requirement; legal obligation; contract performance
Website, membership, and digital services	Managing membership, account, app, notifications, security, requests, and complaints	Contract formation or performance; legal obligation; legitimate interest where its conditions are met
Marketing and commercial messages	Campaigns, offers, product/service development, and commercial electronic messages	Consent or legitimate interest depending on the activity; applicable commercial-message rules
Security, audit, and legal processes	Information security, incident response, audit, retention/archive, official requests, and establishing, exercising, or defending rights	Legal obligation; express statutory requirement; legitimate interest; establishment, exercise, or defense of rights

Website, cookies, and AI-assisted processes

Website and mobile-app data may be processed for membership, service purchases, support, security, and permission preferences. Non-essential cookies are enabled only in line with your choices and applicable legal requirements.

For details about cookies, see the Cookie Policy (opens in a new tab).

AI systems may be used in a controlled manner for request classification, operational decision support, quality and security analysis, and product development. Personal data is not used for a model provider's general model training without a separately defined purpose and an appropriate legal basis; data minimization, access control, human oversight, and auditable decision processes apply.

Collection methods and transfers

Personal data may be collected directly from the data subject through the website and mobile app, phone, e-mail, call center, and service records, and—where required for the service—from inspection, maintenance/repair organizations, agencies, social-media platforms, insurers, sponsors, and business partners by automated or non-automated means.

Data may be shared, limited to the relevant purpose, with dealers, repair shops, parking facilities, towing and recovery providers, assessors, insurers, solution/operations partners, payment and infrastructure providers, communication services, audit and advisory firms, carriers, and competent public authorities under Articles 8 and 9 of Turkish data-protection law.

An international transfer takes place only in a specific technical or operational process that requires it and after an applicable transfer condition or safeguard under Article 9 is in place. The data category, purpose, recipient group, and safeguard may be explained separately in the relevant processing flow.

Retention and security

Personal data is retained for the period required by the processing purpose and applicable contract, consumer, commercial, tax, accounting, dispute, and limitation rules; it is then deleted, destroyed, or anonymized.

Access authorization, transfer security, record integrity, supplier controls, penetration testing, incident response, audit, and necessary technical and organizational measures form part of the data-security program.

Your data-protection rights

Under Article 11, you may ask whether and how your personal data is processed, learn the purposes and recipients, request correction or—where conditions are met—deletion or destruction, object to certain automated-analysis outcomes, and seek compensation for unlawful processing.

You can send your request to info@nowass.com.tr (opens in a new tab) or use the Personal Data Request Form (opens in a new tab) process.