Navigo
TREN
App
About Contact Become a DealerSolutionsAccessoriesBlogReferences AppTR

Personal Data Notice

Last updated: 1 November 2026

This is the information notice required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). It covers the Navigo website (navigo.com.tr), the web panel (app.navigo.com.tr), the Navigo mobile apps and the Araç Takip Pro, Araç Takip Red and Mest Araç Takip apps running on the same platform.

This notice is for information only. Using the service does not mean you give explicit consent. The only processing based on explicit consent — promotional messages — is asked for separately and is optional.

1. Controller and roles

  • Name: Selman EROL – Mest Yazılım ve Bilişim Teknolojileri (sole proprietorship; owner Selman EROL)
  • Brand: Navigo Vehicle Tracking
  • Address: Hürriyet Mahallesi Atatürk Bulvarı Altan İş Merkezi No:48/9 Altınova / Yalova / Türkiye
  • Phone: +90 850 532 6378
  • E-mail: info@navigo.com.tr
  • Web: www.navigo.com.tr

We are the data controller for account, contact, invoice, payment, website form and security data.

For location data from GPS devices installed in vehicles and for data about the drivers of those vehicles, the controller is our customer who owns or operates the vehicle (e.g. a fleet-owning employer or a shuttle company). We process this data as a processor on the customer’s behalf and instructions. Drivers should send requests about their rights to the vehicle owner first; we forward requests we receive and help the customer answer them. Customers must inform the people who use their vehicles about location tracking.

2. Data we process

  • Identity and contact: name, username, e-mail, phone, company, address, tax/national ID number (for invoicing).
  • Customer transactions: subscription and activation data, orders, invoices, payment amount and status, masked card number, bank approval code. Card number, expiry date and CVV are not stored; they go directly to the payment institution Paynet.
  • Vehicle and location: location, speed, heading, ignition, mileage, sensor and alarm data from the GPS device, driver ID card number, plate and vehicle names.
  • Mobile device location: only if you grant the OS location permission, and only to show your position on the map or find the nearest vehicle.
  • Security: one-way password hash, two-factor phone, session data, IP address, approximate city and ISP derived from the IP, browser/device data, records of actions taken in the panel.
  • Notifications: device push token, SMS and e-mail notification preferences.
  • Requests and complaints: support and feedback messages, screenshots you choose to attach.
  • Website forms: name, e-mail, phone, company, fleet size, city, message and the IP address the form was sent from.
  • Marketing: e-mail and phone, only if you opted in.

We do not collect advertising IDs. The apps contain no ads, profiling or third-party analytics, and no screen or session recording.

3. Purposes

  • Providing vehicle tracking: live location, history, reports, alarms and notifications.
  • Account creation, authentication and authorisation.
  • Subscriptions, activation, invoicing, payment and collection; expiry reminders.
  • Information security, preventing misuse and unauthorised access, troubleshooting.
  • Answering requests, support and complaints; preparing quotes.
  • Meeting legal obligations (tax, commercial law, Law No. 5651) and requests of competent authorities.
  • Announcing products, campaigns and news if you opted in.

4. Legal grounds and collection

Data is collected electronically through website forms, the web panel, mobile apps, GPS devices in vehicles, e-mail, phone and our authorised dealers, on these grounds:

  • Performance of a contract (KVKK 5/2-c): account, service, location tracking, notifications, payment and support.
  • Legal obligation (5/2-ç): invoicing and accounting, traffic data retention, official requests.
  • Establishing, exercising or defending a right (5/2-e): records used in disputes.
  • Legitimate interest (5/2-f): security logs, misuse prevention, service quality.
  • Explicit consent (5/1): promotional messages only. Refusing does not affect the service, and you can withdraw at any time.

5. Transfers

In Türkiye: Paynet Ödeme Hizmetleri A.Ş. for card payments; NetGSM and Verimor for SMS; your authorised dealer (sales, installation, support); authorised users of your customer account; our accounting and legal advisers; competent public authorities. Our servers are in Türkiye and e-mails are sent from our own mail server.

Abroad: limited data goes to the following providers so the service can work:

Maps – directly from your device: when you open a map or search for an address in the panel or app, your device connects to the map provider itself. These requests do not pass through our servers; the provider receives your device’s IP address and the visible map area or the searched location.

  • Google LLC (USA) – Google Maps tiles.
  • OpenStreetMap Foundation (UK) – map tiles and Nominatim address lookup.
  • CARTO (CartoDB Inc.), FOSSGIS e.V. (Germany) and OpenFreeMap – alternative map tiles.

Notifications – through notification services: push notifications (e.g. alarms) can only reach phones through the operating system’s notification service; there is no other way. By the nature of these services, a notification travels from our server through these providers to your device. The provider receives the device push token and the notification content (e.g. alarm type, vehicle name or plate).

  • Google LLC (USA) – Firebase Cloud Messaging (Android).
  • Apple Inc. (USA) – Apple Push Notification Service (iOS).
  • 650 Industries, Inc. (USA) – Expo push service.

To limit transfers abroad, fonts and map glyphs on the website and panel are served from our own servers, and the Google map on the contact page loads only after you click “Show map”.

6. Retention

  • Vehicle location, history, trip, stop and alarm records: 6 months.
  • Account, identity and contact data: for the term of the contract and 2 years after it ends.
  • Invoices, payment and accounting records: 10 years under Turkish tax and commercial law.
  • Activity and access logs (IP address, time, action, browser/device): 1 year (traffic data under Law No. 5651).
  • Device communication logs (technical): 30 days in the live system, up to 2 years in the archive.
  • Website forms and quote correspondence: 2 years; kept with contract records if a contract follows.
  • Marketing consent: until withdrawn, then 3 years as proof.
  • Push token: until you sign out or uninstall the app.

Data is deleted, destroyed or anonymised when its period ends.

7. Cookies

See the Cookie Policy for cookies and local storage on the website and panel.

8. Security

Connections are encrypted with HTTPS. Passwords are stored as one-way hashes, two-factor authentication is supported, panel access is limited by role, actions are logged and backups are taken.

9. Your rights

Under Article 11 KVKK you may ask whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction or deletion, request that third parties be notified of these steps, object to adverse results of purely automated analysis, and claim compensation for damage caused by unlawful processing.

Send your request in writing to the address above, by registered e-mail (KEP), or from the e-mail address registered in our system to info@navigo.com.tr. Requests are answered free of charge within 30 days; if the request involves an extra cost, the fee set by the Personal Data Protection Board may apply. You may file a complaint with the Board if you are not satisfied with our answer.

10. Age limit

Our services are for people aged 18 or over. We do not allow under-18s to open accounts and delete such data if we find it.

11. Changes

We publish updated versions on this page with their date and announce material changes by e-mail or in-app notice.