Navigo
TREN
App
About Contact Become a DealerSolutionsAccessoriesBlogReferences AppTR

Personal Data Notice

Last updated: 7 August 2026

Navigo Vehicle Tracking Systems (the “Application / Service”) is provided by Mest Yazılım ve Bilişim Teknolojileri (hereinafter “MEST”, “we” or “us”). Navigo is a brand of MEST.

Article 1 — Purpose and Scope

MEST is committed to protecting your Personal Data in accordance with Turkish Personal Data Protection Law No. 6698, Regulation (EU) 2016/679 (GDPR) where applicable, and other applicable data-protection laws (together, “Data Protection Legislation”).

This Privacy and KVKK Notice (“Policy”) explains how we collect, use and share information that identifies or may identify you (“Personal Data”). For requests or complaints about this Policy, please contact the Data Protection Officer using the details under “Contact Us”. You may also apply to your local data-protection authority (in Türkiye: the Personal Data Protection Authority).

Article 2 — Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Vehicle Tracking System: The combination of a GPS tracking device, SIM card and software applications used to track a vehicle or asset.
  • Vehicle: A commercial or private vehicle (car, minibus, truck, etc.) owned or used by the customer on which the tracking system operates.
  • Sensor: Equipment mounted with the tracking system that collects temperature, humidity, voltage, impact and similar readings and sends them via the GPS device to our servers.
  • SIM / GPRS: An M2M data line used to transmit device data over GPRS.
  • Card Reader: Equipment that reads proximity/RFID card IDs and sends them via the GPS device to our servers.
  • Server: Computers hosted in Türkiye (on-premises or cloud) that store data under ISO 27001-aligned security controls.
  • Customer: A natural or legal person who purchases or leases a vehicle tracking system to monitor location and related data.
  • User: Login credentials (username and password) issued to access the Navigo web panel (app.navigo.com.tr), Navigo mobile app and navigo.com.tr. Multiple users with different permissions may be provided on request.
  • Special categories of personal data, explicit consent, anonymisation, processing, data subject, controller and processor have the meanings under applicable Data Protection Legislation.

Article 3 — How We Collect Personal Data

  1. Data from purchased/leased Navigo tracking devices and connected sensors/card readers transmitted to our servers via GPRS;
  2. Information you provide when creating an account, filling forms, contacting us, requesting quotes/orders, or joining surveys/promotions;
  3. Indirect data such as device information, usage analytics and information from service providers.

Article 4 — Categories of Personal Data

  1. Identity and contact: Name/title, phone, username, e-mail, membership details, passwords and similar data;
  2. Usage data: Preferred language, active times, service types used, interface habits, last login, error logs and survey results;
  3. Location data: GPS-derived location, speed, movement status; sensor and accessory data; and, depending on settings, base-station, Wi-Fi and IP-based location data;
  4. Payment / invoice data: Price, invoice number, tax amounts, payment method and billing information;
  5. Device data: Device model, OS, language, operator and country;
  6. Backup data: Contact/account backups when requested by users.

Article 5 — Purposes of Processing

  1. Account registration, fault reports, operations, portfolio management, quality measurement, communication, complaint handling, surveys and subscription/activation management;
  2. Service improvement, audit, risk management, after-sales processes, detecting unauthorised/fraudulent use and statistical analysis (anonymised where possible);
  3. Live tracking, historical reporting, alerts, fleet management and performing the contracted tracking service;
  4. Invoicing, accounting, after-sales support and legal compliance;
  5. Marketing/campaign activities only where a valid legal basis (e.g. explicit consent) exists; you may withdraw consent at any time.

MEST may anonymise or aggregate data for testing, research, analytics, service improvement and product development so that individuals are not identifiable.

Article 6 — Legal Bases

Personal Data is processed under KVKK Arts. 5–6, this Policy and, where applicable, GDPR Art. 6, including where processing is required by law, necessary for a contract, necessary for MEST’s legal obligations, based on data made public by the data subject, necessary to establish/exercise/defend a right, or necessary for MEST’s legitimate interests without overriding fundamental rights. Where the basis is consent, you may withdraw it at any time.

Article 7 — Purpose Limitation

Personal Data is processed only to the extent necessary for the stated purposes. If further processing is needed, MEST assesses compatibility with the original purposes and provides additional notice. Processing remains limited and proportionate.

Article 8 — Storage and Location

Personal Data may be transferred to and stored in countries outside the user’s jurisdiction, including outside the EU/EEA. Transfers occur only in line with Data Protection Legislation and with appropriate safeguards. Currently, data is stored on Türkiye-hosted real or cloud servers aligned with ISO 27001 and applicable law.

Article 9 — Recipients

  1. Users / customer authorised persons, as needed for service functionality and as permitted by law;
  2. Service providers, partners and advisors (infrastructure, support, marketing, consulting) under instructions and, where applicable, data-processing agreements;
  3. Courts, regulators and other parties where legally required or necessary to protect rights and security;
  4. Third parties designated by commercial customers under contract (partners, staff, municipalities with supervisory authority); responsibility for such sharing rests with the customer.

MEST may share aggregated statistical data that does not identify individuals unless MEST itself discloses identifying information.

Article 10 — Your Rights

Under KVKK Art. 11 you may request to learn whether your data is processed; obtain information; learn purposes and recipients; request correction of incomplete/incorrect data; request deletion/destruction under Art. 7; request notification of corrections/deletions to recipients; object to exclusively automated processing with adverse effects; and claim compensation for unlawful processing.

To exercise these rights, use the contact channels below and describe the data concerned in as much detail as possible. Requests are free unless manifestly unfounded or excessive. You may also complain to the Personal Data Protection Authority.

Alternatively, download the Personal Data Application Form, complete it and send it by post to the address stated on the form.

Article 11 — Age Limit

Users must be 16 or older to share Personal Data in the Application. We do not knowingly collect data from users under 16. If you believe we have processed such data in error, contact us; we reserve the right to delete it.

Article 12 — Retention

Unless a longer period is required by law, Personal Data is retained for as long as necessary for the collection/processing purposes — up to two (2) years — including periods needed for disputes arising from the terms of use. When the purpose ends and no longer retention is required, data is securely deleted and recipients are required to do the same.

Article 13 — Security Measures

MEST applies appropriate technical and organisational measures against unauthorised access and unlawful processing. Personal Data is not transferred to third parties contrary to this Policy or Data Protection Legislation. Where processors are used, MEST takes steps so they provide comparable protection. MEST is not responsible for third-party apps linked from the Service that are outside MEST’s control.

Automated decision-making: Personal Data is not used to make solely automated decisions producing legal effects about users.

Article 14 — Changes

MEST may update this Policy when legislation or practice changes. The updated Policy is published on navigo.com.tr and/or the Application and takes effect on the publication date.

Contact Us

  • Controller: Mest Yazılım ve Bilişim Teknolojileri (Navigo Vehicle Tracking Systems)
  • E-mail: info@navigo.com.tr
  • Phone: 0850 532 6378
  • Address: Hürriyet Mahallesi Atatürk Bulvarı Altan İş Merkezi No:48/9 Altınova / Yalova / Türkiye