This privacy policy explains how OtoTasdik handles personal data when you use the OtoTasdik app, the web panel at giris.ototasdik.com and the website www.ototasdik.com. It is written for car owners, for workshops and for the customers of workshops.
Who this policy is for
- It applies to OtoTasdik accounts set up for the United Kingdom, the European Union or the United States. These are accounts that use pounds sterling, euros or US dollars.
- If your account uses Turkish lira, our Turkish privacy notice (KVKK Aydınlatma Metni) applies instead.
- It also applies to people whose details a workshop enters into OtoTasdik, for example a workshop's customers, and to people who open a sale link or a record link.
- Our cookie policy explains the cookies and similar technologies on our website and in the web panel.
Who is responsible for your data
OtoTasdik is run by Ahmet Türkmen, a private individual in Türkiye. OtoTasdik is not a company. Ahmet Türkmen is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR. In this policy "OtoTasdik", "we" and "us" mean him.
- Postal address: Anafartalar 23/8, Melikgazi, Kayseri, Türkiye
- E-mail for privacy requests: privacy@ototasdik.com
- Phone: +90 545 204 97 48
- Support: destek@ototasdik.com
We have not appointed a data protection officer.
Representatives in the EU and the UK
We are not established in the EU or in the UK. We have not yet appointed a representative in the EU (Article 27 GDPR) or in the UK (Article 27 UK GDPR). Until we do, please contact us directly, by e-mail at privacy@ototasdik.com or by post at the address above.
Turkish law also applies
We are established in Türkiye, so the Turkish Personal Data Protection Law No. 6698 (KVKK) also applies to how we process your data. Where it gives you rights in addition to the ones in this policy, you can use them through the same contact details.
In short
- We store your account, your vehicles, your records and your files on servers in Frankfurt, Germany.
- We do not sell your data. The app shows no advertising and contains no advertising tools.
- A workshop sees your car's details only when you show it your workshop QR code or when it records a job on your car.
- A workshop you follow sees that it has one more follower, and sees your first name and the initial of your surname only if you turn on Show my name for it.
- A sale link shows only what you choose, and never your name or contact details.
- You can download the data of your cars and delete your account at any time.
- When you delete your account, we delete your files and close your sale links. The history of your car stays with the car, without your name. We keep a short record of the deletion itself.
The data we process
Your account
- Your name and your e-mail address.
- Your phone number, if you add one. Workshops must give a phone number.
- Your password, which we store only as a scrambled value (a hash) that cannot be turned back into the password.
- If you sign in with Google or Apple: the account identifier and the e-mail address they send us. With Apple this can be a relay address that hides your real address.
- Your account type (car owner or workshop), the country and currency of your account and the language of the app.
- If you turn on two-step verification: the secret for the codes, stored encrypted, and your recovery codes.
Your vehicles
- The vehicle identification number (VIN), the number plate and the country of the plate.
- Make, model, year, colour, fuel, gearbox, engine details and mileage.
- If you add them: the dates and prices of purchase and sale, photos and your notes.
Your records
You decide what you add. A record can be:
- a maintenance or repair record, a fuel record or a record of consumables such as bulbs or screenwash;
- a document you upload, for example an insurance policy;
- an inspection record: an MOT test (UK), an HU inspection (Germany) or a vehicle inspection (US), with the test date, the mileage, the date until which it is valid, the test centre, your notes and, if you add one, a photo or PDF of the certificate;
- a mileage reading;
- a reminder, for example for the next service or the next inspection.
Records that a workshop seals
A workshop with an OtoTasdik account can record a job, seal it and give you a Service Statement with a QR code or a link. When you add it to your garage, the record contains the workshop's name, the date, the mileage, the work done, the parts, the prices and tax, the name of the mechanic and the document number. It also carries the seal: a digital signature that shows the record has not changed since the workshop sealed it.
Sale links
When you create a sale link, we publish the car and the records you select on a page that anyone with the link can open without an account. The page shows the number plate, the last four characters of the VIN, make, model, year, colour, mileage and the records you include. You choose whether it also shows your own records, photos, prices and a note. If you include your own records, the page also shows the car's latest inspection with its type, test date and the date until which it is valid, and it can show records that earlier owners entered for the car, without their names. It never shows your name, your e-mail address or your phone number. Your inspection certificate photos are never shown. The page also shows the result of our mileage check (see "Automated checks").
A sale link closes when you revoke it or when it expires. We also close it when you record that you sold or handed over the car, when you remove the car from your garage and when you delete your account.
Workshop accounts
If you run a workshop, we also process:
- your business details: trade name, legal name, tax identifier (for example a Steuernummer or USt-IdNr in Germany, a VAT number or Companies House number in the UK, an EIN in the US), address, phone and WhatsApp number, e-mail, website, logo and specialities;
- the name and role of the contact person and your estimated monthly number of vehicles;
- the documents you upload for our review: in Germany a Gewerbeanmeldung, in the UK a VAT registration certificate or a certificate of incorporation, in the US a business licence or the IRS letter that assigns your EIN;
- your work orders, your customer list, the Service Statements you issue and the payments you record;
- the ratings and comments your customers give you;
- your public workshop page, if you have one: trade name, town, district, logo, phone, website, specialities, ratings, number of jobs, the month you joined and the month and type of recent jobs. It never shows your customers' names, number plates, VINs or prices.
Data a workshop enters about its customers
A workshop can enter the name and phone number of a customer, the car and the job. If the customer shows the workshop QR code, the workshop receives the car's number plate, VIN, make, model and year from the customer's garage. The record link that the workshop sends shows the customer's name and phone number only in masked form.
For its own customer list and work orders, the workshop is responsible for the data (it is the controller) and we store and process the data on its behalf. Once a job is sealed, we are responsible for the sealed record that we keep with the car's history and that the customer can add to a garage.
Your device and the app
- A push token, the device model and operating system, the app version and the app language, so that we can send you notifications.
- Crash reports: when the app crashes, Google Firebase Crashlytics receives technical data about the crash and your device, with a random installation identifier and your account type. It does not receive your name, your e-mail address or your account number. If your account uses euros or pounds sterling, crash reports are off until you turn them on. Before you sign in, they are also off on a device whose region is in the European Union, the European Economic Area or the United Kingdom. Otherwise they are on. You can turn them on or off at any time with the Crash reports switch in the app's settings. While they are off, the app sends no crash reports and deletes the ones it has kept on your device.
- The app reads fuel receipts with Google ML Kit, and on Android also QR codes. The reading happens on your phone. When you save a fuel record after a scan, the receipt photo is attached to the record and stored with your other files. ML Kit sends Google technical data about your device, the app and how the feature performed, with an identifier for the installation. On iPhone, QR codes are read by Apple's own on-device framework.
- If you dictate text with the microphone, the speech service of your phone (Apple on iPhone, Google on Android) turns your speech into text. The app receives only the text.
Logs and security records
- With every sign-in and session: IP address, browser or app details (user agent) and time.
- With every consent or acceptance you give: the purpose, the version of the text and a fingerprint (hash) of it, the time, your IP address and the user agent. When you withdraw it, the time of the withdrawal.
- If you withdraw from the agreement with the withdrawal function: your declaration (the name and e-mail address you give and the contract reference) and the time it reached us.
- A log of important changes in your account, for security and to prove what happened.
- Codes and links that we send you to confirm your e-mail address or to reset your password.
- The notifications we send you in the app, by e-mail or as push messages, and whether they were delivered.
- A record of each time an OtoTasdik administrator opens your account data, for example in the read-only support view.
- Which days you used OtoTasdik, and with which app or browser.
When you contact us
The content of your message, your contact details and our reply.
Our website
When you visit www.ototasdik.com, our host processes your IP address and browser details to deliver the pages. If you use a form, we receive what you type, for example your name, e-mail address, phone number and message. Analytics and advertising cookies are used only with your consent. Our cookie policy has the details.
What we do not collect
- We do not collect your device's location. When you upload a photo, we remove the information stored inside it, such as the place where it was taken and details of the camera, within minutes of the upload. The picture itself does not change.
- We do not use advertising identifiers, and the app contains no advertising or tracking tools.
- We do not access your contacts or your calendar.
- OtoTasdik is free, so we do not process payment card data from car owners or workshops.
Features we do not offer outside Türkiye
Some features exist only for accounts in Türkiye. We do not offer them to your account and we do not process data for them: uploading TÜVTÜRK inspection reports, traffic fines, the accident report form, appraisal (ekspertiz) services, the vehicle tax (MTV) calculator, the AI document reader and text messages (SMS).
Why we use your data and on which legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create and run your account, let you sign in | Account data, sessions | Contract (Art. 6(1)(b) GDPR) |
| Keep accounts and the service secure, prevent abuse | Logs and security records, account data | Legitimate interest in a secure service (Art. 6(1)(f)) |
| Keep your garage: vehicles, records, files, reminders | Vehicle data, records, files | Contract (Art. 6(1)(b)) |
| Add a workshop's sealed record to your garage | Sealed record | Contract (Art. 6(1)(b)) |
| Publish a sale link you create | What you select | Contract (Art. 6(1)(b)) |
| Run workshop accounts and their tools | Workshop data, work orders, customer list | Contract with the workshop (Art. 6(1)(b)) |
| Review a workshop's application, tax identifier and documents | Workshop data, documents | Steps before a contract (Art. 6(1)(b)) and our legitimate interest in seals from real businesses (Art. 6(1)(f)) |
| Store a workshop's customer list and work orders on its behalf | Customer name and phone, car, job | We act as the workshop's processor (Art. 28 GDPR). The workshop is responsible for the legal basis |
| Publish the ratings and comments customers give workshops | Score, comment, date | For the rater, the contract (Art. 6(1)(b)); for the workshop, the legitimate interest of customers and the public in genuine reviews (Art. 6(1)(f)) |
| Show a workshop you follow your name, when you turn it on | First name, initial of the surname, the day the follow began, whether you added a record it sealed | Contract (Art. 6(1)(b)) |
| Keep a sealed job with the car's history and let the customer add it to a garage | Sealed record | Legitimate interest of owners, buyers and workshops in a complete and reliable service history (Art. 6(1)(f)) |
| Keep a car's history with the car after you remove the car or delete your account | Records linked to the VIN, without your name | Legitimate interest of later owners and buyers in a complete history (Art. 6(1)(f)) |
| Check mileage readings for inconsistencies | Mileage readings of a VIN | Legitimate interest in accurate histories and in preventing fraud (Art. 6(1)(f)) |
| Send service messages and reminders | E-mail, push token | Contract (Art. 6(1)(b)) |
| Send campaign e-mails and campaign notifications | E-mail, push token | Your consent (Art. 6(1)(a)) |
| Find and fix crashes | Crash reports | Your consent where crash reports are off until you turn them on (Art. 6(1)(a)); otherwise legitimate interest in a working app (Art. 6(1)(f)) |
| Understand how often OtoTasdik is used | Days of use | Legitimate interest in improving the service (Art. 6(1)(f)) |
| Website analytics and advertising measurement | See the cookie policy | Your consent (Art. 6(1)(a)) |
| Prove that you gave or withdrew a consent, or accepted the Terms | Consent and acceptance records | For consents, the legal obligation to demonstrate consent (Art. 6(1)(c) with Art. 7(1)); for acceptances, our legitimate interest in proof (Art. 6(1)(f)) |
| Keep a record of an account deletion | Erasure record | Legitimate interest in proving that we carried out your request, and the Turkish rules that apply to us (Art. 6(1)(f)) |
| Confirm the agreement by e-mail, and receive and confirm a withdrawal from it | Name, e-mail address, contract reference and the Terms you accepted; for a withdrawal also your declaration and the time it reached us | Contract and the legal obligation under EU consumer law (Art. 6(1)(b) and (c)) |
| Keep a record of a withdrawal from the agreement | Withdrawal record | Legitimate interest in proving that we received your withdrawal and carried it out (Art. 6(1)(f)) |
| Answer your messages and requests | Your message, contact details | Contract or legitimate interest (Art. 6(1)(b) or (f)) |
| Restrict an account that misleads others or misuses OtoTasdik | Account data, records | Contract and legitimate interest in a trustworthy service (Art. 6(1)(b) and (f)) |
| Help with a support request by looking at your web panel in read-only mode | What your web panel shows | Legitimate interest in giving support (Art. 6(1)(f)) |
| Establish, exercise or defend legal claims, meet legal duties | The data concerned | Legitimate interest (Art. 6(1)(f)); legal obligation where EU or UK law applies (Art. 6(1)(c)) |
The same legal bases apply under the UK GDPR. Where we rely on legitimate interests, you can object (see "Your rights").
Where your data comes from
- From you, when you use the app, the web panel or the website.
- From workshops: the jobs they seal, the work orders they open when you show your workshop QR code, and the customer details they enter.
- From Google or Apple, if you sign in with them.
- From earlier owners of your car and their workshops: the history linked to the car's VIN.
Do you have to give us your data
To open an account you must give your name and an e-mail address, or sign in with Google or Apple, and you must accept the Terms of Use. Without this we cannot open an account. A workshop must also give its business details, a phone number and the documents we ask for. Everything else is optional, but some features need certain data. For example, you need a VIN to add a car.
Who receives your data
Our service providers
These providers process data for us under our instructions.
| Provider | What they do for us | Data | Where | Safeguard for transfers |
|---|---|---|---|---|
| Amazon Web Services (contracting party: AWS Turkey Pazarlama Teknoloji ve Danışmanlık Hizmetleri Limited Şirketi, Istanbul, Türkiye) | Servers, database and file storage for the app, the web panel and the API; hosting of the website | All data in this policy | Frankfurt, Germany (region eu-central-1). The website is delivered through Amazon CloudFront from the location nearest to the visitor | Storage stays in the EU. AWS Data Processing Addendum and its UK GDPR Addendum, part of the AWS Service Terms, with the EU standard contractual clauses for any transfer outside the EU |
| Brevo SAS, Paris, France | Sending e-mails | E-mail address, name, message content | EU (servers in France and Belgium). Brevo group companies and service providers outside the EU, for example in India and the USA, can access data for support and maintenance | Brevo's data processing agreement; for access from outside the EU, the EU standard contractual clauses or the EU-US Data Privacy Framework |
| Google LLC, USA: Firebase Cloud Messaging | Delivering push notifications | Push token, content of the notification | USA and other countries | Google LLC is certified under the EU-US Data Privacy Framework and its UK Extension; Google's data processing terms |
| Google LLC, USA: Firebase Crashlytics | Crash reports | Crash data, device model, operating system, installation identifiers, account type | USA and other countries | As for Firebase Cloud Messaging |
| Cloudflare, Inc., USA | Domain name service for ototasdik.com; the bot check (Turnstile) on website forms and on the sign-up, sign-in and password reset pages of the web panel | IP address, browser details | Cloudflare's worldwide network | Cloudflare, Inc. is certified under the EU-US Data Privacy Framework and its UK Extension; Cloudflare's data processing terms |
| Apple: iCloud Mail | Our e-mail inboxes at ototasdik.com, for example for support and privacy requests | Your e-mails to us and our replies | USA and other countries. Apple stores data mainly with Apple Inc. in the USA | Apple's standard contractual clauses for data from the EU and the UK |
| Google and Microsoft, see the cookie policy | Website analytics and advertising measurement, only with your consent | See the cookie policy | USA and other countries | See the cookie policy |
If we switch e-mail delivery to Amazon SES, Amazon Web Services sends our e-mails from the Frankfurt region.
On iPhones, Firebase hands notifications to Apple's push notification service for delivery. If you turn on browser notifications in the web panel, the notification travels through the push service of your browser (for example Google for Chrome, Mozilla for Firefox, Apple for Safari). Its content is encrypted, so the push service cannot read it.
Google ML Kit runs on your phone. Google uses the technical data it receives to run and improve ML Kit.
Other recipients
- Workshops: a workshop receives your car's number plate, VIN, make, model and year when you show it your workshop QR code. A workshop that seals a job on your car keeps its own record of that job.
- Workshops you follow: a workshop sees how many people follow it and, in its list of followers, the day each follow began. If you turn on Show my name for a workshop, its list also shows your first name and the initial of your surname, and whether you added a record it sealed to your garage. It does not see your phone number, e-mail address or cars. Show my name is off until you turn it on, and you can turn it off at any time under Shops you follow.
- People who open your sale link see what you chose to show.
- Later owners of your car who add it to their garage see the history linked to its VIN, without your name or contact details.
- An earlier owner who recorded the sale and kept the car in the garage can still see the records you add for it.
- Google and Apple, if you sign in with them. They are responsible for your Google or Apple account. When you delete your OtoTasdik account, we ask Apple to remove the connection.
- Public authorities and courts, where the law requires us to disclose data.
- Lawyers and other advisers, where we need them to establish, exercise or defend legal claims.
We send text messages and WhatsApp verification codes only to Turkish mobile numbers. Accounts outside Türkiye do not receive them.
When a workshop chooses to send you a Service Statement through WhatsApp, the app opens WhatsApp on the workshop's phone with a prepared message. The workshop sends it from its own WhatsApp account. We do not send that message.
Posts by workshops in Türkiye can carry a YouTube video. The app and our site show the video's cover from our own server and do not play the video themselves. When you tap the Watch on YouTube button, the YouTube app or site opens; YouTube plays the video and handles your data under Google's privacy policy. We send nothing about you to YouTube before you tap.
Transfers outside the UK and the EU
- We store your data in Frankfurt, Germany.
- We run OtoTasdik from Türkiye and access your data from there to provide the service. There is no decision by the EU or the UK that Türkiye protects data adequately. We apply the protections described in this policy wherever we work.
- Some providers process data in the USA. Where a provider is certified under the EU-US Data Privacy Framework, and for UK data its UK Extension, we rely on that certification. Otherwise we rely on the standard contractual clauses approved by the European Commission and, for UK data, the UK addendum to them. You can ask us for a copy of these safeguards.
How long we keep your data
| Data | How long |
|---|---|
| Account data | While your account exists. When you delete your account, we remove your name, e-mail address, phone number, password, Google or Apple connection and two-step verification at once |
| Record of an account deletion: your name and e-mail address, the time, how the request was made, its IP address and user agent, and the reason you gave if any | 3 years after the deletion, then deleted. Only a note without your name or contact details stays: the type of account, when it was created, last used and deleted, how the deletion was made, and the reason you picked from the list, if any |
| Record of a withdrawal from the agreement: the name and e-mail address you gave, the contract reference, the language, when the agreement was concluded and when the withdrawal reached us | 3 years after the withdrawal reached us, then deleted automatically |
| Vehicles and records | Until you delete them, remove the car or delete your account |
| Records of a car after you remove the car or delete your account | They stay with the car's history, linked to the VIN and without your name. When you remove the car or delete your account, we also remove your notes and descriptions in these records |
| Files you upload (photos, documents, certificates) | Until you delete them, remove the car or delete your account. We then delete them from our storage within minutes. Files that a workshop added to its own record of a job stay with the workshop. If an older version or a backup copy of our file storage still contains a deleted file, that copy is deleted within 30 days |
| Sale links | Until you revoke them or they expire. We also close them when you record that you sold or handed over the car, when you remove the car and when you delete your account |
| Push tokens of your devices and notification subscriptions of your browsers | While your account exists. When you delete your account, we delete them |
| Workshop records: work orders, customer list, Service Statements, application documents | While the workshop account exists. When it ends, we take the workshop page offline and, within 30 days, delete the customer list, the notes and the work orders that were not sealed, with their photos; before that, the workshop can ask us for a copy. Sealed records and their Service Statements stay with the car's history. Application documents are deleted three years after the workshop account ends. |
| Days of use | 365 days |
| Session records and the security log | Session records (IP address, browser or app details, time) are deleted 30 days after the session ends, that is after you sign out, after the session is revoked or after it expires. The security log is kept for two years and then deleted automatically. Records of deletions and of consent decisions are kept longer, as described in the rows on the erasure record and on consent records |
| Codes and links to confirm your e-mail address or to reset your password | 24 hours after they were used or expired, then deleted automatically |
| Notifications in the app and the record of the messages we sent you | One year, then deleted automatically |
| Records of support views and of administrator access to your account data | Three years, then deleted automatically |
| Consent records | While your account exists. After your account is deleted, we keep the record of your consent decisions for 3 years, so that we can show what you agreed to and when, and then delete it |
| Marketing consent | Until you withdraw it |
| Crash reports | Google keeps them for 90 days and then starts to delete them |
| Web server logs | Our web servers record each request with the IP address, time, requested address, browser details and response code. We keep these logs for one year, as Turkish law (Law No. 5651) requires of hosting providers, and then delete them |
| Backups | We back up the database every day. Backups are encrypted, stored in the AWS Frankfurt region (eu-central-1) and deleted automatically after 30 days, so data deleted from the service disappears from the backups within 30 days |
| Messages to support and privacy requests | We keep support e-mails for two years after the last message and privacy requests with our answers for three years after the answer |
Automated checks
We do not make decisions about you that are based only on automated processing and that have legal effects for you or affect you in a similarly significant way.
We do run automated checks on cars:
- Mileage check. Every four hours we check the cars whose records changed in the last day. For each car (VIN) we compare the mileage readings in its records, such as maintenance records and mileage entries. If a later reading is at least 100 km lower than an earlier one, we flag a possible mileage rollback. High and critical flags appear on the car's sale links and record pages. The page also shows a short summary of the records and the result of this check. A flag is a hint from an automatic comparison of readings. It is not a finding that anyone changed the mileage. An OtoTasdik administrator can review a flag and dismiss it. A dismissed flag is not shown again. If you think a flag is wrong, write to us and a person will look at it.
- Plausibility checks when you enter data, for example a mileage that is lower than the last reading. They only ask you to correct the entry.
Your rights
You have these rights under the GDPR and the UK GDPR:
- Access: you can ask what data we hold about you and receive a copy.
- Rectification: you can correct your data. You can edit most of it yourself in the app or the web panel. A record that a workshop sealed cannot be edited, because that would break the seal. If it is wrong, contact the workshop or us.
- Erasure: you can delete your account, a car or a record, and you can ask us to delete other data. Some data we keep for the reasons in "How long we keep your data".
- Restriction: you can ask us to limit the use of your data, for example while we check a correction.
- Portability: in the web panel you can download the data of each of your cars as a JSON file. The file contains the car's details, all its records (for example maintenance, inspections, fuel, consumables, documents and mileage readings, including the records that workshops sealed for you), a list of its photos and files, its sale links and your account data: your profile, your consent records and the devices and browsers registered for notifications. The photos and documents themselves are not in the file. You can open them in the app or the web panel, and you can ask us by e-mail for copies of them and of any other data.
- Objection: you can object at any time to processing based on our legitimate interests, for example to keeping your records with the car's history. We then stop unless we have compelling reasons that override your interests, or we need the data for legal claims. You can object to direct marketing at any time, and we will stop.
- Withdrawing consent: you can withdraw a consent at any time with effect for the future. This does not affect what we did before.
How to use your rights
- Write to privacy@ototasdik.com from the e-mail address of your account.
- Many requests you can handle yourself. Car owners can go to Settings, then Privacy, in the web panel to download their data, manage consents and delete their account. In the app you delete your account in Settings; a workshop finds this in its workshop profile.
- You can stop campaign e-mails at any time. Every campaign e-mail ends with a link to your notification preferences in the web panel. There, one click on the Marketing e-mails switch withdraws your consent; if you are not signed in, you sign in first. You can also withdraw it in the web panel under Settings, then Privacy, and in the app under Settings, then Notification preferences.
- We answer within one month. If a request is complex, we can extend this by two more months and will tell you why within the first month.
- We may ask you to confirm your identity. We will not ask for an identity card number.
Complaints
You can complain to a data protection supervisory authority, in particular in the country where you live or work or where you think your rights were infringed.
- EU: the authority of your country. The European Data Protection Board lists them at edpb.europa.eu.
- Germany: the data protection authority of your federal state (Landesdatenschutzbehörde). A list of all state authorities is at bfdi.bund.de.
- UK: the Information Commission (until 2026 the Information Commissioner's Office), ico.org.uk.
We would be glad if you contacted us first, so that we can try to resolve the matter.
Children
OtoTasdik is meant for adults. You must be at least 18 years old to use it. We do not knowingly collect data from children. If you think a child has an account, write to us and we will delete it.
Security
Connections to the app, the web panel and the website are encrypted (HTTPS). We store passwords only as hashes and encrypt the secrets for two-step verification and for Sign in with Apple. Sealed records are protected by a digital signature, so changes can be detected. No system is perfectly secure. If a breach affects your data and puts you at high risk, we will tell you.
If you live in the United States
- What we collect and why is described above.
- We do not sell your personal information. The app does not share it for cross-context behavioural advertising.
- On our website, if you accept marketing cookies, Google receives data to measure our ads and to build advertising audiences. Some US state laws call this "sharing". You can decline or withdraw this in the cookie settings. Our website does not yet respond to Global Privacy Control signals.
- You can ask to know, correct or delete your personal information wherever you live in the United States. Write to privacy@ototasdik.com. We will not treat you differently because you used these rights. We answer within 45 days.
- OtoTasdik is not meant for children under 18.
Changes to this policy
We update this policy when our processing changes. The date at the top shows the last change. If a change is significant, we will tell you by e-mail or in the app before it takes effect. If a change needs your consent, we will ask for it.