Privacy Notice (KVKK)

Identity of the data controller

Your personal data is processed by the data controller identified below in accordance with applicable law.

Categories of personal data

We may process the following categories:

• Identity & contact: name, email, phone, country
• Booking: pickup/drop-off, date, time, flight time, estimated fare
• Security: IP address, browser data, server logs
• Marketing (with consent): preferences and campaign interactions

Purposes and legal bases

Data is processed for:

• Providing VIP transfer and consulting services (contract)
• Legal obligations
• Security and fraud prevention (legitimate interest)
• Marketing communications (explicit consent)

Transfers

Data may be shared with hosting, email, payment and operations partners domestically and, where required, abroad under appropriate safeguards. Analytics/ad cookies transfer to Google/Meta only with your consent.

Collection methods

Data is collected via web forms, cookies, email/phone and server logs.

Retention

Retention periods include:

• Booking records: 10 years
• Contact forms: 2 years
• Logs: 2 years
• Marketing consent: until withdrawal or 2 years of inactivity

Recipients of transfers

Your data may be shared with the following parties to perform services and meet legal obligations:

• Hosting and infrastructure providers (servers, logs, security)
• Email provider Brevo (booking and notification emails)
• Operations partners (fulfilling transfer services)
• Google LLC (Analytics – only with analytics cookie consent)
• Meta Platforms (Pixel – only with marketing cookie consent)
• Google LLC (Ads – only with marketing cookie consent)

Automated decision-making

We do not use profiling or solely automated processing that produces legal or similarly significant effects concerning you.

Your rights (KVKK Art. 11)

Under KVKK Article 11 you have the rights listed below. Use our Data Subject Request page or the data controller's registered contact channels. Requests are handled in accordance with the Communiqué on Application Procedures to the Data Controller.

• Learn whether your personal data is processed
• Request information if processed
• Learn the purpose of processing and whether it is used accordingly
• Know third parties to whom data is transferred domestically or abroad
• Request correction if incomplete or inaccurate
• Request deletion or destruction under KVKK Art. 7
• Request notification of correction/deletion to third parties
• Object to results arising solely from automated analysis to your detriment
• Claim compensation for damage due to unlawful processing