Personal Data Protection Notice (KVKK)
Last updated: April 2026
This notice explains how we process your personal data as a data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK). It is issued in accordance with Article 10 of the law, which requires data controllers to inform data subjects about their processing activities.
Data Controller
1. Categories of Personal Data Processed
Identity data (name, surname, national ID), contact data (email, phone, address), customer transaction data (booking history, payment records), financial data (bank details, invoice info), location data (pickup/drop-off points), security log data (IP address, session logs), and, with consent, marketing preference data.
2. Purposes of Processing
Your data is processed to: (a) deliver the requested transfer service, (b) process payments securely, (c) comply with legal obligations (tax, accounting, audit), (d) fulfill contractual obligations, (e) prevent fraud and improve service quality (legitimate interest), and, with explicit consent, (f) send marketing communications.
3. Legal Basis (KVKK Art. 5 & 6)
Your data is processed based on: contract formation and performance (Art. 5/2/c), legal obligation compliance (Art. 5/2/ç), establishment or defense of rights (Art. 5/2/e), and legitimate interest (Art. 5/2/f). Marketing and optional analytics cookies rely on explicit consent (Art. 5/1).
4. Recipients of Data
Your data may be shared with: (a) licensed transport operators to fulfill bookings, (b) authorized payment service providers (PayTR in Turkey, Stripe for international transactions), (c) our cloud infrastructure providers (domestic data center), (d) public authorities where legally required, and (e) audit/accounting partners. Cross-border transfers only occur under KVKK Art. 9 conditions (regulatory decision or undertaking).
5. Retention Periods
Customer transaction data: 10 years (Turkish Commercial Code Art. 82). Payment records: 10 years (Tax Procedure Law Art. 253). Access logs: 2 years. Cookie data: 1 year. Marketing preferences: until consent is withdrawn. At the end of retention, data is erased or anonymized.
6. Your Rights (KVKK Art. 11)
You have the right to: (a) know whether your data is being processed, (b) request information if it is, (c) learn the purpose of processing, (d) know the domestic/international recipients, (e) request correction of incomplete or inaccurate data, (f) request erasure, (g) object to automated decisions adversely affecting you, (h) claim compensation for damages.
7. How to Submit a Request
You may submit KVKK Art. 13 requests: (a) via a qualified electronic signature email to [email protected], (b) by registered mail to our company address, or (c) in person with valid identification at our registered office. Requests are answered within 30 days.
8. Cookie Usage
For details on cookies used on our website, see our Cookie Policy page. Analytics and marketing cookies are not activated without your explicit consent.