Personal Data Protection Notice

Data controller

Istanbul Transfer Shuttle, Fatih, Istanbul (the "Company"), processes your personal data as data controller under Article 10 of Law No. 6698.

Data processed

Identity data (name, surname, nationality, ID or passport number), contact data (phone, e-mail), travel data (flight number, pick-up and drop-off points, date, time, number of passengers), customer transaction data (booking, payment and invoice records, notes and messages) and transaction security data (IP address, log records).

Purposes

Carrying out the transfer service and the contract; communicating with you before and during the journey; reporting journeys to the Ministry of Transport and Infrastructure's U-ETDS system; invoicing, accounting and legal record keeping; handling requests and complaints; ensuring the security of our website and systems.

Legal grounds

Your data is processed under Article 5(2) of the Law because it is necessary for the conclusion and performance of a contract (c), for compliance with our legal obligations (ç), and for our legitimate interests provided your fundamental rights are not harmed (f).

Transfers

Your data may be shared, to the extent needed for these purposes, with the drivers carrying out the service, with the clinic, hotel or agency that made the booking on your behalf, with authorised public institutions (including the U-ETDS system), and with the companies that host our website and provide e-mail services. Where any of these providers is located abroad, the transfer is made in accordance with Article 9 of the Law.

Method of collection

Your data is collected electronically through this website, by phone, e-mail and WhatsApp, and through the business partners who book on your behalf.

Your rights

Under Article 11 of the Law you may apply to the Company to learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred, request correction of incomplete or inaccurate data, request its deletion or destruction, request that these operations be notified to third parties, object to results arising against you from automated analysis, and claim compensation for damage caused by unlawful processing.

You can send your request in writing to the Company's address or by e-mail to the address on our Contact page. We reply free of charge within 30 days at the latest.