Privacy Policy

🏢1. Data Controller

📋2. Scope of This Policy

This Privacy Policy applies to:

• Our website at antalyatransfer.taxi and all its subpages
• Our Turkey Transfer mobile application available on Google Play Store (Android) and Apple App Store (iOS)
• All communications via email, WhatsApp, phone, and in-app messaging
• Booking and payment processing services

⚖️3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance (Art. 6(1)(b) GDPR): To fulfill your transfer booking and provide the requested services.
• Legitimate Interest (Art. 6(1)(f) GDPR): To improve our services, prevent fraud, and ensure security.
• Consent (Art. 6(1)(a) GDPR): For analytics cookies, push notifications, and marketing communications. You may withdraw consent at any time.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, accounting, and regulatory requirements.

📊4. Personal Data We Collect

4.1 Data You Provide Directly

When you make a booking, create an account, or contact us:

• Full name
• Email address
• Phone number (including WhatsApp)
• Profile photo (if signed in via Google or Apple)
• Flight number and airline details
• Pickup and drop-off addresses
• Number of passengers (including children)
• Special requests (child seats, wheelchair access, extra luggage)
• Payment information (processed securely via payment providers, not stored on our servers)

4.2 Data Collected Automatically (Website)

When you visit our website, we automatically collect:

• IP address (anonymized for analytics)
• Browser type and version
• Operating system and device type
• Pages visited, time spent, and navigation paths
• Referring URL (how you found us)
• Language preference
• Screen resolution

4.3 Data Collected via Mobile App

When you use our mobile application, we may additionally collect:

• Device Information: Device model, operating system version, unique device identifiers
• Push Notification Token: Firebase Cloud Messaging (FCM) token for sending booking updates and travel notifications
• Authentication Data: Account details when signing in with Google or Apple (name, email, profile photo)
• Geolocation (optional): Your approximate location to suggest nearby airports and destinations. Location is only accessed with your explicit permission and can be disabled in device settings at any time.
• App Usage Data: Screens viewed, features used, session duration (via Firebase Analytics)
• Network Status: Online/offline connectivity to manage booking synchronization

4.4 Data from Third Parties

• Flight tracking data (arrival times) from public flight information services
• Review data from Trustpilot (if you leave a review)
• Authentication profile data from Google Sign-In or Apple Sign-In

🔧5. How We Use Your Data

• To process, confirm, and manage your transfer bookings
• To send booking confirmations, vouchers (PDF), and driver details via email, WhatsApp, and push notifications
• To match you with an available driver and vehicle
• To provide real-time support via WhatsApp, email, and in-app support
• To track your flight arrival for airport pickups
• To send push notifications about booking status, driver updates, and promotions (with your permission)
• To analyze website and app usage and improve our services (via Google Analytics and Firebase Analytics)
• To prevent fraud and ensure the security of our platform
• To comply with legal and regulatory obligations
• To personalize your experience based on language and location preferences

🌐6. Google & Firebase Services

We use the following Google and Firebase services. Each may collect data as described:

📱7. Mobile App Permissions

Our mobile application may request the following permissions:

🤝8. Who We Share Your Data With

We share your personal data only when necessary for service delivery:

• Transfer Drivers: Your name, pickup location, flight details, and phone number — strictly for service delivery.
• Google LLC (USA): Anonymized analytics data via GA4, Firebase Analytics, and FCM. Google acts as a Data Processor under Standard Contractual Clauses (SCCs).
• Apple Inc. (USA): Authentication data if you sign in with Apple.
• Trustpilot A/S (Denmark): If you choose to leave a review.
• Cloudflare Inc. (USA): Website hosting, CDN, and security. Cloudflare acts as a Data Processor.
• Email Service Provider: For sending booking confirmations and vouchers.

🌍9. International Data Transfers

Your data may be transferred to countries outside Turkey and the EU/EEA (primarily the USA) when using Google, Firebase, and Cloudflare services. These transfers are protected by:

• EU Standard Contractual Clauses (SCCs)
• EU-U.S. Data Privacy Framework (where applicable)
• Adequate safeguards required by KVKK Article 9

🗄️10. Data Retention

🇪🇺11. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to Restrict Processing (Art. 18): Limit how we use your data.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interest.
• Right to Withdraw Consent (Art. 7): Withdraw consent for analytics, push notifications, or marketing at any time.

To exercise any of these rights, contact us at info@antalyatransfer.taxi. We will respond within 30 days.

You also have the right to lodge a complaint with your local Data Protection Authority.

🇹🇷12. Your Rights Under Turkish KVKK

Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), you have the right to:

• Learn whether your personal data is being processed
• Request information about data processing activities
• Learn the purpose of data processing and whether it is used accordingly
• Know the third parties to whom your data has been transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data under Article 7
• Object to automatic processing that produces negative results about you
• Claim compensation for damages caused by unlawful processing

KVKK requests can be submitted to info@antalyatransfer.taxi or via registered mail to our address.

🗑️13. Account & Data Deletion

You can request complete deletion of your account and all associated personal data at any time by:

• Emailing info@antalyatransfer.taxi with the subject "Delete My Account"
• Contacting us via WhatsApp at +994 99 708 1998

Upon receiving your request, we will delete your account and personal data within 30 days, except for data we are legally required to retain (e.g., tax records, completed booking records for legal compliance).

👶14. Children's Privacy

Our services and mobile application are not directed at children under 16. We do not knowingly collect personal data from children. Our target audience is adults aged 18 and above who book transfer services.

If you believe a child has provided us with personal data, please contact us immediately at info@antalyatransfer.taxi and we will promptly delete the information.

🔐15. Data Security

We implement appropriate technical and organizational measures to protect your data:

🍪16. Cookies

We use cookies and similar technologies on our website. For a detailed list of all cookies, their purposes, and durations, please see our Cookie Policy.

Our mobile application does not use browser cookies but may use local storage and secure token storage for session management.

📝17. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via our website and/or push notifications in the app.

We encourage you to review this page periodically. The "Last Updated" date at the top indicates the most recent revision.

📬18. Contact the Data Controller

For any privacy-related questions, data requests, or complaints: