PRIVACY POLICY
Last Updated: June 6, 2026
Effective Date: June 6, 2026
At Direct Airport Transfer, we take the privacy of your personal data with utmost importance. This Privacy Policy explains how your personal data is collected, used, shared, and protected when you use our website (www.directairporttransfer.com) or benefit from our services, in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).
1. DATA CONTROLLER INFORMATION
Data Controller: Direct Airport Transfer
Address: Kızılsaray Mah. Yener Ulusoy Bulvarı Tevfik Apt. 11/D Muratpaşa/ANTALYA 07040, Turkey
Email: info@directairporttransfer.com
Phone: +90 542 724 98 98
TÜRSAB License No: 16884
Web: www.directairporttransfer.com
2. PERSONAL DATA PROCESSED
We process the following personal data for booking and service provision:
a) Identity Data:
- First and last name
b) Contact Data:
- Email address
- Phone/mobile number
c) Travel and Service Data:
- Flight number and airline information
- Arrival/departure date and time
- Hotel or destination address
- Number of passengers (adult/children)
- Special requests (child seat, extra services)
d) Financial Data:
- Payment information (processed by PCI-DSS certified payment providers)
- Full card details are NOT STORED in our system
e) Transaction Security Data:
- IP address, browser information
- Cookies and site usage behavior
- Device information
3. PURPOSES OF PROCESSING
Your personal data is processed for the following purposes:
- Creating, confirming, and managing your reservation
- Providing transfer service (chauffeur coordination)
- Communicating with you (WhatsApp, email, SMS)
- Flight tracking and delay management
- Processing payments
- Fulfilling legal obligations (KVKK, TÜRSAB, tax regulations)
- Improving service quality
- Marketing communications with your explicit consent
4. LEGAL BASIS
Our processing bases under KVKK Art. 5-6 and GDPR Art. 6:
- Performance of contract (KVKK 5/2-c, GDPR 6(1)(b))
- Legal obligation (KVKK 5/2-ç, GDPR 6(1)(c))
- Legitimate interest (KVKK 5/2-f, GDPR 6(1)(f))
- Explicit consent (KVKK 5/1, GDPR 6(1)(a))
5. DATA SHARING
Your personal data is shared with the following parties under necessary security measures:
a) Domestic Transfers:
- Our chauffeurs and operations team (minimum information for service)
- Payment service providers (PayPal, bank, virtual POS)
- Official authorities required by legal obligations
- Accounting and legal consultants
b) International Transfers:
- Data is transferred to EU member countries with GDPR-compliant standards
- Standard Contractual Clauses (SCC) applied under KVKK 2024 amendments
❌ Your data is NOT SOLD to third parties for marketing purposes.
6. COOKIES
Our website uses the following types of cookies:
- Essential cookies (required for site functionality)
- Performance cookies (analytics)
- Marketing cookies (with your explicit consent)
For detailed information, please review our Cookie Policy. You can manage cookies through your browser settings.
7. DATA RETENTION PERIOD
We retain your personal data only for the period required by the processing purpose:
- Active reservation data: Service period + 1 year
- Tax/accounting data: 5 years (per tax law)
- Marketing data: Until consent is withdrawn
- Communication records: 2 years
After the period expires, your data is deleted, destroyed, or anonymized.
8. YOUR RIGHTS UNDER KVKK AND GDPR
Under KVKK Art. 11 and GDPR Art. 15-22, you have the following rights:
- Right to learn whether your data is processed
- Right to request information about processing
- Right to learn the purpose of processing and whether it is used accordingly
- Right to know the third parties to whom data is transferred
- Right to request correction of incomplete/incorrect data
- Right to request deletion or destruction (right to be forgotten)
- Right to request notification of correction/deletion to third parties
- Right to object to results from automated decision-making
- Right to claim compensation for damages from unlawful processing
To exercise your rights: info@directairporttransfer.com
Complaint to KVKK Authority: www.kvkk.gov.tr
9. DATA SECURITY
Technical and administrative measures we take to protect your data:
- 256-bit SSL encryption
- Firewall and antivirus systems
- Access authorization and control systems
- Staff confidentiality agreements and training
- Regular security audits
- Backup and recovery systems
10. DATA BREACH NOTIFICATION
In case of a data breach:
- KVKK Authority is notified within 72 hours
- Affected data subjects are informed as soon as possible
- Necessary security measures are taken immediately
11. CHILDREN'S DATA
- Under KVKK, parental consent is required for children under 13
- Under GDPR, this age is 16 in the EU
- Our services are not directly intended for persons under 18
- Children's data is processed only within parental reservations
12. POLICY CHANGES
This Privacy Policy is periodically reviewed and updated. You will be notified of important changes via email or site notification. Changes take effect from the publication date.
13. CONTACT AND DATA PROTECTION OFFICER
For all your privacy-related questions and to exercise your rights:
Email: info@directairporttransfer.com
Phone: +90 542 724 98 98
Address: Kızılsaray Mah. Yener Ulusoy Bulvarı Tevfik Apt. 11/D Muratpaşa/ANTALYA 07040, Turkey
Web: www.directairporttransfer.com
This text is deemed accepted when you use our services.