Datenschutzhinweis (KVKK)
Zuletzt aktualisiert: 09.10.2026
Dieses Dokument ist auf Englisch und Türkisch verfügbar.
This notice is issued by City VIP Transfer, as data controller, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for the Duty to Inform, for people who use our transfer service, make a booking, visit our website or contact us. In case of any conflict, the Turkish version of this notice prevails.
1. Data controller
City VIP Transfer
Address: Dalaman / Muğla / Türkiye
E-mail: E-Mail anzeigen · WhatsApp
2. Data processed, purposes and legal grounds
| Data category | Purpose | Legal ground (KVKK Art. 5) |
|---|---|---|
| Identity and contact: name and surname, phone / WhatsApp number, e-mail | Taking and confirming the booking, performing the transfer, communicating with you | Establishment or performance of a contract (Art. 5/2-c) |
| Customer transaction: booking, flight number and time, pickup and drop-off addresses, passengers and luggage, child seats, requests, correspondence | Planning the transfer, tracking the flight, meeting you with a name sign, handling changes, cancellations, requests and complaints | Performance of a contract (Art. 5/2-c) · legitimate interest for requests and complaints (Art. 5/2-f) |
| Passenger notification: passengers' names, nationality, gender, trip details | Filing the U-ETDS passenger notification with the Ministry of Transport and Infrastructure | Expressly provided by law and legal obligation (Art. 5/2-a, ç) |
| Financial: amount, currency, payment and refund status, invoice details | Payment, refunds, invoicing and accounting | Performance of a contract and legal obligation (Art. 5/2-c, ç) |
| Location: your live location on the tracking page, only if you allow it | Helping the driver find you at the meeting point | Explicit consent (Art. 5/1); you can switch the browser permission off at any time |
| Visual record: photo, time and location of the meeting point in no-show cases | Documenting that the service was ready to be provided | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Transaction security: IP address, browser details, login and security logs | Information security, preventing fake bookings and attacks | Legal obligation and legitimate interest (Art. 5/2-ç, f) |
| Marketing: if you approved, name, phone / e-mail, previous booking | Sending commercial electronic messages such as a return-transfer offer | Explicit consent (Art. 5/1) and approval under Law No. 6563 |
| Cookie data: browsing data collected by analytics cookies | Analysing how the website is used | Explicit consent (Art. 5/1) – cookie choice |
3. Method of collection
Your data is collected electronically and partly by automated means through the booking and contact forms on our website, customer accounts, the tracking page, WhatsApp, e-mail and phone, and from partner transfer platforms and travel agencies that pass your booking to us. If your data reached us through a partner, you are directed to this notice in our first contact with you.
4. Who receives it and why
| Recipient group | Purpose |
|---|---|
| Drivers and partner carriers performing the transfer | Meeting you and performing the transfer |
| Partner platforms and agencies that passed us the booking | Reporting the booking and transfer status |
| Ministry of Transport and Infrastructure, competent public authorities, courts | Statutory notifications and lawful requests |
| Payment institution (iyzico) and banks | Payments and refunds |
| Hosting, e-mail and software providers (data processors) | Running the website, database and e-mail |
| Providers abroad: Meta Platforms (WhatsApp), Cloudflare (bot verification), TomTom (address search, map, arrival time), a translation provider (driver chat), Yandex (website analytics, only with your cookie consent) | Communication, security, address and arrival-time calculation, translation, analytics |
5. Transfers abroad
Transfers abroad are made under Article 9 of the KVKK and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad: to countries covered by an adequacy decision of the Personal Data Protection Board; where there is none, with one of the appropriate safeguards listed in the Law (in particular the standard contracts announced by the Board, which are notified to the Authority within five business days of signature); and only where these cannot be provided and the transfer is incidental, on one of the grounds in Article 9(6) (e.g. it is necessary for the performance of the contract, or your explicit consent).
6. Retention
Your data is kept for the periods required by law (e.g. 10 years under Turkish tax and commercial law) and for as long as the purpose requires; afterwards it is deleted, destroyed or anonymised under the Regulation on the Deletion, Destruction or Anonymisation of Personal Data. Periods by data type are listed in our Privacy Policy.
7. Your rights (KVKK Art. 11)
- to learn whether your personal data is processed,
- to request information if it has been processed,
- to learn the purpose of processing and whether it is used accordingly,
- to know the third parties in Türkiye or abroad to whom it is transferred,
- to request correction if it is incomplete or inaccurate,
- to request deletion or destruction under the conditions of Article 7,
- to request that correction, deletion and destruction be notified to the third parties it was transferred to,
- to object to a result against you arising exclusively from automated analysis,
- to claim compensation for damage caused by unlawful processing.
8. How to apply
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can send your request by a signed letter delivered by hand or post to Dalaman / Muğla / Türkiye, with a secure electronic or mobile signature to E-Mail anzeigen, or from the e-mail address you previously gave us and which is in our records to E-Mail anzeigen.
Your request must include your name and surname, your signature for written requests, your Turkish ID number (for Turkish citizens) or your nationality and passport or ID number (for foreign nationals), your residential or business address for notices, your e-mail address and phone number if any, and the subject of your request, together with any supporting information and documents.
Requests are concluded as soon as possible and within 30 days at the latest, free of charge; if the action involves an additional cost, the fee set by the Personal Data Protection Board may be charged. Our reply is given in writing or electronically. If your request is rejected, you find the reply insufficient or we do not reply in time, you may complain to the Personal Data Protection Board within 30 days of learning of the reply, and in any case within 60 days of your application.