Data Protection Notice
Last updated:
This notice explains how Ege Transfer processes personal data in connection with transfer bookings made through transferege.com. It is issued under Turkish Personal Data Protection Law No. 6698 (KVKK), which applies to our operations, and it also sets out the information visitors from the EU would expect under the GDPR.
Data controller
The data controller is Ege Transfer. Our trading name, address and tax details appear on the contact page; you may need them for a written request.
Categories of data processed
- Identity data
- Your first and last name.
- Contact data
- Your phone number and any contact details you send us on WhatsApp.
- Transaction data
- Route (pickup and drop-off), date and time, passenger and luggage count, chosen vehicle class, flight number, and your request notes.
- Security data
- To prevent form abuse, the IP address of the request is held briefly in memory for per-minute rate limiting and is not stored persistently.
- Marketing data
- Only with your explicit consent: site usage and advertising measurement data obtained via cookies.
Purposes of processing
- Receiving and assessing your transfer request
- Confirming price and availability and forming the contract
- Performing the service: assigning vehicle and driver, planning the route, tracking your flight
- Communicating with you before and after the service
- Carrying out financial and accounting operations and meeting statutory record-keeping duties
- Handling requests and complaints
- Measuring site and advertising performance, where you have consented
Legal grounds
Identity, contact and transaction data are processed because they are directly related to entering into or performing a contract. Accounting and invoice records are processed to comply with legal obligations. Security data is processed on the basis of legitimate interest. Marketing and measurement data are processed solely on the basis of your explicit consent, which you may withdraw at any time.
Transfers
Your data is shared with the assigned driver to the minimum extent needed to perform the service; with Resend for email delivery; and, where you have consented, with Google for measurement and advertising. If you request a helicopter arrangement, the relevant details are shared with the licensed aircraft operator. Disclosures may be made to competent authorities where there is a lawful request.
Because our email and measurement providers may host servers outside Turkey, such transfers are carried out in accordance with the cross-border transfer provisions of the applicable data protection legislation.
Retention
Booking and correspondence records are kept for a reasonable period after the service in view of possible disputes. Accounting and invoice records are kept for the period required by law (as a rule 10 years). At the end of the retention period, data is deleted, destroyed or anonymised.
Your rights
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used accordingly
- To know the third parties to whom data is transferred, in Turkey or abroad
- To request correction of incomplete or inaccurate data
- To request erasure or destruction within the conditions set by law
- To request that correction, erasure or destruction be notified to third-party recipients
- To object to a decision produced solely by automated analysis that has an adverse effect on you
- To claim compensation if you suffer loss due to unlawful processing
You can submit requests concerning these rights through the channels on our contact page. Your request is concluded free of charge as quickly as possible and in any event within thirty days. Where a request entails additional cost, a fee set out in the tariff determined by the Board may apply.