Privacy Policy & Data Protection Notice

1. Data Controller

Controller: [ŞİRKET UNVANI] (“Yolavia”), [ŞİRKET ADRESİ].

Contact: orcunerdogmus@gmail.com · WhatsApp: +90 534 344 22 26 · Web: https://yolavia.com

2. Personal Data We Process

• Identity: first and last name
• Contact: email address, phone / WhatsApp number
• Travel details: pickup and drop-off, date and time, passenger and luggage count, flight number, special requests (e.g. child seat)
• Transaction data: quote and booking records, amount, payment status (we never store your card details)
• Technical data: IP address, browser and device information, cookie identifiers, usage statistics

3. Purposes of Processing

• Preparing and sending you a price quotation
• Creating your booking, coordinating with the local supplier and issuing your voucher
• Customer support before and after the journey (chauffeur details, changes, cancellations)
• Processing payments, accounting and invoicing
• Meeting legal obligations and establishing or defending legal claims
• With your consent: newsletters, campaigns and marketing communication
• Measuring and improving site performance (consent-based analytics and advertising cookies)

4. Legal Bases

We process your data on the following legal bases (GDPR Art. 6 / KVKK Art. 5):

• Performance of a contract (Art. 6(1)(b)): providing the quote, booking and transfer service
• Legal obligation (Art. 6(1)(c)): tax, accounting and retention duties
• Legitimate interests (Art. 6(1)(f)): service quality, security and fraud prevention
• Consent (Art. 6(1)(a)): marketing communication and non-essential cookies

5. Data Sharing and International Transfers

By the nature of the service, your data is shared with the local transfer supplier in your destination country. This transfer is necessary to perform the contract and is limited to the minimum information required (name, meeting point and time, passenger count, flight number, contact).

We also use the following processors:

• Hosting and infrastructure: Vercel Inc. (US/EU)
• Database: Neon (EU region)
• Email delivery: Resend
• Analytics and advertising: Google (Google Tag Manager, Google Analytics 4, Google Ads) — only with your cookie consent
• Messaging: WhatsApp (Meta) — when you contact us there

6. Retention Periods

• Booking and transaction records: 10 years, as required by financial legislation
• Requests that never became a booking: maximum 3 years
• Marketing consent and mailing list: until you withdraw your consent
• Cookie data: from session duration up to 24 months, depending on the cookie

7. Your Rights

Under the GDPR and KVKK you have the right to:

• Access your personal data and request information about its processing
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom data is transferred, domestically or abroad
• Request rectification of inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Request restriction of processing and data portability
• Object to processing and opt out of marketing communication
• Claim compensation for damages arising from unlawful processing
• Lodge a complaint with a supervisory authority (EU: your local DPA · Türkiye: KVKK Authority)

8. How to Exercise Your Rights

Email orcunerdogmus@gmail.com. We respond free of charge within 30 days at the latest.

9. Security

Data is transmitted over an encrypted connection (HTTPS) and access is limited to authorised personnel. We do not collect or store payment card details.

10. Changes

We may update this notice. The current version is always published on this page and we will inform you of material changes.