Privacy Notice (KVKK)

DRAFT: This text is a sample. Have a lawyer review it and fill in the [bracketed] fields before publishing.

1. Data controller

[Company name], [address], [email]. The data controller under Turkish Personal Data Protection Law No. 6698 (KVKK).

2. Data we process

Full name, phone number, email address, ID or passport number, booking details (date, stop, number of passengers, payment method) and transaction records.

3. Purposes and legal basis

Creating, managing, changing or cancelling bookings, contacting passengers, payment processing and meeting legal obligations. Legal basis: establishment and performance of the contract, legal obligation and, where needed, explicit consent.

4. Transfers

Data may be shared, as the service requires, with payment institutions, hosting and email/SMS providers and authorised public bodies. [State here if servers abroad are used.]

5. Retention

Data is kept for the period needed for the purpose and the legal retention periods, [period], and then deleted or anonymised.

6. Your rights

Under Article 11 of the KVKK you may learn whether your data is processed, ask for it to be corrected or deleted, object, and claim compensation for damage. Contact: [email].