Privacy and Data Protection Policy

1. Data controller and contact

For the processing described on this website, the service is operated by Antalya Ultra VIP Transfer, contact person Ramazan Rarataş, Antalya/Alanya. Privacy enquiries may be sent to ramo4483@hotmail.com or through the Data Subject Request form.

2. Personal data we may process

Depending on your interaction, we may process name, email, telephone number, flight and travel details, pickup and destination information, passenger and luggage requirements, message content, consent records, request reference, language preference and technical security records generated by the hosting environment. Please do not submit passport copies, health information or other special-category data unless a specific lawful need has been explained.

3. Purposes and legal bases

• Answering enquiries and taking steps requested before a transport contract
• Planning and delivering a confirmed transport service
• Meeting accounting, consumer, transport and other legal obligations
• Protecting website and service security based on legitimate interests
• Sending marketing messages only where separate, optional consent has been given
• Recording and fulfilling data-subject requests to comply with legal duties

Under Turkish Law No. 6698 (KVKK), processing is based on the applicable grounds in Articles 5 and 6. For EEA/UK individuals, corresponding GDPR grounds may include contract steps, legal obligation, legitimate interests and consent.

4. Recipients and transfers

Data may be shared only where necessary with authorised drivers or transport partners involved in the requested service, hosting and IT providers, professional advisers, payment or accounting providers where used, and competent public authorities where legally required. Cross-border processing depends on the location and safeguards of the selected infrastructure. No personal data is sold.

5. Retention

General contact messages are normally reviewed for deletion after 12 months unless they become part of a booking, dispute or legal record. Booking and financial records may be retained for statutory periods. Consent evidence and data-subject request records may be kept for accountability and legal-claims periods. Records are deleted or anonymised when the relevant purpose and legal retention period end.

6. Your rights

Subject to applicable law, you may request information about processing, access, correction, deletion, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect earlier lawful processing. We may request proportionate information to verify identity before disclosing or deleting data. Requests are normally answered within one calendar month under GDPR; KVKK applications are handled within the applicable statutory period.

7. Cookies and choices

Necessary storage supports security and remembers privacy preferences. Optional analytics and marketing categories remain off unless selected. The current website does not load analytics or advertising tools; the preference mechanism is ready for any future addition. Choices can be changed from “Cookie preferences” in the footer.

8. Security and updates

Reasonable access, validation, rate-limiting and administrative controls are used to reduce unauthorised access and misuse. No online system can guarantee absolute security. This notice may be updated when services, providers or legal requirements change; the revision date is shown on the page.