KVKK Privacy Notice

Last update:<\/strong> May 18, 2026<\/p>

Within the scope of Law No. 6698 on Protection of Personal Data<\/strong> ("KVKK"), as Istanbul Shuttle Travel<\/strong> ("Data Controller"), we inform you about the purposes, legal grounds, transfer, and your rights regarding the processing of your personal data.<\/p>

1. Data Controller<\/h2>
Istanbul Shuttle Travel<\/strong>
Web: istantravelpoint.com<\/a>
E-mail: info@istantravelpoint.com<\/a><\/p>
2. Categories of Processed Personal Data<\/h2>

Identity:<\/strong> first name, last name.<\/li>
Contact:<\/strong> e-mail, phone (WhatsApp), full address (if any).<\/li>
Customer transaction:<\/strong> reservation details, payment and invoice history, additional service preferences.<\/li>
Transaction security:<\/strong> IP address, browser\/device information, log records, cookie data.<\/li>
Marketing:<\/strong> preference and behavior analysis upon your consent (for campaign notifications).<\/li> <\/ul>
3. Purposes of Processing Personal Data<\/h2>

Creation, tracking, and completion of transfer reservations.<\/li>
Customer relationship management (responding to requests, complaints, and suggestions).<\/li>
Execution of payment and invoicing processes.<\/li>
Fulfillment of legal obligations (Tax Procedure Law, KVKK, E-Commerce Law, etc.).<\/li>
Improvement of service quality and development of our technical infrastructure.<\/li>
Sending promotional, campaign, and discount notifications upon your explicit consent.<\/li>
Execution of information security processes; prevention of fraud and misuse.<\/li> <\/ul>
4. Legal Grounds for Processing (KVKK Articles 5 and 6)<\/h2>

Establishment and performance of the contract (reservation agreement).<\/li>
Fulfillment of legal obligations (invoice, tax, audit).<\/li>
Legitimate interest of the data controller (operational efficiency, security).<\/li>
Your explicit consent (marketing communication, optional data collection).<\/li> <\/ul>
5. Transfer of Personal Data<\/h2>
Your personal data is transferred to the following parties only to the extent required by the processing purpose:<\/p>

Contracted drivers and our operations team<\/strong> — for the execution of the transfer.<\/li>
Payment service provider (iyzico)<\/strong> — for processing payment transactions.<\/li>
Cloud\/SaaS service providers<\/strong> — for server hosting, e-mail, and SMS delivery infrastructure (may involve transfer abroad if necessary; in such cases, KVKK Article 9 conditions are complied with).<\/li>
Authorized public institutions and organizations<\/strong> — within the scope of legal obligations.<\/li> <\/ul>
Your data is not sold<\/strong> to third parties for advertising and marketing purposes.<\/p>
6. Method of Personal Data Collection<\/h2>
Your data is collected electronically through forms filled on our website, correspondence with our customer service, payment processes, and technical records left during site usage (cookies, log files).<\/p>
7. Your Rights as a Data Subject (KVKK Article 11)<\/h2>
As a data subject, you have the following rights:<\/p>

To learn whether your personal data is processed.<\/li>
To request information if processed.<\/li>
To learn the purpose of processing and whether it is used accordingly.<\/li>
To know the third parties to whom data is transferred domestically or abroad.<\/li>
To request correction if data is incomplete or inaccurate.<\/li>
To request deletion or destruction under KVKK Article 7.<\/li>
To request notification of correction\/deletion to third parties to whom data was transferred.<\/li>
To object to results of analyses made by automatic systems.<\/li>
To demand compensation for damages caused by unlawful processing.<\/li> <\/ol>
8. Application Method<\/h2>
To exercise your rights above, you can send an application including your full name, Turkish ID number or passport number, contact information, and your request to info@istantravelpoint.com<\/a>. Your applications will be responded to free of charge within 30 days<\/strong> in accordance with KVKK Article 13. (If additional costs arise, the tariff determined by the Board may apply.)<\/p>
9. Data Retention Period<\/h2>
Your data is retained for the period prescribed by relevant legislation (e.g., 10 years under tax legislation) or as long as required by the processing purpose. After the period expires, data is securely deleted, destroyed, or anonymized.<\/p>
10. Updates<\/h2>
This privacy notice may be updated due to changes in legislation and the development of our services. The current version is always published on this page.<\/p>

4. Legal Grounds for Processing (KVKK Articles 5 and 6)<\/h2> Establishment and performance of the contract (reservation agreement).<\/li> Fulfillment of legal obligations (invoice, tax, audit).<\/li> Legitimate interest of the data controller (operational efficiency, security).<\/li>

10. Updates<\/h2> This privacy notice may be updated due to changes in legislation and the development of our services. The current version is always published on this page.<\/p>

10. Updates<\/h2>
This privacy notice may be updated due to changes in legislation and the development of our services. The current version is always published on this page.<\/p>