Privacy Notice
1. Data Controller
Pursuant to the Law on the Protection of Personal Data No. 6698 ("KVKK"), your personal data will be processed by Goroutiva Taşımacılık Ticaret Limited Şirketi (hereinafter "the Company") as data controller within the scope described below.
Company Name: Goroutiva Taşımacılık Ticaret Ltd. Şti.
Address: Dutlubahçe, Gazi Blv. Özgür Apt. No:172 D:2, 07300 Muratpaşa/Antalya
Email: [email protected]
Phone: +90 212 555 01 23
2. Personal Data Processed
The following categories of personal data may be processed by the Company in the course of service provision:
- Identity Data: Name, surname, national ID number (for mandatory services)
- Contact Data: Phone number, email address, postal address
- Customer Transaction Data: Booking details, transfer route, date/time, payment amount
- Financial Data: Invoice details, payment method type (card numbers are not processed; handled by the payment infrastructure provider)
- Location Data: Pick-up/drop-off address information (real-time location tracking is not performed)
- Flight / Travel Data: Flight number, arrival terminal, luggage information
- Cookie & Digital Footprint Data: IP address, browser type, pages visited, cookie data (see Cookie Policy)
3. Purposes of Processing
- Receiving, managing and completing transfer bookings
- Driver and vehicle assignment and operational coordination
- Processing payments and issuing invoices
- Sending booking confirmation, reminders and update notifications
- Providing customer support services and complaint management
- Fulfilling legal obligations (tax, accounting, official notifications)
- Measuring and improving service quality
- Preventing fraud and irregularities
- Marketing communications (only to clients who have given explicit consent)
- Analysing website performance and user experience
4. Legal Bases for Processing
- Formation or performance of a contract: Formation of the booking agreement and delivery of the transfer service
- Legal obligation: Tax, invoicing and official reporting obligations
- Legitimate interest: Measuring service quality, fraud prevention and system security
- Explicit consent: Marketing communications and use of analytical cookies
5. Transfer of Personal Data
Your personal data may be transferred to the following parties for the following purposes:
- Assigned drivers — for the performance of the transfer service (name, pick-up point, drop-off point, contact details)
- Payment infrastructure providers — for the secure processing of payments
- Email and SMS service providers — for sending notifications
- Cloud infrastructure providers — for system hosting and data storage
- Analytics service providers (Google Analytics etc.) — for website performance analysis (anonymous/pseudonymous)
- Authorised public bodies and institutions — when legally required
Cross-border transfers are made in accordance with Article 9 of KVKK, to countries with adequate protection levels or based on your explicit consent or the safeguards provided for under KVKK.
6. Retention Periods
| Data Category | Retention Period |
|---|---|
| Booking and contract data | 10 years (Turkish Commercial Code and Tax Procedure Law) |
| Invoice and payment records | 10 years (Tax Procedure Law Art. 253) |
| Customer communication records | 3 years |
| Cookie data | Up to 24 months (varies by cookie type) |
| Marketing preferences and consent records | 3 years from withdrawal of consent |
When retention periods expire or the purpose for processing ceases, your personal data is securely deleted, destroyed or anonymised.
7. Your Rights (KVKK Art. 11)
Pursuant to Article 11 of KVKK, you have the following rights with respect to your personal data:
- To learn whether your personal data has been processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose
- To know the third parties to whom your personal data has been transferred, domestically or abroad
- To request the correction of your personal data if it has been processed incompletely or incorrectly
- To request the deletion or destruction of your personal data under the conditions set out in Article 7 of KVKK
- To request that correction and deletion operations be notified to the third parties to whom your personal data has been transferred
- To object to a result that is detrimental to you arising from the analysis of processed data exclusively by automated systems
- To claim compensation for any damage suffered due to the unlawful processing of your personal data
8. How to Exercise Your Rights
To exercise the rights listed above, you may contact us through the following channels:
Email: [email protected]
Post: Dutlubahçe, Gazi Blv. Özgür Apt. No:172 D:2, 07300 Muratpaşa/Antalya (marked: KVKK Application)
KEP: [email protected]
Your requests will be responded to within a maximum of 30 days following verification of your identity. The response is free of charge; however, if the process entails an additional cost, the fee schedule set by the Personal Data Protection Board may apply.
If your request is rejected, the response is found insufficient or no response is provided within the time limit, you retain the right to file a complaint with the Personal Data Protection Authority (KVKK).
9. Changes
The Company reserves the right to update this Privacy Notice in line with legal regulations and business processes. The current version is always available on our website. Clients will be notified by email of significant changes.