Data Protection Policy

Last Updated: January 2025

1. Data Controller

TORVIAN Transfer, operating from Antalya, Turkey, is the data controller responsible for processing your personal data in accordance with KVKK (Law No. 6698) and GDPR.

2. Personal Data We Collect

We collect and process the following personal data:

• Name, surname, and contact information (phone, email)
• Passport or ID details for airport transfers
• Flight information and travel dates
• Payment information (processed securely via Stripe)
• IP address and browser data for website security

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

• To provide and manage your transfer service
• To communicate booking confirmations and updates
• To process payments securely
• To comply with legal obligations
• To improve our services and customer experience

4. Data Retention

Your personal data is retained for the minimum period necessary to fulfill the purposes described above, and in compliance with applicable legal requirements. Booking data is kept for 5 years in accordance with tax and commercial legislation.

5. Your Rights

Under KVKK and GDPR, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to request correction of inaccurate data
• Right to request deletion of your data
• Right to object to data processing
• Right to data portability
• Right to withdraw consent at any time

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All payment data is processed through PCI-DSS compliant Stripe infrastructure.

7. Contact

For questions regarding your personal data or to exercise your rights, please contact us at torviantransfer@gmail.com or call +90 546 940 79 55.