GDPR Data Protection Notice

GDPR Data Protection Notice

Last Updated: July 7, 2026

GDPR Data Protection Notice

At Istanbul Transfer Airport, we are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

This notice explains how we collect, process, store, and protect your personal information when you use our website or book our airport transfer services.

By using https://istanbultransferairport.com, you acknowledge that you have read and understood this GDPR Data Protection Notice.


1. Data Controller

The data controller responsible for processing your personal data is:

Istanbul Transfer Airport

Website: https://istanbultransferairport.com

Email: Please insert your official customer support email.


2. Personal Data We Collect

Depending on the services you use, we may collect the following categories of personal data:

Identity Information

  • Full Name
  • Nationality (where required)
  • Passenger Information

Contact Information

  • Email Address
  • Telephone Number
  • WhatsApp Number (if provided)

Booking Information

  • Pick-up Address
  • Drop-off Address
  • Flight Number
  • Arrival Airport
  • Departure Airport
  • Date and Time of Transfer
  • Number of Passengers
  • Number of Suitcases
  • Child Seat Requests
  • Special Travel Requests

Payment Information

When online payment is available, payments are processed by secure third-party payment providers.

We do not store your full payment card details on our servers.

Technical Information

While visiting our website, we may automatically collect:

  • IP Address
  • Browser Type
  • Operating System
  • Device Type
  • Pages Visited
  • Referral Source
  • Session Duration
  • Cookie Information

3. Lawful Basis for Processing

Under Article 6 of the GDPR, we process your personal data based on one or more of the following legal grounds:

Contract Performance

To:

  • Process reservations
  • Provide airport transfer services
  • Contact you regarding your booking
  • Monitor your flight status
  • Arrange your assigned driver

Legal Obligations

To comply with:

  • Tax regulations
  • Accounting requirements
  • Government requests
  • Court orders
  • Applicable transportation laws

Legitimate Interests

We may process data for:

  • Improving our website
  • Preventing fraud
  • Website security
  • Customer support
  • Service quality improvements

Consent

Where required, we process data only after obtaining your explicit consent, particularly for:

  • Marketing communications
  • Non-essential cookies
  • Promotional newsletters

You may withdraw your consent at any time.


4. How We Use Your Personal Data

Your personal information may be used to:

  • Confirm your reservation
  • Send booking confirmations
  • Contact you before your transfer
  • Track flight arrivals
  • Allocate vehicles and drivers
  • Improve customer service
  • Process refunds
  • Prevent fraudulent activities
  • Comply with legal obligations
  • Improve website functionality

5. Data Sharing

We never sell your personal information.

Your data may only be shared when necessary with:

  • Assigned Drivers
  • Dispatch Team
  • Payment Service Providers
  • IT Service Providers
  • Website Hosting Providers
  • Legal Authorities (where required by law)

All third parties receiving personal data are required to maintain appropriate confidentiality and security measures.


6. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA).

Whenever personal data is transferred internationally, we ensure that appropriate safeguards are implemented in accordance with GDPR requirements.


7. Data Retention

We retain your personal data only for as long as necessary to:

  • Complete your reservation
  • Provide customer support
  • Meet accounting obligations
  • Comply with legal requirements
  • Resolve disputes

When personal data is no longer required, it will be securely deleted or anonymized.


8. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • SSL Encryption
  • Secure Servers
  • Restricted Employee Access
  • Firewall Protection
  • Malware Protection
  • Password Protection
  • Regular Software Updates
  • Data Backup Procedures

Despite our best efforts, no internet transmission is completely secure.


9. Your GDPR Rights

If you are located within the European Union, you have the following rights:

Right of Access

You may request a copy of your personal data.

Right to Rectification

You may request correction of inaccurate information.

Right to Erasure (“Right to be Forgotten”)

You may request deletion of your personal data where legally permitted.

Right to Restrict Processing

You may request limitation of how your data is processed.

Right to Data Portability

You may request your personal data in a structured, machine-readable format.

Right to Object

You may object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You may lodge a complaint with your local Data Protection Authority if you believe your rights have been violated.


10. Cookies

Our website uses cookies to:

  • Improve functionality
  • Remember preferences
  • Measure website performance
  • Analyze visitor behavior

For more information, please read our Cookie Policy.


11. Automated Decision Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning our customers.


12. Children’s Privacy

Our services are intended for individuals aged 18 and over.

We do not knowingly collect personal data from children.

If such information is discovered, it will be deleted without unnecessary delay.


13. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites.

Users should review the privacy policies of those websites independently.


14. Changes to this Notice

We reserve the right to update this GDPR Data Protection Notice at any time.

Changes become effective immediately upon publication on this page.

We recommend reviewing this page periodically.


15. Contact Us

If you have any questions regarding this GDPR Data Protection Notice or wish to exercise your GDPR rights, please contact us using the contact information available on our website.

Website: https://istanbultransferairport.com

Email: Please insert your official support email.

We will respond to GDPR-related requests within the timeframes required by applicable law.

Call us