24/7 VIP Transfer Service Google 5.0 — 60+ reviews
info@istanbultravelpoint.com +90 549 449 77 34
Istanbul Travel Point
Login Sign Up

PDPL Clarification Notice

Learn about your rights as a data subject and our data processing procedures under the Personal Data Protection Law (PDPL / Law No. 6698).

Last updated: May 18, 2026

Within the scope of Law No. 6698 on the Protection of Personal Data ("PDPL"), as Istanbul Travel Point ("Data Controller"), we inform you about the purposes, legal grounds, transfer, and your rights regarding the processing of your personal data.

1. Data Controller

Istanbul Travel Point
Web: istantravelpoint.com
Email: info@istantravelpoint.com

2. Categories of Processed Personal Data

  • Identity: first name, last name.
  • Contact: email, phone (WhatsApp), physical address (if provided).
  • Customer transaction: reservation details, payment and invoice history, additional service preferences.
  • Transaction security: IP address, browser/device information, log records, cookie data.
  • Marketing: preference and behavior analysis if you give consent (for campaign notifications).

3. Purposes of Personal Data Processing

  • Creating, tracking, and completing transfer reservations.
  • Customer relationship management (responding to requests, complaints, and suggestions).
  • Managing payment and invoicing processes.
  • Fulfilling legal obligations (Tax Procedure Law, PDPL, e-Commerce Law, etc.).
  • Improving service quality and developing our technical infrastructure.
  • Sending promotional, campaign, and discount notifications if you provide explicit consent.
  • Managing information security processes; preventing fraud and misuse.

4. Legal Grounds for Processing (PDPL Art. 5 and 6)

  • Establishment and performance of a contract (reservation agreement).
  • Fulfilling legal obligations (invoicing, tax, audit).
  • Legitimate interests of the data controller (operational efficiency, security).
  • Your explicit consent (marketing communication, optional data collection).

5. Transfer of Personal Data

Your personal data is transferred to the following parties only to the extent required for the purpose of the transaction:

  • Our contracted drivers and operations team — for the execution of the transfer.
  • Payment service provider (iyzico) — for processing payments.
  • Cloud/SaaS service providers — for server hosting, email, and SMS infrastructure (data may be transferred abroad if necessary; in such cases, PDPL Art. 9 conditions are followed).
  • Authorized public institutions and organizations — within the framework of legal obligations.

Your data is not sold to third parties for advertising or marketing purposes.

6. Method of Collecting Personal Data

Your data is collected electronically through forms you fill out on our website, correspondence with our customer service, payment processes, and technical records left during site usage (cookies, log files).

7. Your Rights as a Data Subject (PDPL Art. 11)

As a data subject, you have the following rights:

  1. To learn whether your personal data is being processed.
  2. To request information if it has been processed.
  3. To learn the purpose of processing and whether it is used appropriately.
  4. To know the third parties to whom your data is transferred domestically or abroad.
  5. To request correction if it is incomplete or incorrectly processed.
  6. To request deletion or destruction within the scope of PDPL Art. 7.
  7. To request notification of correction/deletion to third parties to whom data has been transferred.
  8. To object to results of analyses made by automated systems.
  9. To request compensation for damages arising from unlawful processing.

8. Application Method

To exercise your rights above, you can send an application to info@istantravelpoint.com including your name-surname, Turkish ID or passport number, contact details, and your request. Your applications will be answered free of charge within 30 days at the latest in accordance with PDPL Art. 13. (If the process requires additional costs, the tariff determined by the Board will apply.)

9. Data Retention Period

Your data is retained for the period stipulated in the relevant legislation (e.g., 10 years under tax legislation) or as long as required for the purpose of processing. When the period expires, data is securely deleted, destroyed, or anonymized.

10. Updates

This clarification text may be updated due to changes in legislation or the development of our services. The current version is always published on this page.