Privacy policy

When you book a transfer on Transfer48, your personal data is processed by Transfer48. This notice explains how we use it under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for guests in the European Union and the United Kingdom, the EU GDPR and the UK GDPR. In short: we use your data only to carry out your transfer, keep in touch with you about it and meet our legal obligations. We never sell it.

1. Who is responsible for your data

The data controller is the company that sells and provides your transfer:

Company name

Transfer48

Email

[email protected]

Phone

+90 540 007 22 00

This website runs on TransferRunner software. Transfer Runner Ltd (registered in England and Wales under company number 17488928), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, which provides the software and hosting, acts as our data processor: it processes your data only on our behalf, under our instructions and a data processing agreement, and never for its own purposes.

2. What data we process

• Identity and contact: your name, email address and phone number.
• Trip details: pick-up and drop-off addresses, date and time, flight number, number of passengers (adults, children, infants), requests such as child seats or luggage, and notes for the driver.
• Payment details: amount, payment method and payment status. You pay in the vehicle, so no card details are collected on this website.
• Invoice details: if you ask for an invoice, the company name, tax number and billing address.
• Your review: your rating and comment, if you choose to leave one after the trip.
• Technical data: IP address, browser and device information, how you use the website and the cookies described in our cookie policy.

We do not ask for special category data such as health information; please do not enter it in the notes. If you tell us about an accessibility need, such as a wheelchair, we use it only to arrange your trip accordingly. If you book for other passengers, please make sure they have seen this notice before you share their details.

3. Why we use your data and on what legal basis

• Taking and confirming your booking, sending your voucher, assigning a driver and vehicle, and carrying out your transfer. Legal basis: performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
• Tracking your flight and adjusting the pick-up time to the actual landing time. Legal basis: performance of a contract.
• Sending you booking messages by email, SMS or WhatsApp (confirmation, changes, driver details, reminders on the day). Legal basis: performance of a contract.
• Taking payment, making refunds, issuing invoices and keeping accounting and tax records. Legal basis: legal obligation and performance of a contract (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)).
• Asking for your feedback after the trip, measuring service quality, handling complaints, preventing fraud and keeping the website secure. Legal basis: our legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
• Protecting our rights if there is a dispute. Legal basis: establishment, exercise or defence of legal claims (KVKK Art. 5/2-e; GDPR Art. 6(1)(f)).

We do not send you marketing emails. Your data is never sold or rented for marketing.

4. Who we share your data with

• Our driver and vehicle team: the driver carrying out your transfer sees your name, phone number, pick-up and drop-off details, flight number, passenger numbers and notes.
• Transfer Runner Ltd (data processor, United Kingdom): provides the booking software and hosting and processes data only on our instructions. Contact: [email protected].
• Messaging services: the email, SMS and WhatsApp providers used to deliver booking messages.
• Flight data provider: only your flight number and date, to check the landing time.
• Google Maps: for address suggestions when you type an address (subject to your cookie choice).
• Authorities: courts, tax offices and other public bodies, only where the law requires it.
• Our advisers: our accountants and lawyers, who are bound by confidentiality.

5. International transfers

Our software provider Transfer Runner Ltd is based in the United Kingdom, and some of our other service providers (for example hosting, payment and messaging) may store data outside Turkey. These transfers rely on appropriate safeguards such as the standard contracts published by the Turkish Personal Data Protection Board under Article 9 of the KVKK. For data from the EU and the UK, the safeguards required by the GDPR and the UK GDPR apply.

6. How long we keep your data

• Booking, payment and invoice records: 10 years (Turkish Commercial Code and Tax Procedure Law).
• Messages and notifications about your booking: together with the booking record.
• Your review: until you ask us to delete it or it is unpublished.
• Technical and security logs: up to 2 years.
• Your cookie choice: 12 months.

When the period ends, your data is deleted, destroyed or anonymised so that it can no longer identify you.

7. How we protect your data

The website uses an encrypted connection (HTTPS). Only authorised staff can access our panel, and drivers only see the jobs assigned to them. Card details are never stored by us or by TransferRunner.

8. Your rights

You have the following rights over your personal data:

• To find out whether we process your data and to get information about it and a copy of it
• To know why we process it and whether it is used for that purpose
• To know who we share it with, in your country or abroad
• To have inaccurate or incomplete data corrected
• To have your data erased (except where the law requires us to keep it)
• To have corrections and erasures passed on to those we shared the data with
• To restrict processing and to object to processing based on legitimate interests
• To receive your data in a common format and have it sent to another company (data portability)
• To object to a decision against you made solely by automated means
• To withdraw your consent (for example to cookies) at any time, without affecting earlier processing
• To claim compensation if you suffer damage because of unlawful processing

These rights are set out in Article 11 of the KVKK and Articles 15-22 of the GDPR and the UK GDPR.

9. How to contact us

To use your rights, email [email protected] or write to us at the address above. Please include your name, booking reference (PNR) and your request. Writing from the email address you used for the booking helps us verify your identity; we may ask for more information if needed. We reply free of charge within 30 days at the latest.

Requests sent to TransferRunner are forwarded to us; TransferRunner does not decide on them on our behalf.

If your request is refused, you find our reply insufficient or you do not hear from us within 30 days, you can complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr). If you live in the EU or the UK, you can also contact the data protection authority in your country (the ICO in the UK).

10. Changes to this notice

We may update this notice from time to time. The current version and date are always shown at the top of this page. Your booking is handled under the version in force when you booked.