Last updated: 17 August 2026 · Version: v2.0
This document explains, under Turkish Personal Data Protection Law no. 6698 (KVKK), which of your personal data we process when you use TurTalebi, why we process it, who we share it with and what your rights are.
1. Data controller
The data controller is ALBAYCAN GRUP TURİZM SEYAHAT VE TEKNOLOJİ SANAYİ TİCARET LİMİTED ŞİRKETİ, which operates the Platform. Address: Hobyar Mah. Cağaloğlu Yokuşu Sk. Evren Han No: 17/210 Fatih / İstanbul, Türkiye. MERSİS: 0049105288400001.
2. Personal data we process
When you create an account: full name, email address, phone number and an irreversible hash of your password. When you create a booking: first name, last name, email, phone, number of participants, date and time, pickup/meeting point and your note if any; for transfer services also details required to perform the service such as flight number, luggage count and children's ages. Technically: the authentication data that keeps your session signed in. The Platform never collects or stores the Provider's IBAN details. If you choose to pay by card, your card number and security code are processed only to initiate the transaction sent to the payment institution; the Platform does not store this data PERMANENTLY, and only keeps the masked (last four digits) form of your card on the booking record.
3. Purposes and legal grounds
Your data is processed to create and forward your booking request to the Provider, enable performance of the service, contact you, send booking status notifications, meet statutory retention obligations, and handle support requests. Because the Platform does not collect payments or issue refunds, it does not process card or IBAN data for those purposes. Depending on the specific processing activity, the legal grounds may include formation or performance of a contract, compliance with legal obligations, and legitimate interest. Marketing messages are sent only if you give separate consent.
4. Who we share it with
Your booking details are shared with the Provider that will actually deliver the service, only to the extent required for performance. The cloud infrastructure provider hosting the data and communication service providers delivering email, SMS or WhatsApp notifications may also process data only as required for those services. For card payments your card details are passed only to the payment institution for 3D Secure verification and are not stored by the Platform; the Platform does not collect IBAN details. If an international transfer occurs, the applicable KVKK conditions are followed.
5. Retention period
Account data is kept while your account remains open; booking and related transaction records are retained for applicable financial and legal retention obligations. The Platform does not create card or IBAN records or its own collection/refund records. When retention is no longer required, data is deleted, destroyed or anonymised in accordance with the applicable rules.
6. Your rights (KVKK art. 11) and information notice
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to request correction if it is incomplete or inaccurate, to request erasure or destruction under the conditions set out in the legislation, to know the third parties to whom it has been transferred, and to claim compensation if you suffer damage. You can send your requests to the email address at the bottom of this page.
7. Data security
Your data is encrypted in transit; access rights are restricted on a role basis and Providers can only access the bookings forwarded to them. Your password is stored irreversibly and cannot be viewed by anyone.
For questions and requests about these documents: kvkk@turtalebi.com