Data Protection Notice (KVKK)

1. Identity of the Data Controller

In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by Yolcugo Teknoloji A.Ş. (MERSIS No: 0981165917800001) as the data controller, within the scope described below.

• Company: Yolcugo Teknoloji A.Ş.
• Address: Ovacık Mh. 4336. Sk. No:18/27 Gebze, Kocaeli, Turkey
• Tax Office / No: İlyasbey / 9811659178
• MERSIS No: 0981165917800001
• Email: info@yolcugo.com

2. Personal Data Processed

The following categories of personal data are processed within the scope of our services:

• Identity Information: Name, surname, national ID number, passport number, nationality
• Contact Information: Email address, phone number, address details
• Financial Information: Last 4 digits of credit card, billing information (company name, tax number, tax office), payment amount and currency
• Service Information: Transfer reservation details, flight number, pickup/drop-off points, date and time
• Digital Data: IP address, browser information, cookie data, session information
• Location Data: Driver location information during transfer service (only during active transfers)

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Planning, booking, and execution of chauffeured vehicle rental and transfer services
• Processing payments and issuing invoices
• Executing 3D Secure verification processes
• Responding to customer support requests and conducting communication activities
• Measuring, analyzing, and improving service quality
• Fulfilling legal obligations (tax legislation, consumer legislation, etc.)
• Conducting information security processes and fraud prevention

4. Legal Basis for Processing

Your personal data is processed based on the following legal grounds under Article 5 of KVKK:

• Directly related to the establishment or performance of a contract (Art. 5/2-c): Provision of transfer services
• Fulfillment of legal obligations (Art. 5/2-ç): Tax and commercial legislation obligations
• Establishment, exercise, or protection of a right (Art. 5/2-e): Use as evidence in legal disputes
• Legitimate interest of the data controller (Art. 5/2-f): Service quality improvement, security measures
• Explicit consent (Art. 5/1): Marketing activities and analytics cookies

5. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to the purposes stated above:

• Transfer Suppliers: Information necessary for service execution (passenger name, pickup/drop-off points, flight information)
• Payment Institutions: Banks and payment service providers for processing payments
• Legal Authorities: Authorized public institutions and organizations as required by law
• Technology Providers: Business partners providing infrastructure and security services (cloud servers, error tracking, etc.)

6. International Transfer of Personal Data

Due to certain technology infrastructure used on our platform (Google Cloud Platform, Sentry), your personal data may be transferred to countries with adequate protection or to countries where appropriate safeguards are provided under Article 9 of KVKK. These transfers are carried out solely for the purpose of providing the service and operating the technical infrastructure.

7. Data Retention Periods

Your personal data is retained for the duration required by processing purposes and within the retention periods prescribed by relevant legislation:

• Account and identity information: During membership and within 30 days of account deletion request
• Reservation and payment records: 10 years due to legal obligations (Turkish Commercial Code)
• Invoice information: 5 years due to tax legislation
• Location data: 90 days after transfer completion
• Cookie data: Up to 26 months depending on cookie type
• Error and performance reports: 180 days

8. Data Collection Method

Your personal data is collected through our website, mobile application, phone, and email channels using both automated and non-automated methods. For detailed information about data collected through cookies, please review our Cookie Policy.

9. Your Rights as a Data Subject

You have the following rights under Article 11 of KVKK:

• To learn whether your personal data is being processed
• To request information about the processing if your data has been processed
• To learn the purpose of processing and whether data is used in accordance with its purpose
• To know the third parties to whom personal data is transferred domestically or abroad
• To request correction of personal data if processed incompletely or inaccurately
• To request deletion or destruction of personal data under the conditions set forth in Article 7 of KVKK
• To request notification of correction, deletion, or destruction operations to third parties to whom data has been transferred
• To object to any result arising against you through analysis of processed data exclusively by automated systems
• To claim compensation for damages arising from unlawful processing of personal data

10. How to Apply

To exercise your rights listed above, you may submit a written application to info@yolcugo.com along with information to verify your identity. Your application will be concluded within 30 days at the latest.

11. Policy Changes

This notice may be updated in line with legal regulations and changes in our data processing activities. The current text is always published on this page.