Data Protection Notice

1. Controller and scope

Information awaiting verification: the data controller's legal name has not yet been confirmed. Denizli VIP Transferim is a brand name. It does not by itself identify a legal entity or data controller. Until this information is completed, this draft cannot serve as the final notice required by Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK).

This draft covers the quote form at https://denizliviptransferim.com and communications with the business. Adnan Çağlayan is the operational contact; this role alone does not establish that person as the data controller or legal representative.

2. Information involved

• The quote form includes your full name, phone number, pickup and destination, travel date and time, requested passenger count, service selection and any special requests you add.
• Messages and booking details you send through WhatsApp; your email address and message if you choose email.
• The IP address and technical request information needed to connect to the website. Whether these are logged by the hosting infrastructure, and the scope of any logs, remain unverified.

The form does not request identity documents, payment card details or health information. Do not enter identity/passport numbers, card details, medical information or unnecessary information about other people in the notes field. Any separate need involving sensitive personal data requires its own appropriate legal basis and secure communication method.

3. Collection and the WhatsApp link

The form converts your entries into a message in your browser using partly automated processing. The current website code has no system that sends these fields to the business's web server for storage. Selecting the WhatsApp button places the information in the text parameter of a wa.me link. Opening that link can transmit the text to WhatsApp infrastructure before you separately press “Send” in WhatsApp to message the business.

WhatsApp and email messages are received electronically. Information provided by telephone is received during the conversation; any records made afterwards require confirmation by the business. Browser history and autofill depend on your device settings.

4. Purposes and legal grounds

The following assessment is a draft based on the current request process. The controller must confirm it against actual operations.

• Preparing a quote, responding to you and arranging an agreed journey: necessary identity, contact and travel details may be processed under Article 5(2)(c), where directly related and necessary to establish or perform a contract.
• Handling a data protection request: necessary request and identity verification information falls under the legal obligation ground in Article 5(2)(ç), together with Article 13. Only information needed to handle the request should be collected.
• Establishing or defending a right in a specific dispute: relevant correspondence and transaction records may fall under Article 5(2)(e), where necessary to establish, exercise or protect a right. This does not justify indefinite retention.
• Delivering web pages and securing connections: necessary technical connection data requires an assessment under the legitimate interests ground in Article 5(2)(f), subject to protecting your fundamental rights and freedoms. Any server logging and its specific legal basis must be verified separately; this draft is not a confirmed logging policy.

The request form does not collect marketing consent. Reading this notice or opening WhatsApp does not give consent to advertising or all data transfers. Providing information and obtaining any required explicit consent are separate steps; marketing permission must not be a condition of booking.

5. Recipients and international transfers

• People authorised to handle business enquiries: receive your message to respond to the quote request and discuss the journey. Their access permissions require confirmation by the business.
• The WhatsApp service provider: may process data when the link opens and while providing messaging services.
• Email service providers: process delivery and mailbox storage if you contact the business by email. The published address uses Gmail.
• The hosting provider: processes technical connection data to serve the site. Its identity, server country, logging and access arrangements remain unverified.

WhatsApp, email and hosting services may involve processing or access outside Türkiye. The actual recipients, countries and Article 9 transfer mechanism have not been verified for this project. Any applicable adequacy decision or appropriate safeguards must be documented separately. Exceptions for incidental transfers do not automatically apply to regular service use. Choosing the link is not blanket transfer consent that resolves these outstanding requirements.

6. Retention and deletion

The website does not have a booking database for form entries. This does not mean sent messages are never retained in WhatsApp, email, devices or backups. Retention periods, access and deletion practices in those systems have not been confirmed by the business; no period in days or years is asserted here.

Data should be kept only for the period required by its purpose or applicable law. Under Article 7, it must be erased, destroyed or anonymised when the conditions for processing no longer exist. The actual procedure, including backups, must be established before publication.

7. Your rights under Article 11

You may apply to the controller to:

• Find out whether your personal data is processed.
• Request information about that processing.
• Learn the purpose of processing and whether data is used consistently with that purpose.
• Learn the third parties receiving your data in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction under the conditions in Article 7.
• Request notification of corrections, erasure or destruction to third parties that received the data.
• Object to an adverse outcome resulting from analysis exclusively through automated systems.
• Seek compensation for damage caused by unlawful processing.

8. Requests and contact

The current business contact details are Adnan Çağlayan, denizliviptransferim@gmail.com, 0535 451 20 53; Bağbaşı Mahallesi, 1006. Sokak, No: 7/1, Pamukkale/Denizli. The controller's identity and use of this address for formal data requests or service of documents remain unconfirmed. You can use these contact details to raise a data enquiry and ask about the application channel.

KVKK requests can be submitted in writing or through methods specified by the Board. For an email application, use an address previously supplied to and registered with the controller. Turkish registered electronic mail (KEP), secure electronic signature and mobile signature are recognised methods; no KEP address or dedicated application system is listed here because the business has not confirmed one.

An application must include your name, signature if written, the identification information required by the Communiqué for your nationality, an address for notification, available reply contact details and the subject of the request. Do not put an identity-document copy into the WhatsApp quote form; a secure method for any necessary identity verification must be established separately.

The controller must respond as soon as the nature of the request permits and within 30 days at the latest. Requests are generally free; only the Board's tariff may apply where additional costs arise. If the request is rejected, the response is inadequate or no timely response is received, a complaint may be made to the Board within 30 days of learning of the response and, in all cases, within 60 days of the initial application. The Authority provides official complaint guidance in Turkish.