This notice is provided by HES Travel Tourism (“we”) as data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) for the transfer services offered through hestravel.com, our mobile apps and WhatsApp.
Data we process
- Identity and contact: first and last name, mobile number, email address.
- Trip details: pickup and drop-off addresses, date and time, flight number, number of passengers and bags, name on the meeting sign, notes for the driver.
- Transaction: booking code, amount and payment status. Card details are processed by the payment provider; we never store your card number.
- Location: the driver’s location during your trip (shown on your tracking link); your device location in the app if you allow it.
- Technical: IP address, browser and device information, cookies (advertising cookies only with your consent).
Why we use it
- To create your booking, verify your phone with a WhatsApp code and take payment,
- To plan your transfer, assign a driver, track your flight and meet you,
- To send your confirmation, driver details and tracking link by WhatsApp, SMS or email,
- To handle changes, cancellations, refunds and complaints,
- To meet invoicing, accounting and legal record-keeping obligations,
- To keep the service secure, prevent misuse and measure service quality,
- To send offers and news, only if you have opted in.
Legal grounds
We process your data because it is necessary to enter into or perform our contract with you, to comply with legal obligations, to establish or defend legal claims, and for our legitimate interests (KVKK Art. 5/2). Marketing messages and advertising cookies rely on your explicit consent, which you can withdraw at any time.
Sharing
We share your data only as needed for these purposes: with the drivers and partners who carry out your transfer, the payment provider, messaging and email providers, hosting and IT providers, the hotel or agency that booked on your behalf, and public authorities where required by law. WhatsApp and some cloud services use servers outside Türkiye; such transfers are made in line with KVKK Art. 9.
Retention
We keep your data for as long as needed for these purposes and for the periods required by law (e.g. 10 years under tax law), then delete, destroy or anonymise it. If you delete your app account, your personal details are anonymised; booking and payment records that must be kept by law are retained without identifying you.
Your rights
Under KVKK Art. 11 you may ask whether we process your data and request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is shared with, ask for incomplete or incorrect data to be corrected, ask for deletion or destruction where the legal conditions are met and for these actions to be notified to recipients, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.
Contact
Send your request through the channels on the Contact page at hestravel.com (WhatsApp or email) with information that lets us verify your identity. We respond free of charge within 30 days.