Last updated: 7 October 2026
This policy explains how AlperaVip Transfer processes your personal data when you visit our website, book a transfer or contact us. It is based on the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for customers from the European Union and the European Economic Area, additionally on the EU General Data Protection Regulation (GDPR).
1. Controller
AlperaVip Transfer Address: Email: alperavip@gmail.com Phone: +90 537 927 02 63 Website: https://alperavip.com
Please use the contact details above for any questions or requests regarding your personal data.
2. What data we process and why
a) Transfer bookings
The information you provide in the booking form: name, phone number, email address, pick-up and drop-off addresses and locations, date and time, number of passengers and luggage, names of other passengers, flight number, selected vehicle class and extras, payment method and your notes. To prevent misuse, your IP address is also recorded when you book.
Purposes: receiving, planning and carrying out your booking; your driver meeting you; sending booking confirmations and change notifications; monitoring flight delays; accounting and statutory obligations.
Legal bases: conclusion and performance of a contract (Art. 6(1)(b) GDPR, Art. 5(2)(c) KVKK); legal obligation (Art. 6(1)(c) GDPR, Art. 5(2)(ç) KVKK); legitimate interests for recording the IP address (Art. 6(1)(f) GDPR, Art. 5(2)(f) KVKK).
Your booking details (name, phone, flight number, passenger names, addresses, date and time) are shared with the driver who carries out the transfer.
b) Contact form, phone, email and WhatsApp
When you write to us or call us, we process your name, contact details and the content of your message; for the contact form also your IP address. Purpose: answering your enquiry and making you an offer. Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR) and legitimate interests (Art. 6(1)(f) GDPR).
If you choose to contact us via WhatsApp, your messages are also processed by WhatsApp Ireland Limited / Meta Platforms, Inc.; WhatsApp's privacy policy applies.
c) Use of the website
When you visit the site, your browser technically transmits your IP address, date and time, the requested page and information about your browser and operating system. This data is used to keep the site secure and available, to detect attacks and to fix errors. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
To understand how the site is used, we also keep cookieless, anonymous visit statistics on our own server: the page viewed, where the visit came from (e.g. search engine, advertising, social media), device type, country and clicks on WhatsApp / phone links. Your IP address is not stored; your visit is only summarised with a random key that applies to that day and is deleted the next day, so it cannot be linked to you or to another day. Nothing is stored on your device. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
d) Address search and maps
When you search for an address in the booking form, the text you type is sent to Google Maps / Places (Google Ireland Limited, Google LLC) to show matching results; when the search runs in your browser, Google also sees your IP address. Map images are loaded from OpenStreetMap servers (OpenStreetMap Foundation, United Kingdom), which receive your IP address. Only coordinates are used to calculate the route and distance. Legal basis: pre-contractual steps and legitimate interests (Art. 6(1)(b) and (f) GDPR).
e) Analytics and advertising measurement (only with your consent)
If you consent, we use Google Analytics and Google Ads (Google Ireland Limited) to understand how our website is used and to measure how many bookings our ads generate. When a booking is completed, only the booking code and amount are sent to Google Ads; your name, phone number or email address are not.
Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 5(1) KVKK; for visits from Germany also § 25 TDDDG). If you do not consent, these cookies are not used; Google's "Consent Mode" only receives cookieless, non-identifying signals.
3. Cookies
Strictly necessary cookies (no consent required):
- Session cookie: for forms to work and for security
- XSRF-TOKEN: protection against forged form submissions
- transfer_locale and transfer_currency: your selected language and currency (1 year)
- cookie_consent: your cookie choice (180 days)
Cookies used only with your consent:
- Google Analytics (_ga, _ga_*): visit statistics (up to 2 years)
- Google Ads (_gcl_au and similar): ad conversion measurement (up to 90 days)
You can change or withdraw your consent at any time via the "Cookie settings" link in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Recipients
- The drivers who carry out your transfer
- Our hosting and email service providers
- Cloudflare, Inc. (content delivery and security; IP address and request data)
- Google (Maps / Places; with your consent Analytics and Ads)
- OpenStreetMap Foundation (map images)
- Competent public authorities where required by law
We do not sell your personal data or pass it on to third parties for advertising purposes.
5. International transfers
Our company is based in Türkiye and your booking data is processed in Türkiye. If you book from the EU, the transfer of your data to Türkiye is necessary for the performance of the transfer contract with you (Art. 49(1)(b) GDPR). Service providers such as Google and Cloudflare may also process data in the USA; these companies are certified under the EU-U.S. Data Privacy Framework and additionally rely on EU Standard Contractual Clauses. Transfers from Türkiye abroad comply with Art. 9 KVKK.
6. Retention periods
- Booking and accounting records: for the statutory retention periods under the Turkish Commercial Code and Tax Procedure Law (up to 10 years)
- Contact messages: up to 2 years after your request has been completed
- System logs: 14 days; booking transaction logs: 60 days
- Anonymous visit statistics: 13 months
- Cookies: as stated above
When the period ends, your data is deleted or anonymised.
7. Your rights
Under Art. 15–21 GDPR and Art. 11 KVKK you have the right to:
- Access your data and receive information about its processing
- Have inaccurate or incomplete data corrected
- Have your data erased
- Restrict processing
- Receive your data in a structured format (data portability)
- Object to processing based on legitimate interests
- Withdraw your consent at any time with effect for the future
- Under KVKK, object to an adverse result arising from automated analysis and claim compensation for damage caused by unlawful processing
Please send your request to alperavip@gmail.com; we will reply within 30 days at the latest. You also have the right to lodge a complaint with a supervisory authority: in Türkiye the Personal Data Protection Board (KVKK), in the EU the data protection authority of the country where you live (in Germany, the data protection authority of your federal state).
8. Is providing data mandatory?
Your name, phone number, addresses and date/time are required for a booking; without them we cannot carry out the transfer. All other information is optional. No automated decision-making or profiling takes place.
9. Security
The site runs over an encrypted connection (HTTPS) and only authorised persons can access the data. Your booking can only be viewed with your booking code and a private link sent to you.
10. Changes
We may update this policy to reflect legal or technical changes. The current version is always published on this page.