Last updated: 9 September 2026
airporthoteltransfer.com (“we”, “our”, “us”) is a technology platform connecting passengers with independent, licensed transport companies. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, airporthoteltransfer.com (the “Website”), and our “Hotel Transfer” mobile applications for iOS and Android (the “Apps”), in compliance with:
- Turkish Personal Data Protection Law No. 6698 (KVKK) — our primary framework as a Turkish company
- EU GDPR — applicable because we offer services to individuals in the EU
- UK GDPR and the Data Protection Act 2018 — applicable to individuals in the UK
By using our Website, our Apps, or our services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
For the purposes of applicable data protection laws, the data controller is the operator of airporthoteltransfer.com, based in Antalya, Türkiye, acting as a technology intermediary between passengers and independent transport providers:
airporthoteltransfer.com
📧 [email protected]
🌐 https://airporthoteltransfer.com
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide (Website and Apps)
- Full name
- Email address
- Phone number
- Pickup and drop-off locations
- Flight number, flight date, and arrival time
- Passenger count (including children and any child-seat needs, provided by the responsible adult)
- Booking details, notes, and special requests
- Messages you send us through the contact form or a quote request
2.2 Payment Information
We do not collect or process card or online payment data. Unless otherwise stated, payment is made in cash directly to the transport provider’s driver at the time of the transfer — no payment data passes through the Platform, and we store no card details.
2.3 Communications Data
We contact you by email, phone, or WhatsApp to confirm and manage your booking. If you communicate with us via WhatsApp, your phone number and message content are also processed by Meta Platforms under its own privacy terms.
2.4 Automatically Collected Data (Website)
When you visit the Website, the following may be collected automatically:
- IP address
- Device type, browser, operating system
- Pages visited and interaction data (including, with your consent, session interaction data collected by Microsoft Clarity)
- Cookies and similar technologies, as described in Section 6 and in our Cookie Policy
This section does not apply to the Apps, which do not use cookies. What the Apps collect is described in Section 2.5.
2.5 Mobile Apps
Our “Hotel Transfer” Apps for iOS and Android offer the same booking service as the Website. They do not require an account or login and do not collect payment.
- Booking, quote and contact data you enter (the categories listed in Section 2.1) is sent over an encrypted connection (HTTPS) only to our own booking system, so that our team can arrange and confirm your transfer. It is not shared with advertising partners.
- Stored only on your device and never sent to us: your language and appearance settings, your usage-analytics choice, the hotels you recently viewed in the App (at most the last 10, deleted automatically after 30 days), and ordinary caches.
- Not collected by the Apps: your device location (the Apps never request location permission; route maps are drawn from the pickup and drop-off points of the route, not from your position), your contacts, photos or files, and no advertising identifier (IDFA / Android Advertising ID).
- Usage analytics, only if you opt in: when you first open an App it asks whether you allow anonymous usage analytics (Microsoft Clarity and Google Analytics). Nothing is collected until you tap “Allow”, and you can switch it off at any time under More → Usage Analytics. Section 6.4 explains exactly what these tools receive.
The privacy information on our App Store and Google Play listings describes the same categories.
3. Lawful Basis for Processing
We process your personal data based on the following lawful grounds (GDPR Article 6; KVKK Articles 5–6):
- Contractual necessity – to manage and fulfil your booking, including sharing data with the assigned transport provider and driver
- Legal obligation – accounting, tax, regulatory compliance
- Legitimate interests – service improvement, fraud prevention, security
- Consent – marketing, analytics and advertising cookies on the Website, and usage analytics in the Apps
4. How We Use Your Data
Your data is used to:
- Process and manage transfer bookings
- Communicate booking confirmations and updates (email, phone, WhatsApp)
- Coordinate services with transport providers and their drivers
- Improve the performance and usability of the Website and the Apps
- Detect and prevent fraud or misuse
- Comply with legal and regulatory requirements
We do not make solely automated decisions that produce legal effects concerning you. With your consent, advertising partners may build interest profiles for remarketing; you can withdraw consent at any time.
5. Marketing & Communications
We may send service-related communications (e.g. booking confirmations, important updates).
Marketing communications will only be sent if:
- You have given explicit consent, or
- Permitted under applicable laws
You may unsubscribe at any time.
6. Cookies, Analytics & Advertising
On the Website, we use cookies and similar technologies, loaded and controlled via Google Tag Manager and activated only based on your consent, including:
6.1 Google Services
- Google Analytics (traffic and usage analysis)
- Google Ads (conversion tracking, remarketing)
6.2 Microsoft Clarity
With your analytics consent, Microsoft Clarity records how you interact with our pages (clicks, scrolling, mouse movement) to produce heatmaps and session replays that help us improve usability. Sensitive form inputs are masked.
6.3 Meta Platforms
- Meta Pixel (Facebook / Instagram Ads)
These tools may collect anonymised or pseudonymised data to:
- Analyse traffic and usage
- Measure advertising performance
- Deliver relevant ads
Non-essential cookies are only activated after you provide consent via our cookie banner, in accordance with KVKK, GDPR, and UK GDPR. You can change your choices at any time via the Cookie Settings link in the website footer.
Details are provided in our Cookie Policy.
6.4 Usage Analytics in the Mobile Apps (opt-in)
The Apps do not use cookies or Google Tag Manager. Instead, they use two analytics tools, which run only after you opt in inside the App:
- Microsoft Clarity — records how the App is used: taps and gestures, the screens you visit, and session replays. Every field in which you type personal data (name, email, phone, flight details, notes, messages) is masked before capture and never appears in a recording.
- Google Analytics for Firebase — receives the names of the screens you view, a fixed set of event names describing steps in the booking flow (for example “search submitted”, “price shown”, “booking submitted”), the App language, and standard session data. It never receives the contents of any form.
Both tools also receive technical data about the session: device model, operating system version, App version, screen size, a random identifier generated for your installation, and the approximate country or region derived from your IP address on the provider’s servers. This data is not linked to your name or booking and is not used to track you across other companies’ apps or websites. The Apps use no advertising identifier, and the advertising features of Google Analytics (ad personalisation, Google Signals, Google Ads linking) are switched off.
Your choice. When you first open the App, it asks “Help us improve the app?”. Choosing “Not now” or dismissing the question means nothing is collected. You can allow or revoke usage analytics at any time under More → Usage Analytics; switching it off stops collection immediately and discards the Google Analytics identifier stored on your device.
Microsoft and Google process this data on our behalf under their privacy statements (linked in Section 4 of our Cookie Policy) and retain the data for limited periods: Microsoft keeps session recordings for 30 days (a small sample for up to 9 months), and Google keeps event-level data for the retention period set in our Analytics property, at most 14 months. We use the resulting reports only in aggregated form to find and fix usability problems.
7. Data Sharing & Third Parties
7.1 Sharing Between Passenger and Driver
To perform your transfer transparently and safely, we share data in both directions on the basis of contractual necessity:
- Shared with the transport provider and its assigned driver: your name, contact number, flight number and times, pickup and drop-off details, passenger count, and any notes or special requests needed to perform the transfer
- Shared with you: the driver’s name, contact number, and vehicle details (and, where available, live pickup status) before your transfer
Transport providers and drivers may use this data only to perform the transfer and must protect it in accordance with applicable data protection laws.
7.2 Other Recipients
We may also share personal data with:
- IT, hosting, and infrastructure providers
- Communication providers (Google Workspace for email delivery and storage; Meta Platforms where you communicate with us via WhatsApp)
- Analytics and advertising partners — on the Website: Google, Microsoft and Meta, with your cookie consent; in the Apps: Microsoft (Clarity) and Google (Google Analytics for Firebase), only if you opt in to usage analytics
- Authorities, if legally required
We do not sell personal data.
8. International Data Transfers
Your booking and passenger data (name, contact details, flight and transfer details, notes) is stored and processed on our servers in Türkiye, where our company and the transport providers performing your transfer are also located. Sharing your booking data with the transport provider in Türkiye is necessary for the performance of your transfer contract.
We do not pass your booking or passenger data to Google, Microsoft, Meta, or any other analytics or advertising company. What those companies receive — only with your consent — is pseudonymous usage and advertising data (cookie or installation identifiers, pages and screens viewed, events, device and browser data, approximate location derived from your IP address), as described in Sections 2.4, 2.5 and 6; the contents of your booking and contact forms are never included.
Some data does pass through infrastructure providers acting as our processors: our business email runs on Google Workspace, so emails exchanged with you (booking confirmations, replies to your messages) are delivered and stored by Google as our email provider; our website is served through Cloudflare’s global content-delivery and security network. Where such a provider processes data outside Türkiye or outside your country, we rely on appropriate safeguards, such as:
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- Equivalent legal protections
9. Data Retention
We retain personal data only for as long as necessary:
- Booking and correspondence data: for the period required for operational purposes and legal claims
- Financial and invoicing records: for the statutory retention periods under Turkish commercial and tax law (up to 10 years)
- Marketing data: until consent is withdrawn
- Analytics and advertising cookie data: for the durations listed in our Cookie Policy
- Usage analytics data from the Apps: session recordings and event data are held by Microsoft and Google for limited periods (see Section 6.4); aggregated reports may be kept longer
Data is securely deleted or anonymised once no longer required.
10. Your Data Protection Rights
Under KVKK (Article 11) and the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time — on the Website via Cookie Settings in the footer, in the Apps under More → Usage Analytics
Requests can be sent to:
📧 [email protected]
11. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Secure servers and encryption
- Access controls
- Regular security reviews
However, no system is 100% secure.
12. Children’s Data
Bookings may only be made by adults (18+). A booking may include limited personal data of accompanying minors (passenger count, ages, child-seat requirements), provided by the responsible adult and processed solely to perform the transfer safely.
We do not knowingly collect data directly from minors.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Changes will be published on this page with an updated revision date.
14. Data Requests & Complaints
If you have any questions, concerns, or requests regarding your personal data — including requests for access, correction, or deletion — please contact us first.
This also applies to data you submitted through the Apps. The Apps do not require an account, so there is nothing to delete inside the App itself — email us and we will erase the booking or contact data we hold about you, subject to legal retention obligations.
We are committed to resolving privacy-related matters promptly and fairly.
We will respond to all valid requests in accordance with applicable data protection laws and within the legally required timeframes (under KVKK, within 30 days).
If you believe that your data protection rights have not been adequately addressed, you may lodge a complaint with the Turkish Personal Data Protection Authority (kvkk.gov.tr). If you are in the EU or the UK, you may also complain to your local supervisory authority (in the UK, the ICO).
15. Contact Us
For privacy-related questions or requests: