KVKK Privacy Notice
Last updated: 8 October 2026
This notice is provided by Koş Koş Tour under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform everyone who uses our transfer, tour and booking services about how their personal data is processed.
1. Data Controller
Your personal data is processed by Koş Koş Tour (Altıntepsi Mah. Atatürk Cad. No: 134/A, Bayrampaşa / İstanbul) as the data controller.
- Email: koskostour@gmail.com
- Phone: +90 543 540 53 54
2. Categories of Personal Data
- Identity: first and last name; passenger names you provide in a booking.
- Contact: email address, phone number.
- Customer transaction: booking code, pickup and drop-off addresses, date and time, flight number, hotel name, number of passengers and bags, selected extras, notes to the driver, booking and cancellation history.
- Financial: payment method, amount, payment status; sender details for bank transfers. We do not store your card details.
- Customer account: account details if you register; the name and email shared by Google or Apple if you sign in with them.
- Transaction security: IP address, browser and device information, session logs, bot protection (Cloudflare Turnstile) result.
- Marketing: site usage and ad interaction data collected through cookies, only if you consent.
- Requests and complaints: contact form messages and review content.
3. Purposes and Legal Grounds
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Creating the booking, performing the transfer or tour, meeting you at pickup, tracking flight delays | Conclusion and performance of a contract (5/2-c) |
| Sending booking confirmations, change and cancellation notices | Performance of a contract (5/2-c) |
| Invoicing, accounting records, responding to authorised bodies | Explicitly provided by law; legal obligation (5/2-a, ç) |
| Managing your user account | Performance of a contract (5/2-c) |
| Information security, preventing fraudulent and automated (bot) activity | Legitimate interest (5/2-f) |
| Handling requests, complaints and reviews | Legitimate interest (5/2-f) |
| Establishing, exercising or defending legal claims | Art. 5/2-e |
| Measuring site usage, advertising campaigns and conversions | Explicit consent (5/1) — given through your cookie preferences and revocable at any time |
4. Method of Collection
Data is collected wholly or partly by automated means through the booking, account, contact and review forms on our website, Google/Apple sign-in, phone, email and WhatsApp correspondence, and cookies.
5. Transfers
Limited to the purposes above, your data may be shared with:
- our drivers and partner carriers who actually perform the service (name, phone, pickup/drop-off details, flight number);
- payment institutions and banks (for the payment only);
- IT service providers such as hosting, email delivery and bot protection;
- analytics and advertising providers (Google Analytics, Google Ads, Meta), only with your explicit consent;
- legally authorised public authorities and courts.
Transfers abroad: some of our providers (Google, Apple, Meta, Cloudflare) operate servers outside Türkiye. Such transfers are made under Article 9 of the KVKK — on the basis of standard contracts and other statutory safeguards where necessary for the service, and on your explicit consent for analytics and advertising cookies.
6. Retention
Booking and financial records are kept for the periods required by law (10 years for tax and commercial records). Account data is kept while your account is open, contact form records for 2 years after the request is closed, and security logs for the statutory period. Data is then deleted, destroyed or anonymised.
7. Your Rights under Article 11
You may apply to the data controller to learn whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request erasure or destruction under Article 7 and notification of these actions to recipients; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
8. How to Apply
Send your request with information verifying your identity from your registered email address to koskostour@gmail.com, or by signed letter to Altıntepsi Mah. Atatürk Cad. No: 134/A, Bayrampaşa / İstanbul. Requests are answered free of charge within 30 days at the latest; if the action requires an additional cost, the fee set by the Personal Data Protection Board may apply.
Details on cookies and how to change your preferences are in our Privacy Policy.