1. Introduction
Agarhon Travel Agency (“Company”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with:
European Union General Data Protection Regulation (GDPR)
Turkish Personal Data Protection Law No. 6698 (KVKK)
By using our website and services, you agree to the practices described in this policy.
2. Data Controller
The data controller responsible for processing personal data is:
Company Name: Agarhon Travel Agency
Address: [Company Address]
Email: [Email Address]
Phone: [Phone Number]
For all privacy-related requests, users may contact us via the contact information above.
3. Legal Basis for Processing Personal Data
We process personal data based on the following legal grounds:
• User consent
• Performance of a contract (booking and service delivery)
• Compliance with legal obligations
• Legitimate business interests (service improvement and security)
4. Personal Data We Collect
We may collect and process the following personal data:
• Name and surname
• Email address
• Phone number
• Reservation and travel details
• Payment information (if applicable)
• IP address and browser data
• Device and technical information
We only collect data necessary to provide our services.
5. Purpose of Processing Personal Data
Personal data is processed for the following purposes:
• Providing airport transfer and travel services
• Managing reservations and bookings
• Customer communication and support
• Improving website functionality and service quality
• Sending newsletters or marketing communication (with consent)
• Compliance with legal and regulatory obligations
• Fraud prevention and security monitoring
6. Data Retention Period
Personal data is stored only for the period necessary to fulfill service purposes and legal obligations.
• Customer and booking data: up to 10 years in accordance with tax and commercial regulations
• Marketing consent data: until consent is withdrawn
• Technical logs and analytics data: up to 24 months
After the retention period expires, personal data is securely deleted, destroyed, or anonymized
7. Data Security Measures
We implement appropriate technical and organizational security measures to protect personal data, including:
• SSL encryption for data transmission
• Secure server infrastructure
• Restricted access to personal data
• Regular security monitoring
• Protection against unauthorized access, loss, or misuse
Despite these measures, internet-based data transmission cannot be guaranteed to be completely secure.
8. User Rights Under GDPR and KVKK
Users have the following rights:
• Right to access personal data
• Right to correct inaccurate data
• Right to request deletion (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to file a complaint with supervisory authorities
Requests may be submitted using the contact information provided.
9. Cookies and Tracking Technologies
Our website uses cookies to improve functionality and user experience.
Cookies may include:
• Essential cookies for website operation
• Analytics cookies
• Marketing cookies (if applicable)
For analytics purposes, we may use services such as Google Analytics to understand website usage and improve performance.
Users may manage or disable cookies through browser settings.
10. Processing of Technical Data
When visiting our website, technical data may be automatically collected, including:
• IP address
• Visit time
• Browser type
• Operating system
• Pages visited
This data is used for system security and website functionality.
11. Third-Party Services
We may use third-party service providers for:
• Website analytics
• Payment processing
• Booking management
These providers process data according to their own privacy policies.
We do not sell personal data to third parties.
12. International Data Transfer
Where necessary, personal data may be transferred outside the European Economic Area or Turkey. Such transfers are protected by appropriate safeguards in accordance with GDPR and KVKK requirements.
13. Children’s Personal Data
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without parental consent.
14. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices.
15. Changes to This Privacy Policy
We reserve the right to update this policy at any time. Updates will be published on this page.
Comments