Rechtliches

KVKK-Hinweis (Datenschutz)

Zuletzt aktualisiert: 2026-09-20

Diese Seite wird auf Türkisch und Englisch veröffentlicht; der englische Text wird angezeigt.

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data are processed as described below through the site istanbulvitotransfer.com by Book Grup Organizasyon Hizmetleri Sanayi ve Ticaret Limited Şirketi, Limonluk Mah. 2453 Sokak, No: 3/C, Yenişehir / Mersin (the “Platform”) acting as data controller. Email: [email protected]

Once your booking request has been passed on, the vehicle owner who uses these data on their own behalf is a separate data controller in respect of that use.

2. Personal data processed

  • Identity: full name.
  • Contact: phone number, email address.
  • Booking request (passengers): route, date and time, number of passengers, your message, language preference, status of the request.
  • Membership (vehicle owners): password digest (hash), language preference, email verification and consent times; vehicle details (model, year, trim, capacity, location, prices, photos) and the optional plate number.
  • Transaction security: IP address, access date and time, browser information, session and single-use link records, request counts.
  • Listing statistics: the total number of views of a listing page per day. This figure contains no personal data; the visitor’s IP address or identity is not recorded.
  • Membership and payment (vehicle owners): plan (Vito Yayın / Vito Pro), billing period (yearly / monthly), membership start and end dates, free-trial dates, payment amount, reference code, payment status and, if provided, invoicing details (company title, tax/ID number, address).
  • Trial history: to prevent abuse of the free trial, an irreversible digest of your phone number produced with a secret key (not the number itself) is kept for 24 months from the start of the trial; it is retained until that period expires even if you delete your account. Legal basis: legitimate interest (KVKK Article 5(2)(f)).
  • Administrative records: listing approval, rejection, removal and account suspension actions, together with their reasons.

3. Purposes of processing

  • Passing booking requests to the relevant vehicle owner and enabling the parties to get in touch.
  • Opening and managing the membership account; email verification and password reset.
  • Publishing and reviewing listings and displaying listing information (short name, phone, location, languages, vehicle details, prices, photos) publicly.
  • Sending transactional notifications (verification, password, listing approval/rejection, request notification).
  • Ensuring the security of the Site and preventing misuse and automated attacks.
  • Providing the membership plans, verifying payments and issuing invoices; fulfilling commercial book and document retention obligations.
  • Preventing abuse of the free-trial entitlement.
  • Showing the video on Vito Pro listings (the video is loaded from YouTube only when you press play).
  • Answering your questions and fulfilling legal obligations.

4. Legal bases (KVKK Article 5)

  • Booking requests, membership and listing operations: directly related to the establishment or performance of a contract (Article 5(2)(c)).
  • Security and administrative records, and cookieless visit counting that does not identify individuals (Cloudflare Web Analytics): the legitimate interest of the data controller, provided that it does not harm your fundamental rights and freedoms (Article 5(2)(f)).
  • Membership plan, payment and invoicing operations: directly related to the establishment or performance of a contract (Article 5(2)(c)); and, as regards the retention of payment, invoice and commercial book records, fulfilment of a legal obligation (Article 5(2)(ç)).
  • Trial history (the keyed, irreversible digest of the phone number): the legitimate interest of the data controller, provided that it does not harm your fundamental rights and freedoms (Article 5(2)(f)).
  • Meeting legal requests and keeping records: fulfilment of a legal obligation (Article 5(2)(ç)).
  • Visit statistics (Google Analytics cookies): your explicit consent (Article 5(1)). You give it in the cookie banner and can withdraw it at any time via the “Cookie preferences” link at the bottom of the page.
  • Ad measurement (Meta Pixel and Conversions API; page viewed, contact button click, form submission, digest of email and phone in forms): the legitimate interest of the data controller (Article 5(2)(f)).
  • In all other cases, your explicit consent (Article 5(1)).

5. Transfers

  • Vehicle owners: your booking request (name, phone, email and request details) is passed to the owner of the listing you selected through the member panel and by email.
  • Passengers: the owner’s short name and phone number are passed to the passenger who submitted the request; listing information is already public.
  • Service providers (abroad): Cloudflare for hosting, database, photo storage and cookieless visit counting; Resend for transactional email delivery; Meta Platforms for Facebook and Instagram ad measurement (Meta Pixel and Conversions API: page viewed, event type, IP address, browser information, _fbp cookie identifier, digest of email and phone in forms, and in membership payments the package, period, amount, payment number and a digest of the member ID); Google Fonts for fonts; Google Analytics for visit statistics, only with your explicit consent (cookie identifier, pages viewed, approximate location, device and browser information). The servers are located abroad; transfers abroad are made in accordance with the conditions set out in Article 9 of the KVKK (countries with adequate protection, appropriate safeguards, or the exceptions in Article 9(6)).
  • YouTube (Google): the video on a Vito Pro listing is loaded from youtube-nocookie.com only when you press play; at that moment your IP address and device information are transmitted to Google. If you do not play the video, no request reaches Google.
  • Banks: when you pay for your membership by bank transfer, your full name and reference code appear in our bank account movements; for that transaction banks are separate data controllers.
  • Competent authorities: courts and public authorities in the case of a legal request.

6. Method of collection

Your data are collected electronically, by automated or partly automated means: directly to our server through the forms on the Site (booking request, registration, listing creation, account settings); by email through the contact and quote forms; and through server and session logs.

7. Retention periods

Booking requests for at most 12 months; membership data for as long as the account remains open (anonymised upon deletion); membership and payment records (plan, period, amount, reference code, invoicing details) for 10 years under Article 82 of the Turkish Commercial Code; trial history (the keyed digest of the phone number) for 24 months from the start of the trial; session records for at most 30 days; email delivery records for 90 days; listing view counters for 400 days; email correspondence for at most 2 years. Membership and payment records and the trial history are kept until those periods expire even if you delete your account. Details are set out in the Privacy Policy.

8. Your rights (KVKK Article 11)

  • To learn whether your personal data are processed and, if so, to request information about them.
  • To learn the purpose of processing and whether the data are used in accordance with that purpose.
  • To know the third parties to whom the data are transferred at home or abroad.
  • To request correction if the data are incomplete or inaccurate and, where the conditions are met, their erasure or destruction.
  • To request that correction, erasure and destruction operations be notified to the third parties to whom the data were transferred.
  • To object to a result reached against you through analysis carried out exclusively by automated systems.
  • To claim compensation if you suffer damage due to unlawful processing.

9. Applications

You may submit requests regarding your rights in writing to Limonluk Mah. 2453 Sokak, No: 3/C, Yenişehir / Mersin in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or by email to [email protected]. Members can correct their name, phone and language details in the account settings and delete their account. Applications are concluded within 30 days at the latest.