Privacy Policy and Personal Data Notice

1. Scope of This Notice

ERYA TURİZM acts as data controller under Turkish Personal Data Protection Law no. 6698 (KVKK) and processes personal data obtained through kiralikotobusler.com within the limits set out here.

This notice covers the contact and quote forms on the site, contact made by phone and WhatsApp, and the technical records created while you browse.

2. Personal Data We Process

Quote and contact form: name, phone number, e-mail address and the trip details you share in your message (date, route, passenger count, vehicle preference).

Phone and WhatsApp: your number and the request details you share during the call.

Technical records: IP address, browser and device information, pages viewed and the time of visit. These are held in server logs.

We do not request special categories of personal data (health, religion, biometric data and the like); please do not enter such information into the form fields.

3. Purposes of Processing

To prepare a price quote for your request and get back to you.

To run the reservation and trip organisation; to enter into and perform the contract.

To meet our legal reporting obligations under the Road Transport Regulation and the U-ETDS system.

To measure service quality and to record requests and complaints.

To keep the site secure and prevent abuse.

4. Legal Grounds

Your personal data is processed under article 5 of the KVKK on the following grounds: necessity for entering into or performing a contract, compliance with our legal obligations as data controller, and our legitimate interest provided your fundamental rights and freedoms are not harmed.

Processing outside these grounds (for example commercial electronic messages) is carried out only with your explicit consent, which you may withdraw at any time.

5. Transfer of Data

Your personal data is never sold or rented to third parties for marketing purposes.

Transfers are made only in the following cases and only to the extent necessary: to authorised public bodies under our legal reporting obligations (U-ETDS, law enforcement, courts); to the insurance company we work with in performing the service; and to our domestic hosting provider that runs the site infrastructure.

Contact form messages are delivered through our own server to our own corporate mailbox.

6. Retention Periods

Quote requests are kept for at most 2 years after the quote expires.

Where a contract is concluded, the limitation and retention periods required by applicable legislation apply (10 years for commercial books and records).

Server logs are kept for at most 12 months. Once the periods expire, data is deleted, destroyed or anonymised.

7. Cookies

The technical data needed for the site to work (such as your language preference) is stored in your browser; this needs no consent and is not used to build a personal profile.

While our Google Ads campaigns are running, Google's measurement cookies may be used to record which click led to an enquiry. These cookies serve only to measure advertising performance. You can turn off Google's ad personalisation at adssettings.google.com, and you can always block or delete cookies from your browser settings.

8. Your Rights

Under article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether the data is used accordingly; know the third parties to whom it is transferred in Turkey or abroad; request correction if it is incomplete or inaccurate; request erasure or destruction; request that correction and erasure be notified to the third parties the data was transferred to; object to an adverse outcome arising solely from automated analysis; and claim compensation if you suffer loss due to unlawful processing.

You may send your requests in writing to the e-mail address above or to our company address. Your application will be concluded within 30 days at the latest.