Privacy Policy
Last updated: 30.09.2026
This notice explains how your personal data is processed when you use our website and book a transfer, in line with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 ("KVKK").
1. Data controller
Your personal data is processed by DriveOnPort as data controller. Address: Halkapınar Mah. 1366 Sk. No: 13/A, Konak/İzmir. E-mail: [email protected]. Phone: +90 551 500 21 95.
2. Personal data we process
- Identity and contact: first name, last name, e-mail address, phone number.
- Booking and travel: pick-up and drop-off point, hotel name or address, transfer date and time, number of passengers, flight number, chosen vehicle and extras, your notes.
- Contact form: the message you send and your contact details.
- Security: your IP address at the time of booking, the form security token and the session cookie.
3. Purposes
- Creating and confirming your booking and carrying out your transfer.
- Tracking your flight so your driver meets you at the right time.
- Contacting you about your booking and answering your requests and complaints.
- Meeting our legal obligations such as accounting and tax.
- Keeping the website secure and preventing misuse and fake bookings.
4. Legal bases
We process your data on the following legal bases: performance of the transfer contract (GDPR Art. 6(1)(b); KVKK Art. 5/2(c)); compliance with legal obligations (Art. 6(1)(c); KVKK Art. 5/2(ç)); and our legitimate interests, such as website security, provided they do not override your rights (Art. 6(1)(f); KVKK Art. 5/2(f)).
We do not send you marketing messages; if we ever wish to, we will ask for your consent first.
5. Sharing your data
- With the driver and vehicle operator carrying out your transfer: only what is needed for the transfer (name, phone, flight, pick-up and drop-off, date and time, passengers, notes).
- With our hosting and e-mail providers: to run the website and send booking e-mails.
- With competent public authorities: only where required by law and upon request.
We do not sell your personal data or share it for advertising. Where our service providers' servers are located abroad, transfers are made with the safeguards required by GDPR and KVKK Art. 9.
6. External services
Some content is loaded from third-party services for the pages to work, which passes your IP address to them: the map library (Cloudflare cdnjs), map tiles (OpenStreetMap), route and distance calculation (OSRM) and address search (Photon/Komoot). The text you type into the address search is sent to that service. These services are subject to their own privacy policies.
7. Cookies and browser storage
Our website uses only one strictly necessary session cookie (TRFSESSID) for form security and the booking steps; it is deleted when you close your browser. Your light/dark theme choice is stored only in your own browser. We do not use analytics or advertising cookies.
8. Retention
Booking and invoice records are kept for the periods required by commercial and tax law (generally 10 years). Contact form messages are kept for up to 2 years after your request has been resolved. After that, the data is deleted, destroyed or anonymised.
9. Security
We protect your data with technical and organisational measures such as encrypted connections (HTTPS), access control, form security tokens and rate limits.
10. Your rights
You have the right to request access to your data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Under KVKK Art. 11 you may also ask to whom your data has been transferred, request that corrections or deletions are notified to them, object to decisions made solely by automated means, and claim compensation for damage caused by unlawful processing.
11. How to contact us
Send your request by e-mail to [email protected] or in writing to Halkapınar Mah. 1366 Sk. No: 13/A, Konak/İzmir. We will respond free of charge within 30 days. You also have the right to lodge a complaint with a supervisory authority, such as the data protection authority in your country of residence or the Turkish Personal Data Protection Authority (KVKK).