Privacy Policy

1. Who We Are

Izmir Airport Transfer is a private airport transfer service operated by Spinoza Travel Agency, a TURSAB-licensed travel agency (No. 8445) based in Kusadasi, Aydin, Turkey.

For the purposes of this Privacy Policy, we are the data controller — meaning we are responsible for deciding how and why your personal data is processed.

Business address: Ege Mah. 419. Sokak Efes Evleri Sitesi 3. Blok No:11, Kusadasi, Aydin, Turkey
Email: [email protected]
WhatsApp / Phone: +90 507 579 19 88

2. Data We Collect

We only collect data that is necessary to provide you with a transfer service. We do not collect data for marketing purposes.

When you make a booking, we collect:

• Lead passenger full name
• Email address
• Phone number
• Flight number and arrival date/time
• Number of passengers
• Names of all passengers travelling
• Pickup and drop-off destination
• Vehicle type preference
• Any special requests (e.g. child seat requirements, notes)

When you visit our website, the following data may be collected automatically:

• Pages visited, time spent on pages and general usage patterns (via Google Analytics)
• Device type, browser type and operating system
• General geographic location (country/city level — we do not collect or store your precise IP address)

When you contact us via WhatsApp or email, we collect the content of your messages and your contact details as provided.

3. How We Collect Data

• Booking form — when you submit a transfer booking on our website
• Contact form — when you send us a message via our contact page
• WhatsApp and email — when you contact us directly
• Google Analytics — automatically when you browse our website, subject to your cookie consent

4. Why We Collect Data & Legal Basis

We collect and process your personal data for the following purposes:

• To fulfil your booking — processing your transfer request, confirming your booking, coordinating your driver and completing the transfer. Legal basis: performance of a contract.
• To communicate with you — sending your booking confirmation, pre-transfer confirmation messages and responding to your enquiries. Legal basis: performance of a contract and legitimate interest.
• To share with your driver — providing your name, contact number and destination to the driver or subcontracted partner responsible for your transfer. Legal basis: performance of a contract.
• To maintain business records — keeping records of completed transfers as required by Turkish commercial law. Legal basis: legal obligation.
• To improve our website — using anonymised analytics data to understand how visitors use our website and improve the user experience. Legal basis: legitimate interest.

We do not use your personal data for marketing, profiling or automated decision-making.

5. Who We Share Data With

We do not sell, rent or trade your personal data to any third party.

We share limited personal data only in the following circumstances:

• Your driver — we share your name, phone number and destination with the driver assigned to your transfer. If your transfer is handled by a trusted partner driver, the same information is shared with them. All partner drivers are bound by confidentiality.
• Legal requirements — if required to do so by law, regulation or a valid order from a competent authority.

We do not share your data with any advertising networks, data brokers, social media platforms or other third parties beyond those listed above.

6. Third Party Services

Our website uses the following third party services which may process data about your visit:

• Google Maps API — used to power the destination autocomplete in our booking form. When you type a destination, your input is sent to Google's servers to return location suggestions. Google's privacy policy applies: policies.google.com/privacy
• Google Fonts — fonts are loaded from Google's servers when you visit our website. This may log your visit. Google's privacy policy applies.
• Google Analytics — we use Google Analytics to understand how visitors use our website. This uses cookies to collect anonymised data about pages visited, time on site and general location (country/city level). We do not enable IP address collection. You can opt out of Google Analytics tracking at: tools.google.com/dlpage/gaoptout

7. Cookies

Cookies are small text files stored on your device when you visit a website. Our website uses the following types of cookies:

• Essential cookies — necessary for the website to function correctly (e.g. maintaining your booking form session). These do not require consent.
• Analytics cookies — used by Google Analytics to collect anonymised data about how you use our website. These are only set with your consent.
• Third party cookies — Google Maps and Google Fonts may set cookies when loading their services on our pages.

When you first visit our website, you will be asked to accept or decline non-essential cookies via our cookie consent banner. You can change your preferences at any time.

You can also manage cookies directly through your browser settings. Note that disabling certain cookies may affect the functionality of the booking form.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes described in this policy.

• Booking records — retained for 5 years from the date of your transfer, in accordance with Turkish commercial law (Turkish Commercial Code, Article 82). After this period, records are securely deleted.
• Contact and WhatsApp messages — retained for as long as reasonably necessary to resolve your enquiry, and then deleted.
• Analytics data — retained by Google Analytics in accordance with Google's data retention settings (typically 14 months by default).

9. How We Protect Your Data

We take the security of your personal data seriously. The following measures are in place to protect your information:

• Our website uses HTTPS encryption for all data transmitted between your browser and our server
• Booking records are stored in log files located outside the public web directory on our server, inaccessible to the public
• Access to booking records is restricted to authorised personnel only via a password-protected dashboard
• We do not store payment card details — all payments are made in cash on arrival

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.

10. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data. We respect these rights for all our customers regardless of nationality:

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days. We will never charge a fee for handling data rights requests.

11. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children under 18 independently — all bookings must be made by an adult aged 18 or over. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we use, or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

13. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how we handle your data, please contact us:

• WhatsApp / Phone: +90 507 579 19 88
• Email: [email protected]
• Address: Spinoza Travel Agency, Ege Mah. 419. Sokak Efes Evleri Sitesi 3. Blok No:11, Kusadasi, Aydin, Turkey

We will acknowledge all data requests within 48 hours and respond fully within 30 days.

If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.