Privacy Policy

Introduction

As Hevra Turizm (trade name: The History Travel / VIP Transfer Istanbul, TÜRSAB Certificate No: A-7377), we value the privacy of our visitors and customers. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services.

Data Controller: Hevra Turizm — Alemdar Mah. Ticarethane Sok. No:5/3 34110 Fatih/İSTANBUL

For Turkish users, the KVKK Disclosure Text also applies.

Data We Collect

Personal information is collected only when obtained directly and explicitly from you:

• Contact information: Name, phone number, email address
• Reservation information: Transfer date, departure/arrival point, number of passengers, flight number
• Chatbot messages: Conversation content conducted for support purposes
• Newsletter subscription: Email address and consent information

Our site does not use cookie-based tracking or advertising technologies. There are no analytic cookies.

How We Use the Data

The data we collect is used solely for the following purposes:

• Planning and providing transfer services
• Sending reservation confirmations via WhatsApp
• Providing support through the chatbot
• Sending newsletters if you have requested subscription
• Fulfilling legal obligations

We do not use your data for marketing, profiling, or sale to third parties.

Data Sharing

Your data is shared only when necessary for service provision:

• WhatsApp Business (Meta): Reservation communication
• OpenAI: Chatbot artificial intelligence infrastructure (as data processor)
• Email service provider: Newsletter dispatch
• Authorized authorities: Only in cases of legal obligation

International Data Transfers

The site operates in 9 languages and serves international users. Within the service infrastructure, some data may be transferred to servers outside Turkey (EU, USA). These transfers are conducted under appropriate safeguards in accordance with KVKK and EU GDPR.

Your Rights Under GDPR

If you reside in the European Economic Area, you have the following rights under GDPR:

• Right to access your data
• Right to request correction of your data
• Right to request deletion of your data ("right to be forgotten")
• Right to request restriction of data processing
• Right to data portability
• Right to object

To exercise these rights, you may contact [email protected]. Your request will be responded to within 30 days.

Data Security

Industry-standard technical and administrative security measures are implemented to protect your personal data. These measures include HTTPS enforcement, SMTP encryption, and access control.

Children’s Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18.

Policy Updates

This policy may be updated from time to time. Significant changes will be published on this page.

Contact: [email protected]

This text was last updated in August 2026.