Privacy and Personal Data Notice

Controller and contact

Balance Yolcu Taşımacılığı acts as controller for customer and booking processes on this site, represented by Şükrü Kocaoğlu. Address: Belek, 118 sokak, 07500 Serik/Antalya, Türkiye. Email: info@balanceholidayservice.com. Phone: +90 507 869 26 63. This is an information notice, not marketing consent.

Data and purposes

Forms collect your name, email, phone, passenger numbers, date, flight, hotel, route, address or a map point you choose. Child numbers and relevant age bands may be used for price and capacity. An account uses email verification. We keep booking and payment references, amount, currency, status and accepted contract records. IP, session, security and error records support service operation and abuse prevention. Do not send unnecessary identity documents, health information or card data.

Collection and legal grounds

Data comes from forms, email, phone, WhatsApp, payment notifications and technical records. Depending on the process, grounds include forming/performing a contract, legal obligations, establishing/exercising/protecting rights and proportionate legitimate interests that do not override fundamental rights. If a separate activity requires explicit consent, it is requested separately and voluntarily. Booking and pickup messages are service communications, not conditional on advertising consent.

Recipients and transfers

Necessary data may be shared with the driver/operations staff providing the service, hosting and email providers, the payment provider and authorities where legally required. Card data is entered directly with the payment provider. External maps, Google map links, font servers and WhatsApp may receive technical data when used; their own privacy terms also apply. Any international transfer must observe the applicable safeguards and requirements of Turkish data protection law (KVKK); this notice alone is not explicit consent.

Retention, security and cookies

Records are retained for necessary service, accounting/tax, dispute and security purposes and applicable legal periods. They are deleted, destroyed or anonymised when no longer justified. Access controls and secure connections are used. Essential cookies/local storage support sessions, booking ownership, language and currency preferences. Sign-in codes are short-lived and are not stored as plaintext in the database. If optional advertising or analytics tracking is introduced, the required choice/consent mechanism must be provided.

Your rights

Under KVKK Article 11, you may ask whether data is processed, request information on purpose and recipients, seek correction or qualifying deletion/destruction and notification to recipients, object to exclusively automated adverse assessment, and seek redress for damage. Submit requests to the contact address or a legally recognised electronic channel with information needed to verify your identity. Requests are concluded within 30 days, subject to any applicable official fee tariff. Limited additional verification may be needed for security. Mandatory rights under other applicable law remain unaffected.