Privacy Policy

Vaya Hotel Transfers ("Vaya Transfer", "we", "us") provides private and shared airport transfers between Antalya Airport (AYT), Gazipaşa–Alanya Airport (GZP) and hotels and addresses in the region between Kemer and Gazipaşa. We operate this website and the Vaya Transfer mobile application.

We are the data controller for the personal data described in this policy. You can reach us at info@vaya-transfer.com.

Account data: name, e-mail address, phone number, password (stored only as a cryptographic hash), preferred language and account role (traveller, driver, agency).

Booking data: pick-up and drop-off location, date and time, number of passengers and luggage, vehicle class, flight number, notes to the driver, booking code and driver PIN, price and payment method (cash on arrival).

Driver data: for drivers and suppliers, job assignments, ride status updates, commission and payout figures, and — only while a ride is active and only if you allow it — the vehicle's GPS position, so the traveller can see the driver approaching.

Support data: the messages you send to our travel assistant and support team.

Technical data: IP address, browser and device type, and basic usage events needed to keep the service secure and working.

We do not collect card details on this website; transfers are paid in cash to the driver.

To perform our contract with you: creating your account, producing quotes, confirming bookings, dispatching a driver, sharing the driver's details and live position, and handling cancellations.

Legitimate interests: preventing fraud and abuse, securing the platform, monitoring flight arrivals so the driver waits for delayed flights, and improving our routes, pricing and fleet planning using aggregated statistics.

Legal obligation: keeping accounting, tax and transport records required by Turkish law.

Consent: device location sharing by drivers, optional marketing messages, and non-essential cookies. You can withdraw consent at any time.

We share only the data needed for your ride to happen: the assigned driver or partner supplier receives your name, phone number, pick-up and drop-off details, flight number and passenger count. Travel agencies see the bookings they made themselves.

We also use service providers acting on our instructions: cloud hosting and database providers, e-mail delivery, flight-status data providers and the AI provider that powers our travel assistant. We never sell your personal data.

Some of these providers process data outside Turkey and the EU/EEA; where that happens we rely on adequacy decisions or standard contractual clauses.

Booking and invoicing records are kept for 10 years to meet Turkish accounting and tax requirements. Account data is kept while your account exists and for up to 12 months after you ask us to delete it, so we can resolve disputes. Live GPS positions are deleted shortly after the ride is completed. Support conversations are kept for up to 24 months.

Under the Turkish Personal Data Protection Law (KVKK No. 6698) and, where it applies, the EU GDPR, you may request access to your data, correction of inaccurate data, deletion, restriction of or objection to processing, a portable copy of your data, and withdrawal of consent. Write to info@vaya-transfer.com and we will answer within 30 days. You may also complain to the Turkish Data Protection Authority (KVKK) or your local supervisory authority.

We use browser local storage to keep you signed in (an authentication token), to remember your language choice and to keep your support conversation together. These are strictly necessary for the site to work. We do not use advertising cookies.

Traffic is encrypted with HTTPS, passwords are stored only as salted hashes, access to booking data is restricted by role (traveller, driver, agency, administrator) and driver contact details are revealed only for the ride they are assigned to.

Our service is not directed at children under 16. Children travel as passengers on a booking made by an adult; we only need the number and age group of passengers so we can provide the correct child seats.

If we change this policy we will update the date above and, for significant changes, notify you by e-mail or in the app before the change takes effect.