Privacy Policy

Privacy Policy

1. General Information
https://aviaroyale.com (“Site”) is operated by TULPAR TRAVEL TURİZM ORGANİZASYON VE TİC. LTD. ŞTİ.
Our company values the protection of personal data and is committed to safeguarding user privacy. This Privacy Policy explains how information provided by users when visiting our website and using our services is collected, processed, stored, and protected.

2. Data Collected

• Identity Data: Name, surname, date of birth, passport details (for transfer services).

• Contact Data: Phone number, e-mail address, physical address.

• Reservation Data: Flight code, date and time of flight, pick-up/drop-off points, passenger details.

• Financial Data: Payment card details (processed with SSL & 3D Secure), billing address.

• Technical Data: IP address, device information, browser type, cookies, usage statistics.

3. Purposes of Data Processing
Collected data may be used to:

• Process reservations,

• Complete secure payments,

• Provide customer support,

• Improve user experience,

• Fulfill legal obligations,

• Prevent fraud and unauthorized transactions,

• Send promotional content (subject to consent).

4. Data Sharing

• Service Providers: Airports, transfer companies, and contracted partners.

• Legal Authorities: In case of lawful requests by official authorities.

• Financial Institutions: Banks and payment gateways (e.g., VakıfBank VPOS, iyzico, Stripe).

5. Cookies
Our site uses cookies to enhance user experience:

• Necessary Cookies: Session management and reservation process.

• Analytical Cookies: Usage statistics (e.g., Google Analytics).

• Marketing Cookies: Advertising optimization (subject to consent).
  Users may disable cookies in their browser settings, but some features may not work properly.

6. Data Retention Period

• Reservation & invoice data: 10 years (in line with local laws).

• Marketing permissions: Until withdrawn by the user.

• Technical logs: 2 years (in line with Law 5651 in Turkey).

7. Data Security

• SSL encryption for all communication,

• PCI DSS compliant payment infrastructure,

• Data stored on secure servers in Turkey and EU,

• Regular security audits and tests.

8. User Rights (under GDPR & KVKK)

• Right to access data,

• Right to rectification,

• Right to erasure (“right to be forgotten”),

• Right to object to processing,

• Right to withdraw consent,

• Right to data portability.

Requests: tulpar@tulpar-travel.com

9. International Transfers
For international services (e.g., foreign airport bookings), data may be transferred abroad in line with KVKK & GDPR safeguards.

10. Changes to Policy
We may update this Privacy Policy periodically. Users are advised to check it regularly.

11. Competent Authorities

• Turkey: Personal Data Protection Authority (KVKK).

• EU citizens: Local Data Protection Authority (DPA).