nextstationistanbul nextstationistanbul
TR

Privacy Policy

How Next Station Istanbul collects, stores and processes your personal data under KVKK and GDPR principles.

Last updated: June 8, 2026

1. Data Controller

This privacy policy is published by Next Station Istanbul ("we", "the company"). We act as data controller under Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) and apply GDPR-equivalent principles for visitors from the EU.

2. Data We Collect

During your booking we collect the following personal data:

  • Identity: First name, last name
  • Contact: Phone, email
  • Travel: Pickup/drop-off, date, time, passenger count, flight number, hotel name / room number
  • Operational: Meet-sign name, extra luggage request, special notes
  • Technical: IP address, cookie data, browser info (analytics)

3. Purpose of Processing

The personal data we collect is used only to:

  • Create and manage your booking
  • Connect you with the assigned driver (name + phone are shared)
  • Track flights (flight number queried against the airline API)
  • Send confirmation and change notifications via WhatsApp
  • Comply with legal obligations (TÜRSAB, invoicing, tax)
  • Anonymized analytics (Google Analytics 4)

4. Data Sharing

Your data is never sold to third parties. When operationally required it is shared only with:

  • The assigned driver (name + phone + meeting point)
  • WhatsApp Business / Meta (for message delivery)
  • Google Analytics (anonymous traffic data)
  • Legal authorities (only upon formal request)

5. Retention

Data TypeRetention Period
Booking record5 years (tax law)
WhatsApp messages1 year
Analytics data26 months
CookiesUntil cleared by the user

6. Your Rights

Under KVKK Article 11 and GDPR Articles 15-22 you have the right to:

  • Confirm whether your data is processed
  • Request information about processed data
  • Request correction or deletion
  • Object to processing
  • Claim compensation in case of damages

For all requests: hello@nextstationistanbul.com

7. Security

Your data is transmitted over SSL/TLS, our servers are password-protected, backups are encrypted. Unauthorized access attempts are logged.

8. Cookies

For cookie usage see our separate Cookie Policy.

9. Changes

This policy may be updated as needed. Material changes are announced on the site. The latest update date is shown at the top of the page.