Privacy Policy
How Next Station Istanbul collects, stores and processes your personal data under KVKK and GDPR principles.
Last updated: June 8, 2026
1. Data Controller
This privacy policy is published by Next Station Istanbul ("we", "the company"). We act as data controller under Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) and apply GDPR-equivalent principles for visitors from the EU.
2. Data We Collect
During your booking we collect the following personal data:
- Identity: First name, last name
- Contact: Phone, email
- Travel: Pickup/drop-off, date, time, passenger count, flight number, hotel name / room number
- Operational: Meet-sign name, extra luggage request, special notes
- Technical: IP address, cookie data, browser info (analytics)
3. Purpose of Processing
The personal data we collect is used only to:
- Create and manage your booking
- Connect you with the assigned driver (name + phone are shared)
- Track flights (flight number queried against the airline API)
- Send confirmation and change notifications via WhatsApp
- Comply with legal obligations (TÜRSAB, invoicing, tax)
- Anonymized analytics (Google Analytics 4)
4. Data Sharing
Your data is never sold to third parties. When operationally required it is shared only with:
- The assigned driver (name + phone + meeting point)
- WhatsApp Business / Meta (for message delivery)
- Google Analytics (anonymous traffic data)
- Legal authorities (only upon formal request)
5. Retention
| Data Type | Retention Period |
|---|---|
| Booking record | 5 years (tax law) |
| WhatsApp messages | 1 year |
| Analytics data | 26 months |
| Cookies | Until cleared by the user |
6. Your Rights
Under KVKK Article 11 and GDPR Articles 15-22 you have the right to:
- Confirm whether your data is processed
- Request information about processed data
- Request correction or deletion
- Object to processing
- Claim compensation in case of damages
For all requests: hello@nextstationistanbul.com
7. Security
Your data is transmitted over SSL/TLS, our servers are password-protected, backups are encrypted. Unauthorized access attempts are logged.
8. Cookies
For cookie usage see our separate Cookie Policy.
9. Changes
This policy may be updated as needed. Material changes are announced on the site. The latest update date is shown at the top of the page.