Privacy Policy
1. General Information
The site https://aviaroyale.com is operated by TULPAR TRAVEL TURİZM ORGANİZASYON VE TİC. LTD. ŞTİ. The company prioritizes personal data protection and user privacy. This policy outlines how user information is collected, processed, stored, and safeguarded.
2. Data Collected
- Identity Data: name, surname, date of birth, passport details (for transfer services)
- Contact Data: phone number, e-mail address, physical address
- Reservation Data: flight code, date and time of flight, pick-up/drop-off points, passenger details
- Financial Data: payment card details (processed with SSL & 3D Secure), billing address
- Technical Data: IP address, device information, browser type, cookies, usage statistics
3. Purposes of Data Processing
Collected data may be used to process reservations, complete secure payments, provide customer support, improve user experience, fulfill legal obligations, prevent fraud and unauthorized transactions, and send promotional content (subject to consent).
4. Data Sharing
- Service Providers: airports, transfer companies, and contracted partners
- Legal Authorities: in case of lawful requests by official authorities
- Financial Institutions: banks and payment gateways
5. Cookies
The site uses necessary cookies for session management, analytical cookies for usage statistics, and marketing cookies for advertising optimization (subject to consent).
6. Data Retention Period
- Reservation & invoice data: 10 years
- Marketing permissions: until withdrawn by user
- Technical logs: 2 years
7. Data Security
SSL encryption, PCI DSS compliant payment infrastructure, secure servers in Turkey and the EU, and regular security audits.
8. User Rights (under GDPR & KVKK)
Users have rights to access, rectify, erase, object to processing, withdraw consent, and data portability. Submit requests to tulpar@tulpar-travel.com.
9. International Transfers
Data may be transferred abroad in line with KVKK & GDPR safeguards.
10. Changes to Policy
Updates may occur periodically; users should review regularly.
11. Competent Authorities
Turkey: Personal Data Protection Authority (KVKK); EU citizens: local Data Protection Authority.