KVKK Personal Data Notice

Controller and scope

The controller for VOYALEX is Voyalex Travel Ltd. Şti. Contact location: Sakarya, Türkiye; email: info@voyalex.com; support phone: +90 532 402 60 20. The location is not a complete address for legal service. This notice covers visits, searches, accounts and support. Employment and business-partner processes need their own notices.

Collection and categories

Data is collected electronically through search/account screens, browser storage, technical logs, support correspondence and Google sign-in if enabled. Sellers may provide commercial referral/conversion information.

• Identity/contact: account name, email and Google identifier
• Transactions/preferences: search parameters, saved items, recent activity and notification requests
• Technical/security: IP, device/browser information, sessions, access logs and pseudonymous event identifiers
• Support: submitted explanations and necessary attachments; sensitive data is not requested

Purposes and legal grounds

Each ground applies only where its requirements are actually met. This notice is not consent.

• Necessary search, account, saved-item and requested notification services: contract formation/performance, Article 5(2)(c).
• Necessary and proportionate security/abuse prevention, without harming fundamental rights: legitimate interests, Article 5(2)(f).
• Required legal records: Article 5(2)(ç) where a legal obligation applies; establishment/exercise/protection of rights: Article 5(2)(e) where necessary.
• Optional processing without another valid ground: prior, specific informed explicit consent, Article 5(1). Marketing and optional tracking require separate assessment.

Recipients, transfers and retention

Necessary search data may go to search providers; data needed for operations to hosting, email, authentication and support providers; legally required data to competent authorities and advisers for legal claims. Referral/conversion records support relevant commercial reconciliation. Transfers must be purpose-limited. International transfers require Article 9 conditions; consent is not a blanket solution for regular transfers. Ask for actual recipients, countries and safeguards. Retention is limited to purposes and applicable obligations; disposal is assessed when grounds cease.

Your Article 11 rights

You may apply to the controller to exercise these rights:

• Learn whether your data is processed and request information
• Learn the purpose and whether use matches it
• Know recipients in Türkiye and abroad
• Request correction of incomplete or inaccurate data
• Request erasure or destruction when statutory conditions are met
• Request notification of correction/disposal to recipients
• Object to an adverse result solely from automated analysis
• Seek compensation for unlawful processing

Requests and responses

Contact info@voyalex.com with “KVKK Request”. For email under the Turkish application rules, use your previously provided, system-registered address. Confirm the full postal address for written applications and channels for registered electronic mail, secure e-signature or mobile signature. Phone support does not replace a formal application. Include the required name, identity details, service address, available contact details, request and necessary evidence; sign a written application. Verification must be necessary and proportionate. Requests are answered within 30 days, normally without charge; statutory tariffs may apply to additional costs. Your right to complain to the Board after applying to the controller remains available.