Privacy and Personal Data

Scope and operator

This notice covers VOYALEX visitor and traveler-account services operated by Voyalex Travel Ltd. Şti., contact location Sakarya, Türkiye, email info@voyalex.com. External sellers, payment systems and booking services follow their own data practices.

Account, search and activity data

Searches process destinations, dates, traveler counts, any entered child ages, market and currency. Accounts store a name, email, password hash and account status. If Google sign-in is enabled, authentication may provide a Google identifier, name and email, never your Google password.

• Account preferences, favorites and saved comparisons
• Recent journeys and viewed hotels while signed in
• Requested price alerts and notification details
• Support messages and technical/security logs, which may contain IP and browser information

Services and referral measurement

Data supports searches, account services, saved items, requested notifications, support and security. Referral events and any seller-reported conversions may be recorded for commercial reconciliation and abuse prevention. Hashed identifiers are not necessarily anonymous. This notice does not grant marketing permission.

Service providers and external content

Necessary search parameters may be sent to search providers. Hosting, email, authentication and technical support providers may access data needed for their role. Loading external maps, fonts or images may disclose IP/browser information. A seller’s data practices apply when its site opens. International transfers require the applicable legal conditions; you can request details of the safeguards used.

Retention, security and choices

Retention must be limited to service purposes and applicable legal requirements. Erasure, destruction or anonymisation is assessed when processing grounds cease; legal disputes or mandatory records may prevent immediate deletion. Logging out does not delete your account or history. Ask us for category-specific retention details or account deletion.

• Appropriate access controls, password hashing, audit and security measures are used; absolute security is not guaranteed.
• Manage preferences and remove saved items in available account screens.
• Consult the Cookies page for browser storage.
• Any legally required permission for optional tracking must be obtained separately before processing; a notice does not replace that mechanism.

Rights, children and updates

The KVKK notice explains Turkish data rights and requests. Additional GDPR rights remain available where its territorial and other applicability conditions are met. Accounts are intended for adults with contractual capacity. Enter child ages only as necessary for travel searches; do not send sensitive personal data in support messages. Changes require updated information and, where necessary, new permission.