Privacy Policy

Privacy Policy

1. General Information
   This website https://fasttosky.com (“Site”) is operated by TFT ORG YAT TUR TİC LTD ŞTİ (“Company”).
   Our Company attaches great importance to the protection of personal data and is committed to safeguarding the privacy of users. This Privacy Policy explains how the personal data provided by users during visits to our website and use of our services are collected, processed, stored and protected.

2. Data Collected
   The following categories of personal data may be collected:

• Identity Information: Name, surname, date of birth, passport information (especially for transfer and airport services).

• Contact Information: Telephone number, e-mail address, residential address.

• Reservation Information: Flight code, flight date and time, transfer start/end points, passenger information.

• Financial Information: Payment card details (via 3D Secure & SSL protected infrastructure), billing address.

• Technical Data: IP address, device type, browser information, cookie data, usage statistics.

3. Purposes of Data Use
   The personal data collected is used for the following purposes:

• To carry out reservation processes,

• To complete payment transactions securely,

• To provide customer support and ensure service quality,

• To improve user experience,

• To fulfil legal obligations,

• To prevent fraud and unauthorized transactions,

• To send campaigns, newsletters and announcements (only with user consent).

4. Data Sharing
   Personal data may be shared with third parties only in the following situations:

• Service Providers: For the purpose of fulfilling the reservation, with airport authorities, CIP/Fast Track/Lounge operators, transfer companies and contracted business partners.

• Legal Obligations: In response to official authorities’ legal requests.

• Financial Institutions: With banks and payment infrastructure providers (e.g., VakıfBank VPOS, iyzico, Stripe etc.), only for the purpose of executing payment transactions.

5. Cookies Policy
   Our Site uses cookies to improve user experience.

• Mandatory Cookies: Required for session management and reservation processing.

• Analytical Cookies: To analyse user behaviour (e.g., Google Analytics).

• Marketing Cookies: For campaign and advertising optimisation (only if consent has been given).
  Users can refuse cookies via browser settings; however, some functionalities may not work properly in that case.

6. Data Retention Period

• Reservation and invoice information: 10 years (by virtue of Turkish Commercial Code and Tax Procedure Law).

• Marketing consents: Until the user withdraws.

• Technical log records: 2 years (under Law No. 5651).

7. Data Security

• All communications are encrypted via SSL certificate.

• Payment transactions are carried out in compliance with PCI DSS standards.

• Data is stored securely on servers located in Turkey or in EU-compatible jurisdictions.

• Regular security tests are performed to guard against unauthorized access, loss or misuse.

8. User Rights
   Under the KVKK (Turkish Data Protection Law) and GDPR (General Data Protection Regulation), users have the following rights:

• To learn their personal data,

• To request correction of inaccurate or incomplete data,

• To request deletion of their data,

• To object to processing,

• To withdraw their clear consent,

• To exercise data portability (transfer to another data controller).
  Requests may be sent to: privacy@fasttosky.com or info@fasttosky.com.

9. International Data Transfers
   In some service scenarios (e.g., overseas airport reservations or transfers), data may be transferred abroad.
   Such transfer is carried out under the framework of KVKK Article 9 and GDPR Articles 45–49, with required security safeguards in place.

10. Policy Changes
    TFT ORG YAT TUR TİC LTD ŞTİ may update this Privacy Policy from time to time.
    Users should regularly check the policy to view the most current version.
    Any change becomes effective as soon as it is published on https://fasttosky.com.

11. Competent Authorities
    The competent bodies for implementation of this Privacy Agreement are:

• Turkey: The Personal Data Protection Authority (KVKK)

• For EU citizens: The Data Protection Authority (DPA) of the relevant country