Data Protection Notice
Protection and Processing of Personal Data
Secure Data Processing
Your data is protected with 256-bit SSL encryption
Transparent Process
You know what data is processed, why, and how
Your Rights Are Protected
You have full control over your data
Introduction
AILYDIAN Holiday, acting as the data controller, is committed to the highest standards for the protection and security of your personal data in accordance with applicable data protection legislation, including in particular the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European General Data Protection Regulation ("GDPR"). The purpose of this notice is to inform you about the purposes for which your personal data is processed, to whom it may be transferred, our processing methods, and your legal rights.
This Notice covers the processing of your personal data when using the services offered through the AILYDIAN Holiday website, mobile applications, and all our digital platforms.
Data Controller
Company Name: AILYDIAN Holiday Travel and Tourism Ltd.
Address: Atatürk Bulvarı No: 456, Alanya Merkez, 07400 Alanya/Antalya
Email: support@ailydian.com
Phone: +90 (850) 555 12 34
Personal Data We Process
Identity Information
- Full name, national ID number, date of birth
- Passport number (for international travel)
- Gender
Contact Information
- Email address
- Phone number (mobile and/or landline)
- Address details (residential, billing address)
Financial Information
- Credit card details (tokenised and encrypted)
- Bank account details (for refund transactions)
- Invoice information
Transaction Security Information
- IP address, cookie records
- Browser information, operating system information
- Location data (with your consent)
Purposes of Processing Personal Data
Receiving, processing, and fulfilling your travel and accommodation bookings
Managing customer service and support processes
Processing payments and issuing invoices
Fulfilling legal obligations (tax, commercial law, etc.)
Improving the user experience and providing personalised services
Conducting marketing and advertising activities (subject to your consent)
Ensuring platform security and preventing fraud
Conducting statistical analysis and reporting activities
Legal Bases for Processing Personal Data
Performance of a contract: Necessary for the performance of the booking contract
Legal obligation: Statutory requirements arising from tax, commercial, and travel legislation
Legitimate interest: Prevention of fraud and safeguarding platform security
Explicit consent: Your explicit consent for marketing communications and personalised recommendations
Transfer of Personal Data
Your personal data may be transferred to the following parties in order to fulfil the purposes set out above and to comply with applicable data protection legislation:
•Service providers such as hotels, airlines, and car rental companies
•Payment institutions and financial institutions
•Technology infrastructure and data storage service providers
•Public authorities and regulators where required by law
•Business partners and suppliers (under confidentiality agreements)
•Legal, tax, and financial advisors
Where data is transferred outside your country of residence, we ensure that applicable cross-border data transfer requirements are met and appropriate safeguards are applied.
Data Security
We implement the following technical and administrative measures to ensure the security of your personal data:
Technical Measures
- Encrypted connections with 256-bit SSL certificates
- Firewall protection
- Regular security assessments and penetration tests
- Data backup systems
Administrative Measures
- Access authorisation and audit log systems
- Employee confidentiality agreements
- Regular staff training
- Maintenance of a data processing inventory
Your Rights as a Data Subject
Under applicable data protection legislation, you have the following rights with regard to your personal data:
Right of Access
The right to learn whether your personal data is being processed and, if so, to request information about such processing
Right to Be Informed of Purposes and Transfers
The right to learn the purposes of processing and whether your data is used in accordance with those purposes, and to request information about domestic and international transfers
Right to Rectification
The right to request the correction of incomplete or inaccurately processed personal data
Right to Erasure
The right to request the deletion or destruction of your personal data (subject to legal retention obligations)
Right to Object
The right to object to a result reached against you as a consequence of automated analysis
Right to Lodge a Complaint
The right to lodge a complaint with the competent supervisory authority in the event of a violation of applicable data protection legislation
How to Exercise Your Rights
To exercise the rights described above, you may contact us through the following channels:
Phone
+90 (850) 555 12 34
Written Application
Atatürk Bulvarı No: 456, Alanya Merkez, 07400 Alanya/Antalya
Your requests will be answered free of charge within 30 days, depending on the nature of the request. If the operation requires an additional cost, the fee set by the competent supervisory authority may be charged.
Last Updated: 26 December 2025
This notice may be revised in line with changes in applicable legislation or updates to our corporate practices.