Privacy Policy

Your privacy matters to us. This policy explains how your data is processed.

Effective Date: 03.09.2026 — Last Updated: 14.09.2026

This Privacy Policy explains our practices regarding personal data processed by the website https://skykite.com.tr ("SkyKite" or "Platform") in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation. By using the Platform, you accept the practices described in this Policy.

1. Data Controller

Within the scope of the KVKK, your personal data is processed by SkyKite (https://skykite.com.tr) as the data controller, as described below. For applications regarding the data controller, you may use the channels listed in the communication section below.

2. Personal Data Collected

The following personal data may be collected for the purpose of providing the matching service on the Platform:

  • Identity Data: First name, last name, username;
  • Contact Data: E-mail address, phone number;
  • Account Security Data: Cryptographic digest of your password (your actual password is never stored in plain text);
  • Flight and Travel Data: Flight date, flight number, departure-arrival points, capacity declarations;
  • Transaction Data: Item requests, offers, messages, transaction history, IBAN information (for payments to passenger users and IBAN verification);
  • Transaction Security Data: IP address, device and browser information, session records, usage audit logs;
  • Cookie Data: Data obtained through cookies used for session management, preferences, and analytics;
  • Rating and Review Data: User reviews, ratings, and satisfaction evaluations;
  • Media Content: Profile photo, receipts, and similar documents and images uploaded by the user.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

  • Providing the matching service between the Requester and the Passenger, publishing listings and requests, transmitting offers;
  • Creating, verifying, and managing the membership account; performing e-mail verification;
  • Enabling user-to-user communication (messaging) and sending notifications (e-mail, web push);
  • Measuring and improving service quality and enhancing user experience;
  • Ensuring security; preventing fraud and misuse; examining disputes and complaints;
  • Fulfilling legal obligations; responding to requests from authorized administrative and judicial authorities;
  • Conducting information security audits of the Platform and keeping records;
  • Auditing compliance with the membership agreement and Platform rules; detecting violations and taking necessary actions;
  • Providing session management and site functionality through cookies and similar technologies.

4. Legal Grounds

Your personal data is processed based on the following legal grounds set out in Article 5 of the KVKK: establishment and performance of a contract; compliance with legal obligations of the data controller; legitimate interest; express consent (only where strictly necessary); and evidence activity for the protection of legal claims.

5. Recipients of Personal Data

Your personal data, limited to the purposes stated above and the fulfillment of legal obligations, may be transferred to:

  • Other Users: As required by the matching service, your name/username, listing/request information, and messages are shared with the other user involved in the transaction. Your phone number is shared only with your approval.
  • Service Providers (Business Partners): Third-party technology providers of e-mail delivery, cloud storage, database and hosting services, web push notifications (e.g., Google/FCM), analytics and error monitoring;
  • Advertising and Analytics Providers: Google Analytics, Google Ads, and similar platforms (subject to the cookie policy);
  • Authorized Public Institutions: Where legally required; courts, prosecutor's offices, law enforcement, the Customs Administration, and other administrative bodies;
  • Legal Advisors: Organizations providing legal and consultancy services for the conduct of legal affairs.

Your personal data is never sold or rented to third parties for commercial purposes.

6. Domestic and Cross-Border Data Transfer

Some technology infrastructures we use (cloud servers, e-mail, push notifications, analytics, etc.) may be located abroad. In such cases, your personal data is transferred in accordance with the conditions set out in Article 9 of the KVKK: to countries providing adequate protection, or where adequate protection is not provided, with the permission of the KVKK Board and/or the User's express consent from the data controller abroad. Transfer is limited to the purpose and carried out with data security measures in place.

7. Data Collection Methods

Your personal data is collected, fully automatically or by non-automatic means, through registration forms, contact forms, messaging screens, and similar channels on the Platform's website; mobile applications; cookies and similar tracking technologies; customer service channels; and e-mail.

8. Retention Period of Personal Data

Your personal data is retained for the period required by the processing purpose, including statutory limitation and retention periods arising from legislation after the termination of the contractual relationship. Where legislation does not prescribe a specific period, retention is limited to the period necessary for the processing purpose; at the end of such period the data is deleted, destroyed, or anonymized.

All transactions carried out on the Platform are recorded. Membership and transaction records, together with access/security audit records (logs), are retained for the periods prescribed by Law No. 6563 on the Regulation of Electronic Commerce, Law No. 5651, and relevant legislation, and may be shared with competent courts, prosecutors' offices, law enforcement units, customs administration, and other competent public institutions for submission to legal authorities where duly requested. SkyKite cooperates with competent authorities for the purposes of combating crime and protecting public order.

9. Your Rights as a Data Subject (KVKK Art. 11)

Pursuant to Article 11 of the KVKK, by applying to the data controller you have the right to:

  • Learn whether your personal data is being processed,
  • Request information if it has been processed,
  • Learn the purpose of processing and whether the data is used in accordance with that purpose,
  • Know the third parties to whom the data is transferred domestically or abroad,
  • Request correction of incompletely or incorrectly processed data,
  • Request deletion or destruction of the data within the framework of the conditions set out in the KVKK,
  • Request that correction and deletion operations be notified to third parties to whom the data has been transferred,
  • Object to the emergence of a result to your detriment through analysis exclusively by automated systems,
  • Claim compensation for damages in case of damage due to unlawful processing.

10. How to Exercise Your Rights

You may submit your requests regarding the rights listed above to the info@skykite.com.tr e-mail address together with identifying information. Your request will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. If the transaction requires an additional cost, the fees determined by the KVKK Board shall apply. If your request is rejected, accepted, or the response is found insufficient, you may file a complaint with the KVKK Board within thirty days from learning the response and in any case within two months from the date of application.

11. Cookie Policy

Cookies are used on the Platform for session management, remembering your preferences, and on-site analytics. Detailed information on cookie types, retention periods, and how to manage your cookie preferences can be found on our Cookie Policy page.

12. Data Security Measures

To ensure the security of your personal data, administrative and technical measures are taken, such as storing passwords as cryptographic digests, TLS/SSL encrypted data transmission, authorization and access controls, session security measures, firewalls, regular security updates, CSRF protection, security headers (CSP), penetration testing, and audit logging. Access to data is limited on a need-to-know basis with defined roles. In the event of a security breach, necessary notifications are made in accordance with the KVKK and relevant legislation, and measures are taken as soon as possible.

However, no data transmission over the internet can be guaranteed to be 100% secure; the Platform applies reasonable industry-standard measures to ensure security. It is also important that you do not share your password with anyone for your account security.

13. Policy Changes

This Privacy Policy may be updated depending on legal regulations or changes in our data processing practices. The current Policy is always published on the Platform; announcements may be made on the Platform for significant changes. We recommend that you check the Policy regularly. Last updated: 14.09.2026.

14. Communication

For your KVKK requests, questions, and applications, our communication channels are:

Data Controller: SkyKite
Website: https://skykite.com.tr
KVKK Application E-mail: info@skykite.com.tr
Contact page: https://skykite.com.tr/contact

Favorilere eklemek ister misiniz?