Personal Data Protection Notice (KVKK & GDPR) | VIPSTAR Aviation
Personal Data Protection Notice (KVKK & GDPR)
This Notice explains how Dalaman Turizm Havacilik Yatcilik Dis Tic. Ltd. Sti. (“VIPSTAR Aviation”) processes personal data in accordance with Turkish Personal Data Protection Law No. 6698 (KVKK) and EU General Data Protection Regulation (GDPR Art.13/14). Applies to vipstar.com.tr and services: private jet charter, helicopter charter, air ambulance, luxury yacht charter, seaplane and VIP ground transfer. Premium charter coordination since 2006. Last updated: 18.09.2026
1) Data Controller
Brand: VIPSTAR Aviation
Address: Hurriyet Mah. Gazi Bulvari No:142/A, 48770 Dalaman/Mugla, Turkey
Phone: +90 252 692 4797
WhatsApp 24/7: +90 532 569 2420
Email: sales@vipstar.com.tr
MERSIS: 0267060685300014
Contact for Rights: sales@vipstar.com.tr (reply within 30 days / GDPR 1 month)
2) Categories of Personal Data
| Category | Examples |
|---|---|
| Identity & Contact | Name, phone, email, passport / ID for international flights (Bodrum-Mykonos, Dalaman-Santorini) |
| Booking & Operation | Route, date, pax count, baggage, catering, marina, hotel, VIP transfer details |
| Special Category (Limited) | Health data for air ambulance only – with explicit consent (KVKK Art.6 / GDPR Art.9(2)(a)) |
| Financial | Invoice info, payment confirmation (card data not stored) |
| Technical | IP, cookies, site usage, language TR/EN (see Cookie Policy) |
3) Purposes of Processing
- Preparing quotations and evaluating charter requests
- Coordinating private jet, helicopter, air ambulance, luxury yacht, seaplane and VIP ground transfer operations
- Operational planning for Istanbul, Bodrum, Dalaman, Gocek, Antalya, Izmir routes and international legs
- Client communication, customer support and contract performance
- Compliance with legal obligations (SHGM, DHMI, customs) and aviation security
- Improving service quality and security, fraud prevention
4) Legal Bases
5) Collection Methods
Via website forms, email, phone, WhatsApp, contract and cookies. For air ambulance, health data collected directly from data subject or authorized representative.
6) Data Sharing & International Transfers
Data is shared only as required for operation: AOC operators, ground handling, FBOs, marina/hotel and VIP transfer suppliers, and competent authorities.
7) Retention Periods
| Data Type | Period | Reason |
|---|---|---|
| Flight / Invoice Records | 10 years | Turkish Commercial Code & Tax Law |
| Correspondence / Quotes | 3 years | Legitimate interest & proof |
| Cookie / Analytics | 13 months max | Consent period |
| Air Ambulance Health Data | Until operation ends + 1 year | Then deleted |
8) Your Rights (KVKK Art.11 & GDPR Art.12-23)
- Right to information, access, rectification, erasure, restriction, objection, data portability
- Right to withdraw consent at any time
- Right to lodge complaint with KVK Authority (kvkk.gov.tr) or EU Supervisory Authority
Requests to sales@vipstar.com.tr – answered within 30 days (KVKK) / 1 month (GDPR). ID verification may be required.
9) Security Measures
Encryption, access control, confidentiality agreements, need-to-know principle, regular audits. Card data not stored on our servers.
10) Contact & Related Documents
Data Protection: sales@vipstar.com.tr
Related: Privacy Policy · Cookie Policy · Terms & Conditions · TR KVKK Metni
11) Governing Law & Jurisdiction
This Notice is governed by Republic of Turkey law. For TR residents, Dalaman, Ortaca Courts and Enforcement Offices are competent. For EU residents, GDPR Art.79 – right to an effective judicial remedy remains unaffected.