Privacy Policy

Version 1 · Last updated: October 10, 2026

This policy explains how we process your personal data when you book through voitrip.com or use the website. It contains the information required by the EU General Data Protection Regulation (GDPR) and, where applicable, by Türkiye's Personal Data Protection Law No. 6698 (KVKK).

1. Controller

GlobalisTMS OÜ · Viru väljak 2, 10111 Tallinn, Estonia · Registry code 17195924

For any question or request about data protection: support@voitrip.com

2. What data we collect and where from

When you book (from you)

• Name, e-mail, phone and, if given, an alternative phone.
• Flight number and time, pick-up and drop-off address or hotel, date and time.
• Number of people (adults, children, infants), number of bags, extra services you choose and your note; for tours, the participants' details.
• If you book for other passengers, these details about them. In that case, please inform them about this policy.

When you pay

• Card payments are taken by Stripe. Your card number and security code never reach us; we only see the payment reference, the amount and the status of the payment.

If you create an account

• Your e-mail, name and password. Your password is kept hashed by our sign-in service; we cannot see it.

If you make a complaint or ask for support

• Your messages and the photos you add. A "Vehicle did not come" report asks for a photo showing where you are.

During the service (from the company and the driver)

• When the driver reports arriving at the pick-up point, the location at that moment is saved; if the driver reports that you did not show up, a location and photos are saved. There is no continuous live location tracking.

When you use the website

• Cookies and browser storage needed for the website to work (see the Cookie Notice).
• What you type into the address box is sent to Google so that address suggestions can be shown.
• What you type into the free-text box of the tour search is sent to an artificial intelligence service to understand your search. Please do not type personal details into that box.
• Server logs may contain your IP address and browser details. When you give the optional marketing consent, your IP address and browser details are saved with it as proof of the consent.

3. Why we process it and on what legal basis

• To take your booking, plan the service with the company, send you the confirmation, the voucher and information e-mails, and handle payment, cancellation and refunds: performance of the contract and steps before entering into it.
• To keep invoices and accounting records and to answer requests of authorities: legal obligation.
• To prevent fraud and misuse, keep the website secure, resolve complaints and disputes and monitor service quality: legitimate interests.
• To send you campaign e-mails: only your consent, given with the optional box on the payment page. You can book without giving this consent. We currently do not send campaign e-mails.

If you do not give the details needed for a booking, we cannot complete the booking.

4. Who we share it with

• The company providing the service and its driver: only what they need for the job assigned to them (passenger name, phone, flight, pick-up and drop-off place, number of people and bags, note). The driver's job link closes 12 hours after the service.
• Our service providers (acting for us and on our instructions): Stripe (payments), Supabase (database and sign-in), Vercel (website hosting), Resend (sending e-mails), Google (address suggestions and maps), the artificial intelligence service selected for the tour search (only the search text).
• Competent authorities where the law requires it and, where necessary, our accounting and legal advisers.

We do not sell your data and do not share it for other parties' marketing.

5. Transfers abroad

The companies providing the services are located in Türkiye or in the other countries where the service takes place. Some of our service providers may process data outside the European Economic Area (for example in the USA). To learn which safeguard a given transfer relies on, write to us at support@voitrip.com.

6. How long we keep it

• We keep your data for as long as the purpose of processing requires.
• Booking, payment and invoice records are kept for the period required by accounting and tax laws.
• Complaint and dispute records are kept until the matter is resolved and the related legal periods have ended.
• Marketing consent remains valid until you withdraw it; after withdrawal you receive no campaign messages. A record showing that the consent was given and withdrawn is kept separately.
• Unpaid baskets are deleted after 24 hours.

7. Your rights

To the extent the law grants them, you have the right to access your data and receive a copy, to have incorrect data corrected, to have data erased, to restrict processing, to object to processing, to receive your data in a portable format and to withdraw your consent at any time.

• You can send your request to support@voitrip.com. We may verify your identity in a way that is appropriate and proportionate to the request.
• We answer within the time limits set by law.
• Records we must keep by law (for example invoices) are kept for that period even if you ask for erasure; we restrict access to them and tell you why.
• You can also complain to a data protection authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the authority of your country of residence, or in Türkiye the Personal Data Protection Board.

8. Security

Only people who need your data for their work can access it. Companies only see the details of the jobs assigned to them. Card data never enters our systems.

9. Changes

We may update this policy. The current version and the date of the last update are shown at the top of this page.