Privacy Policy
This notice explains how your personal data is processed when you use our website, send a booking request or contact us, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). In case of any discrepancy, the Turkish version prevails.
1. Data controller
Your personal data is processed by [RESMİ UNVAN] ("Mavi Bisiklet") as the data controller.
- Address: Zerdalilik Mah. Değirmenönü Cd. No:8/B, Muratpaşa / Antalya, Türkiye
- E-mail: [KVKK E-POSTA]
2. Personal data we process
- Identity: first and last name.
- Contact: phone number, e-mail address.
- Customer transaction: booking details (bike, quantity, date, time, duration, price), your booking note, your contact form message, the date you confirmed reading this notice.
- Transaction security: IP address, form submission time, cookie records.
- At the shop during rental: ID document details and deposit information (not collected through the website).
3. Purposes of processing
- Receiving your booking requests, checking availability, confirming them and informing you,
- Concluding and performing the rental agreement,
- Answering your questions and messages,
- Keeping the website secure and preventing spam,
- Remembering your language and currency preference,
- Fulfilling our legal obligations and responding to requests from authorised bodies.
4. Legal grounds
Your personal data is processed on the following legal grounds under Article 5(2) of the KVKK:
- It is directly necessary for concluding or performing a contract (booking and rental),
- It is necessary for us to fulfil a legal obligation,
- It is necessary for establishing, exercising or protecting a right,
- It is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (website security, spam prevention).
If analytics or marketing cookies are used on the website, they only run with your explicit consent.
5. How we collect data
Your data is collected through the booking and contact forms on the website, cookies, phone, WhatsApp and e-mail correspondence and at our shop, by fully or partly automated or non-automated means.
6. Who we share it with
- Service providers: the company hosting the website and the e-mail delivery service, only as far as the service requires.
- Authorities: legally authorised public bodies and courts, upon request.
- Advisers: our accountants and legal advisers, within the scope of our obligations.
Transfers abroad: Some services used on the website (Google Maps, Google Fonts and, if used, Google Analytics) as well as the hosting and e-mail infrastructure may have servers outside Türkiye. When these services run, some data such as your IP address may be transferred abroad. Such transfers are made in accordance with the conditions and safeguards of Article 9 of the KVKK. When you message us via the WhatsApp link, WhatsApp's (Meta) own privacy terms also apply.
7. Retention periods
- Booking records: for the periods required by law (Turkish Commercial Code, Tax Procedure Law, etc.), at most 10 years.
- Contact form messages: 2 years.
- Cookies: as shown in the table below.
At the end of the period, your data is deleted, destroyed or anonymised.
8. Cookies
Our website only uses cookies that are necessary for it to work:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Making the forms and the website work | 2 hours |
| XSRF-TOKEN | Form security (blocking forged requests) | 2 hours |
| currency | Remembering the currency you chose | 1 year |
You can delete or block cookies in your browser settings; in that case the forms may not work.
9. Your rights
Under Article 11 of the KVKK you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties in Türkiye or abroad to whom it is transferred,
- Request correction if it is incomplete or inaccurate,
- Request its deletion or destruction under the conditions of Article 7 of the KVKK,
- Request that correction, deletion or destruction be notified to the third parties it was transferred to,
- Object to a result against you arising exclusively from automated analysis,
- Claim compensation if you suffer damage due to unlawful processing.
10. How to apply
To exercise your rights, you can send your request in writing to our address above or by e-mail to [KVKK E-POSTA]. Your request will be answered free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may apply. If your request is rejected or you find the answer insufficient, you may lodge a complaint with the Personal Data Protection Board.
Last updated: 27 September 2026