Privacy & personal data

1. Who is responsible

MUBER TRAVEL TURİZM TİCARET LİMİTED ŞİRKETİ operates Muber Travel and is the data controller for these activities. Registered address: Merkez Mahallesi, Ali Galipbey Caddesi, Ekşioğlu İşhanı No: 16, İç Kapı No: 29, Gaziosmanpaşa / İstanbul, Türkiye. Contact: info@mubertravel.com.

2. Information we receive

Account information includes your email address, verification status and, where requested by the registration form, your name, telephone number and a protected password hash. Email verification is required before an account is activated. We do not store your account password as readable text.

Journey requests include your name, email, phone, pickup and destination addresses, travel date and time, passenger and luggage counts, selected vehicle and extras, and any flight number or journey note you provide. We also process the booking reference and subsequent correspondence. Please do not enter passport numbers, payment card details or medical records in free-text notes.

Technical information includes connection and request information needed to deliver the site, maintain sessions and limit misuse, including IP-derived security identifiers. Information is collected electronically through the site and through the email or messaging channels you choose to contact us.

3. Purposes and legal grounds

We use account and journey details to respond to your request, verify your email, manage your account and arrange the service you request. The relevant basis under Turkish Law No. 6698 is necessity for establishing or performing a contract (Article 5(2)(c)).

We use relevant transaction records to meet applicable legal obligations (Article 5(2)(ç)) and to establish, exercise or protect legal rights (Article 5(2)(e)). Security and abuse-prevention processing relies on our legitimate interests, provided your fundamental rights are not harmed (Article 5(2)(f)). Reading this notice or creating an account is not consent to advertising.

4. Service providers and disclosure

Authorised Muber personnel and the transport providers assigned to your journey receive the details necessary to arrange and deliver it. Our website uses Sites hosting on Cloudflare infrastructure and Resend for transactional emails. These providers process the technical, account or message data needed for their services. Information may also be disclosed to competent authorities where legally required.

Address search sends the address text you enter to Google Maps services. When a route preview is available, the selected origin and destination are sent to Google to calculate and display the route. Journey times are estimates. Google operates these services under its own privacy terms, available at https://policies.google.com/privacy.

When Google sign-in is available and you choose it, we validate the identity response from Google and use your name and verified email to start our account verification flow. We do not request access to Gmail messages, contacts or Google Drive, and we never receive your Google password. Google may process browser and account information when its sign-in interface loads.

Some technology providers operate outside Türkiye, so their services can involve processing abroad. You can request information about the recipients and the applicable international-transfer arrangements using the contact details above. This notice is not a request for blanket consent to overseas transfers.

5. Cookies, storage and retention

We count page views and visits in aggregate, by page, traffic-source category, country and device category. We do not store names, email addresses, IP addresses or visitor identifiers in these statistics. Session storage keeps only the last page and visit time in your tab to approximate visits with a 30-minute inactivity threshold; closing the tab clears it.

A necessary session cookie keeps you signed in for up to 30 days; signing out invalidates that session. Email codes expire after 10 minutes. If Google sign-in is available, a short-lived security cookie protects that flow. Your language and currency preferences are stored in your browser until you change or clear them. You can remove these items through browser settings, although removing session cookies signs you out.

Account information is retained to provide your account. You can request account closure and deletion by email. Journey and correspondence records are retained for the service, applicable legal obligations and the establishment or defence of claims; records whose processing grounds have ended are subject to deletion or anonymisation. Code expiry does not itself mean every associated record has immediately been erased.

6. Your rights and requests

Under Article 11 of Law No. 6698, you may ask whether your data is processed, obtain information about that processing and its purpose, learn about domestic or overseas recipients, request correction, request deletion or destruction when the legal conditions apply, and request that relevant corrections or deletions be notified to recipients. You may object to an adverse result based solely on automated analysis and seek compensation for damage caused by unlawful processing.

Send requests to info@mubertravel.com, preferably from the email associated with your account, or submit a written request to our registered address. Explain the request and include enough information to identify the account or journey. We may need proportionate identity verification. Requests under Turkish data protection law are answered within the applicable statutory period, generally no later than 30 days. Rights and complaint routes under other applicable data protection laws remain available.