Privacy & data protection

Who is responsible for your data

alojet is the data controller ("veri sorumlusu") for the personal data described here. We are an air charter broker: we arrange flights operated by licensed air carriers, and we are not ourselves the operator of the aircraft. You can reach us about anything in this notice at [email protected].

What we collect

We only ask for what a charter request actually needs:

• Identity and contact details: your name, email address, telephone and WhatsApp number, and the company you are travelling for.
• Flight details: departure and destination airports, dates and times, the number of passengers, the aircraft class you prefer, and whether your dates are flexible.
• Requests you tell us about on board: catering, pets travelling with you, and any accessibility or service note you choose to share. A dietary or medical note may be special-category data, so we record it only when you give it to us and only for the flight it concerns.
• Correspondence: the emails, messages and call notes exchanged while your request is being worked on.
• Passenger and travel-document details, where the operator or an authority needs them to carry you — usually a passport number, nationality and date of birth, collected once a flight is confirmed.
• Technical data from our website: the pages you opened and the standard connection data your browser sends, used to keep the site working and secure.

privacyPage.dataText

Why we hold it, and on what legal basis

Each purpose below rests on one of the grounds in Articles 5 and 6 of the KVKK — performance of a contract, our legitimate interests, a legal obligation, or your explicit consent where the law requires it:

• To price your request, obtain quotations from operators and put options in front of you — necessary for the contract you are asking us to arrange.
• To book and coordinate the flight, including passing what the operator, the handling agent and the authorities need in order to carry you.
• To invoice you and keep the commercial, accounting and tax records Turkish law requires us to keep.
• To answer you afterwards, handle a complaint and keep a record of what was agreed — our legitimate interest in being able to show what happened.
• To send you offers, only if you have asked us to, and only until you tell us to stop.

privacyPage.purposeText

Who else sees it

We share the minimum each party needs, and no more:

• The air operators we ask to quote, and the one that flies you. They are separate controllers of the data they receive and handle it under their own obligations.
• Ground handling agents, catering suppliers and airport authorities at departure and arrival, where the flight cannot happen without it.
• Our service providers: email delivery, hosting and database infrastructure, and our accountants. They act on our instructions and may not use your data for anything else.
• Public authorities, courts and regulators, where we are legally obliged to disclose.

We do not sell personal data, and we do not share it for anyone else’s advertising.

Transfers abroad

Private aviation crosses borders, so arranging a flight outside Turkey means the operator, the handling agent and the authorities at the other end receive what they need to carry you. Some of the infrastructure we use to run the website and send email is also operated outside Turkey. Such transfers are made on the grounds permitted by Article 9 of the KVKK: an adequacy decision, an appropriate safeguard such as a standard contract, or your explicit consent where neither applies.

How long we keep it

A request that does not turn into a flight is kept for up to two years, so we can pick up a conversation where it was left and show what was quoted. Records of a flight we arranged are kept for ten years, which is the commercial and tax retention period Turkish law sets. Travel-document details are deleted once the flight is complete and the operator no longer needs them. Marketing consent is kept until you withdraw it. When a period ends, data is deleted, destroyed or anonymised.

How we protect it

Access to the operations system is limited to the colleagues working your request, over individual accounts with their own passwords. Data in transit is encrypted, quotation links we send you are unguessable and are not indexed by search engines, and changes to a request are recorded with the name of whoever made them.

Your rights

Under Article 11 of the KVKK you may ask us:

• whether we hold personal data about you, and to be given a copy of it;
• what we are using it for, and whether it is being used consistently with that purpose;
• who we have disclosed it to, in Turkey or abroad;
• to correct it if it is incomplete or wrong, and to tell anyone we disclosed it to about the correction;
• to delete or destroy it where the grounds for holding it have gone;
• to object to a decision taken about you purely by automated means;
• to compensate you for damage caused by unlawful processing.

You can also withdraw a consent you gave us at any time, which does not affect anything done before you withdrew it.

How to exercise them

Write to [email protected] from the address you gave us, or send a signed written request to our registered address. We answer within thirty days at the latest and free of charge, unless the request requires a separate cost, in which case we will tell you first. We may ask you to confirm your identity before we release anything — otherwise we would be handing your data to whoever asked for it. If you are not satisfied with our answer you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu).

Changes to this notice

If what we do with personal data changes, we update this page and the date at the top of it. Where a change needs your consent, we will ask for it rather than assume it.