Turkish Airlines (hereinafter referred to as “Company” or “We”), has the utmost sensitivity on the lawful processing of its customers personal data.
We have prepared The Türk Hava Yolları Anonim Ortaklığı Privacy Notice on the Protection and the Processing of Personal Data, in order to ensure compliance with national and international legislation in effect, in particular the Law on the Protection of Personal Data (the “Law”) and the European Union General Data Protection Regulation (“GDPR”). For more detailed information about GDPR you may read the GDPR Privacy Notice published on https://www.turkishairlines.com/en-tr/legal-notice/gdpr-privacy-notice.
The security of our customers’ personal data is at the forefront of our work. Therefore, in order to prevent any unlawful access to personal data or leak and to ensure the secure retention of personal data relating to our customers, such data are only transferred to trusted business partners and on a minimum level, by taking necessary security measures in accordance with the legislation in force.
Transparency is one of the most important subjects of our personal data protection program. In this respect, we have prepared this Notice in order to provide our customers with all possible information while we are processing personal data for the purposes of compliance with our legal obligations and to ensure a better customer experience. Detailed information regarding the types of personal data and the purposes for processing personal data are detailed under the “For Which Purposes Do We Process Your Personal Data?” heading.
Another issue that we also pay close attention to is customers’ right to have control over their personal data. We implement measures to ensure that our customers manage their preferences regarding their own personal data and highly respect our customers preferences. In this regard, you may convey your requests to us by communication channels listed under section “The Exercise of Rights by the Data Subjects”, and detailed explanations regarding the matter are provided within the section named “Rights of the Data Subjects”.
Data security, transparency and individuals’ right to have control over their personal data are fundamentals for us in ensuring compliance with the Law. In this respect, detailed information regarding the processing of your personal data are presented to your attention within this Notice.
1. How do we obtain your personal data?
This Notice contains our declarations and explanations concerning the processing of personal data relating to our customers and other natural persons establishing contact with us, excluding our employees, in compliance with the provisions of the Law and the GDPR.
We reserve the right to make changes to this Notice in order to provide accurate and up-to-date information concerning practices and regulations relating to the protection of personal data. Additionally, data subjects will be informed by appropriate means in the event of a substantial change to the Notice.
This Notice is prepared in order to provide information concerning which personal data Turkish Airlines processes within the scope of its commercial activities, the purposes for processing, the parties to whom personal data are transferred and the purposes for such transfers. This Notice covers the following channels through which personal data are collected:
2. Which personal data do we process?
Personal data processed by our Company differ in accordance with the nature of the legal relationship established with our Company. In this respect, categories of personal data collected by our Company through all channels, including Digital Environments, are as follows:
3. For which purposes do we process your personal data? What is our legal basis for processing your personal data?
As per the Law, personal data can only be processed in the presence if at least one of the conditions set forth under Articles 5 and 6 of the Law and/or required by international legislation. In this respect, as Turkish Airlines, we may rely on different legal bases, including: i) it is expressly provided for by the laws, ii) the necessity to establish a contractual relationship with you and to perform our obligations under a contract (provision of airline transport services and other related services) iii) complying with obligations under national and international regulations and iv) our legitimate interests provided that such interests do not have a negative impact on our customers’ fundamental rights and freedoms.
In addition to the above-listed conditions for processing personal data, we may request you to explicitly consent to the processing of your personal data. If this is the case, personal data will be processed limited to the scope of your freely given explicit consent. You may at any time revoke your explicit consent.
In this regard, personal data will be processed by Turkish Airlines, within the framework of national and international legislation, in accordance with the conditions for processing personal data set forth under Articles 5 and 6 of the Law and within the scope of the below-listed purposes:
When you book a flight, including booking processes concluded through third parties and other websites, an account through which you may finalize your booking and manage your preferences regarding your flight is created. In this respect, information concerning your identity is processed for the verification of your identity at check-in, baggage delivery and security check points.
Additionally, personal data relating to you may also be processed in the course of benefiting from airport services provided through kiosks such as check-in, seat selection, luggage and cargo.
Within the scope of your flight, we process personal data relating to you within the scope of services concerning your flight for the purposes of conclusion of your flight ticket, check-in processes, preparation of your boarding pass and boarding on the plane.
Personal data relating to you may only be processed for the purposes of providing information regarding the verification of your travel organization, changes to your flight program, opening date and time of check-in and conveying communication concerning reminders of your incomplete reservations.
Establishing Communication Concerning Our Operations
In certain circumstances, we are required to deliver certain information to our customers regarding our flights. For instance, we may be required to establish communication with you via SMS, e-mail or telephone for the purposes of conveying booking information, confirmation regarding the purchase of your ticket or to provide payment and flight details. Additionally, customers benefiting from services provided through the Application, may also be communicated by way of in app notifications.
Please be noted that the electronic messages transmitted for the purposes stated above, or for other similar service information and excluding messages transmitted for marketing purposes shall not require the consent of the recipient as per the Article 6 of the Regulation on Commercial Communication and Commercial Electronic Messages and may be transmitted to you by Turkish Airlines without obtaining your consent.
Requests and Evaluations
Personal data relating to you may be processed for the purposes of taking necessary actions in order to provide responses to questions, requests or complaints conveyed by our customers through Digital Environments or by other written and verbal channels.
Opinions of our customers are of great importance for us. Therefore, we may process personal data while evaluating the responses provided by our customers to questions within customer satisfaction surveys, in order to evaluate the quality of our services.
In order to provide a personalized customer experience, we may process personal data for the purposes of customization of our products or services in accordance with your taste, preference and needs. In this regard, information concerning your previous flights, information provided within the scope of processes and communications and where deemed necessary, information obtained as a result of segmentation activities conducted upon your explicit consent may be processed for the purposes of estimating your preferences regarding your flights and presenting customized offers.
Additionally, personal data may be processed for the purposes of establishing marketing communications concerning campaigns, publicity, promotion and invitations to events determined upon such segmentation activities.
Personal data may be processed upon consent obtained from you, in order to establish marketing communications for providing information concerning our flight or travel products and services. In accordance with your consent, we may also provide information concerning our corporate business partners’ travel and flight campaigns.
Your personal data, requests for changes in your flight and travel program, special assistance you may require at the airport, catering offered during your flight, special preferences, sending gifts among the products listed on the https://shopandmiles.com website within the scope of customer satisfaction, and the product or service provided to you can be processed within the framework of your complaints and improvement suggestions regarding the services.
Personal data relating to persons to inform in case of an emergency or an incident regarding your flight and travel program provided by you or your medical condition information, may be processed for the purposes of informing and ensuring support and providing necessary care within the scope of processes related to the management of emergencies and incidents.
Personal data relating to you may be processed for the purposes of preparing records and documents required to be prepared in accordance with the relevant legislation, in order to carry out flight operations, complying with the obligations concerning the retention of information, reporting, record keeping, informing, taxation, international sanctions and other obligations.
In this regard, personal data may be processed for the purposes of prevention, detection and investigation of crime including fraud and money laundering, in accordance with our obligations concerning identification and verification of identity.
Within the scope of complying with obligations under international and national civil aviation, personal data relating to you may be processed for the purposes of providing requested information and documentation to competent public institutions and organizations as well as regulatory authorities or allowing such persons and organizations to gain access to requested information or documentation. In such cases, the processing of personal data shall be limited to the legally valid subject and scope of the request.
Personal data relating to you may be processed for the purposes of complying with obligations to inform including identification and verification of identity and the prevention of fraudulent transactions, receiving payments and where deemed necessary, reimbursement.
Personal data relating to you may be processed for the purposes of ensuring compliance with internal policies and procedures related to information security, management of information technologies systems as well as improving and optimizing such systems, ensuring the accessibility and reliability of such infrastructure and systems by way of back-ups and tests, improving products and services provided including statistical analysis and research on systems and programs regarding ticketing and travel operations.
Personal data may be processed for the purposes of preventing fraud and counterfeiting, investigating and reporting due to legal requirements, taking legal actions and carrying out necessary studies.
Within the scope of processes executed with business partners, personal data may be processed for the purposes of enabling access of business partners to required information and documentation within the framework of corporate relations, enabling access of executives and employees of third party service vendors to necessary information and documentation providing outsource services regarding flight planning, travel organization, customer relationship management, research and development.
4. Transfer of personal data
Your personal data may be shared with parties who provide product or service to us or on behalf of our company and with our suppliers and business partners that we get support for the establishment, execution and termination of our relationship, including the parties collaborating with us for the purposes of providing products and services to you. Your personal data may also be shared with public institutions and private persons authorized by law within the scope of their authorization. In such cases, our company takes all precautionary measures to ensure that the parties carry processing and transfer activities in accordance with the rules stated in this Notice and other related law.
Personal data may be shared with group companies, business partners, public institutions and private persons authorized by law pursuant to conditions and purposes of processing personal data as stated under Article 8 and 9 of the Law, and may be transferred abroad, limited with the stated purposes and in accordance with the principles and procedures stated under Article 9 of the Law and decisions of the Personal Data Protection Board. In this context, your personal data may be shared with the relevant authorities and authorized third parties of the country where your travel is made from or over its air space, in order to fulfill the operational requirements and to comply with the requirements of the civil aviation legislation and international legislation, in particular with Article 40 of the Turkish Civil Aviation Act No. 2920.
Your personal data may only be transferred abroad where;
5. Retention of personal data
Our company determines the retention periods by taking into consideration of the applicable law and purposes of data processing. In this respect, where applicable, we particularly consider the issues of period of limitation and legal obligations regarding the processing of personal data. Once the purpose for processing personal data ceases, unless another legal reason or basis allowing the retention of the personal data exists, data will be deleted, destroyed or anonymized.
6. Principles relating to personal data privacy
Our company acts in accordance with the principles stated below in all data processing activities. “Acting in accordance with the law and in good faith”, “Authenticity and Being Up-to-date”, “Processing for specific, clear and legitimate purposes”, “Being relevant, limited and proportionate with the purposes”, “Retention as stated in the related law or as long as necessary for the relevant purpose”
As Turkish Airlines, we utilize technologies such as cookies, pixels, GIFs (“Cookies”) to improve your user experience during your use of our websites and applications. The use of these technologies is in accordance with the Law and other related regulations that we are subjected to.
For further information regarding cookies, please refer to the Türk Hava Yolları Anonim Ortaklığı Cookie Privacy Notice located at https://www.turkishairlines.com/en-tr/legal-notice/privacy-policy/cookies
8. Use of digital platforms
Your personal data may be processed while your use of Digital Platforms to manage and operate the Website, to perform activities for optimizing and improving the user experience related to the Website and Application, to detect in what ways the Website is being used, to support and enhance the use of location based tools, to manage your online accounts and to inform you about the services offered near you.
In case you desire to benefit from the offered product and services, your personal data will be processed only to make you get such product and services.
9. Use of CCTV (Closed Circuit Television)
When you visit our company premises, your visual and audial data may be obtained via CCTV and may be preserved only for a period necessary to fulfill the following purposes. With the use of CCTV, prevention and detection of any criminal act incompatible with the law and company policies, maintaining the security of company premises and equipment located within the premises, protection of visitors’ and workers’ well-being is pursued. All necessary technical and administrative measures will be taken by us regarding the security of your personal data obtained via CCTV.
10. Rights of the data subjects
In accordance with Article 11 of the Law, data subjects are entitled to the following rights:
11. The exercise of rights by the data subjects
You can easily use your rights mentioned above and easily communicate the related requests to us via contact information below.
Data subjects’ requests concerning the above-listed rights shall be concluded by us within thirty days at the latest, in accordance with the limitations provided by the Law.
In principle, data subject requests shall be concluded free of charge. However, Turkish Airlines reserves its right to demand a fee from the tariff specified by the Board, in case the request requires additional costs.
Our Company may request certain information from the data subject in order to determine that the applicant is in fact the Data Subject, and additional questions can be directed to the applicant to clarify matters regarding the applications.
Türk Hava Yolları Genel Yönetim Binası
Atatürk Havalimanı, Yeşilköy, 34149 İstanbul
00 90 212 463 63 63
00 90 212 465 21 21
12. Data security
We take all appropriate technical and organizational measures to safeguard your personal data and to mitigate risks arising in connection with unauthorized access, accidental data loss, deliberate erasure of or damage to personal data.
In this respect our Company;
Your booking information or flight itinerary may be disclosed to the appropriate customs and immigration authorities as required by law. For more information on the customs and immigration programs used by the United States authorities, please visit the following web sites:
Click to reach the Turkish Airlines Protection of Personal Data Announcement for the Processing of Identity/Passport Information.