What we collect when you book or create an account, what it is used for, who sees it, and how long we keep it.
Ali Tur Turizm Otelcilik Tic. Ltd. Şti., trading as Agne Tours, Tahılpazarı Mahallesi, Adnan Menderes Bulvarı, Beyaz Saray Apartmanı No: 27/3, Muratpaşa, Antalya, Türkiye. TÜRSAB member number 2065. For anything on this page, write to support@agnetours.com.
We collect what the journey needs: the lead passenger's name, a contact name, an email address and a mobile number, your flight number and time, the pick-up and destination addresses, the number of passengers, the vehicle you chose, any extras, and any note you add.
An account holds your email address, your name, a mobile number if you give one, and your password — stored only as a cryptographic hash, never as text anyone can read. It also keeps your bookings so you can see them again.
If you sign in with Google instead, Google sends us your email address, your name and your profile picture, and nothing else. No password is created in that case. We do not receive your Google password and have no access to anything else in your Google account.
Arranging, confirming and carrying out your transfer, reaching you about a booking, and running your account. We do not send marketing email to addresses given here and we do not add anyone to a mailing list.
Every piece of data on this page is processed for one of four reasons, and never for a fifth. Your booking and your account details are processed because a contract with you has to be concluded and carried out (Article 5/2-c of Turkish law 6698 (KVKK); Article 6(1)(b) GDPR). Invoices and accounting records are processed because the law requires us to keep them (KVKK Article 5/2-ç; Article 6(1)(c) GDPR). A keyed hash of your IP address — never the address itself — recorded when you confirm a booking, is processed to stop the form being abused by automated tools, which is our legitimate interest and is balanced against yours (KVKK Article 5/2-f; Article 6(1)(f) GDPR). Analytics cookies are processed only on your explicit consent (KVKK Article 5/1; Article 6(1)(a) GDPR), which you give or refuse in the cookie banner and can withdraw at any time.
We do not collect special categories of personal data through this website — no health data, no biometric or genetic data, no religious, philosophical or political information, no trade-union membership, and nothing about your sex life or sexual orientation. Please do not put such information into the free-text note on a booking; if you need us to know something of that kind to arrange your journey, tell us by phone instead.
The driver carrying out your journey receives only what the journey requires: the passenger name, the pick-up time and place, the destination, and a phone number for contact on the day.
Where a booking involves a hotel or another supplier, the details that booking needs are passed to them, and only those. Nothing is sold, and nothing is passed on for advertising.
The vehicle and the driver are provided by a separate company — the supplier carrying out the transport — and not by us. It receives only the details listed above, and may use them for nothing but carrying out your journey.
This website and the booking and account data collected through it are hosted with Hostinger International Ltd., Larnaca, Cyprus. The servers are in Frankfurt am Main, Germany, and the backups are held in France — both inside the European Union. There is a data processing agreement with the provider under Article 28 GDPR, and the mailbox you reach us on is run by the same provider.
Pages are delivered through that provider's content delivery network. At the network node nearest to you, technical connection data is processed — IP address, time, the address requested and the browser identification — in order to serve the page and to block abuse. Those nodes may sit outside the European Union. Your booking and account data is not stored there; it is processed only on the server in Frankfurt.
Seen from Türkiye, where this company is established, holding your data on a server in Germany is itself a transfer abroad under Article 9 of Turkish law 6698 (KVKK), and so is the use of Google Analytics, which involves Google Ireland Limited and may involve Google LLC in the United States. Those transfers cover only the hosting, mail and — with your consent — measurement described on this page. Nothing is transferred for advertising, and nothing is transferred to any other recipient.
This section is for customers in the European Union, and describes the journey your data makes in the other direction. The company responsible for it is established in Türkiye, which is why KVKK is the law that primarily governs this processing; the GDPR applies in addition, because the service is offered to customers in the EU.
The transfer takes place in Türkiye and the company carrying it out is based there. Your booking data is therefore seen by our staff in Antalya, who schedule the journey, and the driver carrying it out receives the details listed above. Where the statutory passenger report applies to your journey, we pass the details it requires to the transport company carrying you, which reports them to the Turkish U-ETDS system on its own responsibility.
There is no adequacy decision by the European Commission for Türkiye. The transfer is necessary in order to perform the transport contract concluded with you, and is made on that basis (Article 49(1)(b) GDPR). Without it the transfer you booked could not be carried out.
Each kind of record has its own period, and it is the longest obligation that applies to that record which sets it:
Everything you send this site travels over an encrypted connection (TLS). Passwords are never stored as text anyone can read — only as a cryptographic hash. Access to booking data is restricted to the staff whose work requires it, and every read of identity data is logged before it happens. The servers are backed up. If a personal data breach nevertheless occurs, we notify the Turkish Personal Data Protection Authority within 72 hours of becoming aware of it, and the people affected as soon as is reasonably possible.
Unless you consent to more, this site uses only what it needs to work: a session cookie that keeps you signed in and protects forms against cross-site request forgery, and a record of your cookie choice so you are not asked on every page. Neither carries an advertising identifier.
If you press Accept in the cookie banner, we use Google Analytics 4 to understand which pages and routes people read. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you decline, the service is not loaded at all: no request is made to Google and no measurement cookie is written.
Once you accept, the cookies _ga and _ga_<identifier> are written, with a lifetime of up to two years. The data processed is pseudonymous: the pages you open, an approximate location at country or city level, device type, browser, and the page you arrived from. Advertising features are not enabled; the advertising and personalisation signals are explicitly switched off.
The basis for this is your consent. Data may be transferred to Google LLC in the United States; Google relies on the Standard Contractual Clauses for that transfer and is certified under the EU-US Data Privacy Framework.
You can change your mind at any time using “Cookie settings” at the bottom of every page. Withdrawing deletes the measurement cookies and stops the service loading on this device again.
The chat window on this site is answered by an AI assistant, Agne Tours Support. When you use it, the text you type — together with the earlier messages of the same conversation — is sent to Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, United States, whose language model writes the reply. Anthropic acts as our processor. Nothing else is sent with your messages: not your IP address, not your account, not your booking.
Passport and ID-card numbers are recognised and held back before a message leaves our server. Even so, please type only what your question needs — a destination, a date and a hotel name are enough. We do not keep a copy of the conversation.
The basis is that you asked us about a transfer before booking one (KVKK Article 5/2-c; Article 6(1)(b) GDPR). Your messages are processed in the United States; that transfer is covered by the Standard Contractual Clauses in Anthropic's data processing terms. Using the chat is optional: the booking form, e-mail and WhatsApp all work without it.
When you send us a request through a form on this site, a member of our office may have the same AI service (Anthropic, PBC, United States, acting as our processor) write a draft of the answer. Only the content of the request is sent: what you asked for, your dates and your message. Your name, e-mail address and phone number are not sent, and any contact details or ID numbers inside your message are removed first. A member of our team reads, corrects and sends every reply; nothing is decided or sent automatically. The legal basis and the safeguards for the transfer are the same as for the chat assistant.
Under Article 11 of Turkish law 6698 (KVKK), and under Articles 15 to 22 GDPR if you are in the European Union, you have the right to:
Where processing rests on your consent — which on this site means analytics cookies and nothing else — you can withdraw it at any time, using “Cookie settings” at the bottom of every page. Withdrawing does not affect anything done before you withdrew.
Write to support@agnetours.com and say what you want. There is no form to fill in. Please write from the email address the booking or the account was made with, or give us enough detail to identify you with confidence — we would rather ask you a second question than hand your booking details to someone else.
We answer within thirty days at the latest, and free of charge. If a request takes a separate cost to fulfil — a copy on physical media, for instance — we will tell you the amount before doing anything.
If our answer does not satisfy you, or if thirty days pass without one, you may complain to the Turkish Personal Data Protection Authority (KVKK) at kvkk.gov.tr. The complaint must be made within thirty days of our answer, and in any case within sixty days of your original request. If you are in the European Union you may also complain to the supervisory authority of the country you live or work in, or where you believe the problem occurred.
Last updated: 28.09.2026
Tell us where and when — our support team will send you a price. No account, no obligation.