As Turkish Airlines (hereinafter to be referred to as “THY”, the “Company” or “We”), we pay the utmost attention to the lawful processing of the personal data pertaining to our customers to which we provide Turkish Cargo products and services. We have prepared this Privacy Notice on the Protection and Processing of Personal Data by Turkish Cargo (the “Privacy Notice”) in order to ensure compliance with the applicable national and international legislation, in particular the Law No. 6698 on the Protection of Personal Data (the “Law”) and the European Union General Data Protection Regulation (“GDPR”) (Regulation (EU) 2016/679).

Ensuring the security of the personal data pertaining to our customers is at the forefront of our work. Therefore, in order to prevent any unlawful access to personal data or leakage thereof and to ensure the secure retention of personal data relating to our customers to which we offer Turkish Cargo products and services, such customers’ data are only transferred to trusted business partners, suppliers, legally authorized public institutions and private persons on a minimum level, by taking necessary security measures in accordance with the legislation in force.
Transparency is one of our most important subjects in the field of personal data protection. In this respect, we have prepared this Privacy Notice in order to provide our customers with all necessary information while we are processing personal data for the purposes of compliance with our legal obligations and to ensure a better customer experience. Detailed information regarding the types of personal data and the purposes for processing personal data are elaborated under the sections on “Which Personal Data Do We Process?” and “For Which Purposes Do We Process Your Personal Data?”.

Another subject that we also pay close attention to is the customers’ right to have control over their personal data. We implement measures to ensure that our customers manage their preferences regarding their own personal data and highly respect our customers’ preferences. In this regard, you may convey your requests to our party through the communication channels listed under the section on “The Exercise of Rights by the Data Subjects”, and detailed explanations regarding this matter are provided in the section on “The Rights of the Data Subjects”. The terms used in this Privacy Notice are defined in the section on “Definitions”.

Data security, transparency and individuals’ right to have control over their personal data are fundamentals for us in ensuring compliance with the Law. In this respect, detailed information regarding the processing of your personal data are presented to your attention within this Privacy Notice.

1. How Do We Collect Your Personal Data?

This Privacy Notice contains our statements and explanations concerning the processing of personal data relating to our customers and other natural persons, who come into contact with us, in compliance with the provisions of the national and international legislation, particularly the Law.

We reserve the right to make changes to this Privacy Notice in order to provide up-to-date information concerning practices and legal regulations relating to the protection of personal data. Notwithstanding, data subjects will be informed by appropriate means in the event of a substantial change to the Privacy Notice.

This Privacy Notice has been prepared in order to provide information concerning which personal data Turkish Airlines process within the scope of its commercial activities, the purposes for which such data are processed, the parties to whom personal data are transferred and the purposes for such transfer

Our Company collects your personal data through the agencies authorized for sale of Turkish Cargo products and services, sales offices, Turkish Cargo website, social media accounts, e-mail, mail, CCTV, cookies and other communication channels, in audio, electronic or written form, in accordance with the conditions for processing of personal data as specified in the Law, for the purposes as set forth in this Privacy Notice.

2. Which Personal Data Do We Process?

Personal data which are processed by our Company may differ in accordance with the nature of the legal relationship established with our Company. In this respect, the categories of personal data collected by our Company through all channels, including digital environments, are as follows:

3. For Which Purposes Do We Process Your Personal Data? What Is Our Legal Basis For Processing of Your Personal Data?

As per the Law, personal data can only be processed in the presence of at least one of the conditions set forth under Articles 5 and 6 of the Law and/or as required by international legislation. In this respect, as Turkish Airlines, we may rely on different legal bases for processing of our customers’ personal data, including: i) being directly related to the conclusion or fulfillment of a contract (fulfillment of cargo services and the provision of associated services); ii) the fulfillment of our obligations under national and international regulations in force; and iii) our legitimate interests, provided that such interests do not have an adverse impact on our customers’ fundamental rights and freedoms.

In addition to the above-listed conditions for processing personal data, we may request your explicit consent to the processing of your personal data. If this is the case, personal data will be processed limited to the scope of your freely given explicit consent. You may revoke your explicit consent at any time.
In this regard, your personal data will be processed by Turkish Airlines, within the framework of national and international regulation, in accordance with the conditions for processing personal data set forth under Articles 5 and 6 of the Law and within the scope of the below-listed purposes:

4. Transfer of Personal Data

In accordance with the aforelisted purposes, your personal data may be transferred to our suppliers and business partners from which we receive support for the establishment, execution and termination of our relationship with your party. Your personal data may also be transferred to public institutions and private persons authorized by law within the scope of their authorizations. In such cases, our Company takes all precautionary measures to ensure that the parties carry processing and transfer activities in accordance with the rules stated in this Privacy Notice and other related regulations that we are subject to.

Personal data may be transferred to business partners, suppliers, public institutions and private persons authorized by law pursuant to conditions and purposes of processing personal data as stated under Article 8 and 9 of the Law, and may be transferred abroad, limited with the specified purposes and in accordance with the principles and procedures stated under Article 9 of the Law and the decisions of the Personal Data Protection Board.

Your personal data may only be transferred abroad where:

5. Retention of Personal Data

Our company determines the retention periods by taking into account of the applicable law and the purposes for data processing. In this respect, where applicable, we particularly consider the issues of period of limitation in terms of legal obligations regarding the processing of personal data. Once the purpose for processing personal data disappears, unless another legal reason or basis allowing the retention of the personal data exists, data will be deleted, destroyed or anonymized.

6. Principles Relating To Personal Data Processing

Our Company acts in accordance with the following fundamental principles regarding the processing of personal data: “Acting in accordance with the law and in good faith”, “Accuracy and Being Up-to-date”, “Processing for specific, explicit and legitimate purposes”, “Being adequate, relevant and limited to the purposes”, “Retention as stated in the applicable law or as long as necessary for the relevant purpose”.

7. Notification about Commercial Electronic Messages

Your personal data may be processed in order to provide information about our services, to promote our goods and services and to inform you about our campaigns in accordance with the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages. In accordance with the applicable legislation, your commercial electronic message permissions shall be registered on the Message Management System (MMS). Within this scope, contact address (phone number or e-mail address), permission date, communication channel, recipient type and permission source data will be shared with the MMS. You can visit https://iys.org.tr for detailed information on MMS.

8. Use of cookies

As Turkish Airlines, we utilize technologies such as cookies, pixels, GIFs (“Cookies”) to improve your user experience during your use of our websites and applications. The use of these technologies is in accordance with the Law and other related regulations that we are subject to.
For further information regarding cookies, please refer to the “Turkish Cargo Cookie Privacy Notice” at https://www.turkishcargo.com.tr/en/privacy-policy

9. Use of CCTV (Closed Circuit Television)

When you visit our Company premises, your visual and audial data may be obtained via CCTV and may be stored only for a period necessary to fulfill the following purposes; prevention and pursuit of any criminal and anti-social actions incompatible with the law and company policies, maintaining the security of company premises and equipment located within the premises, protection of visitors’ and workers’ well-being. All necessary technical and administrative measures will be taken by our Company regarding the security of your personal data obtained via CCTV.

10. Rights of data subjects
In accordance with Article 11 of the Law, data subjects have the following rights against the data controller:

11. Exercise of rights by data subjects

Data subjects’ requests, in accordance with the limitations provided by the Law, concerning the above-listed rights shall be concluded by our Company within thirty days at the latest, In order for third parties to make an application on your behalf, the person to make an application on your behalf should hold a special power of attorney which is issued by a notary public on his/her behalf.

In principle, your applications shall be concluded free of charge. However, our Company may charge the fee designated by the Personal Data Protection Board if such is designated thereby.

Our Company may request certain information from the data subject in order to determine that the applicant is in fact the Data Subject, and additional questions can be directed to the applicant to clarify matters regarding the applications.

In order to exercise your aforelisted rights, you may contact us through the following contact details:

Türk Hava Yolları A.O. Genel Yönetim Binası Yeşilköy Mah. Havaalanı Cad. No:3/1 34149 Bakırköy/İstanbul
📞 00 90 212 463 63 63


12. Data security

We take appropriate technical and organizational measures to safeguard your personal data and to mitigate risks arising in connection with unauthorized access, accidental data loss, deliberate erasure of or damage to personal data.
In this respect:

13. Definitions