1. Data controller
Your personal data is processed by the data controller running daddysjet.com under the Turkish Personal Data Protection Law No. 6698 (KVKK). The data controller’s company name and address will be published in this section once the legal review is complete.
- Address: to be published after the legal review
- Email: concierge@daddysjet.com
- Phone: to be published after the legal review
2. What data we collect and why
We only collect the data needed to provide the service. The table below states why each category of data is needed; we do not ask for any data that is not on the list.
| Data | Why it is needed | Legal basis |
|---|---|---|
| First name, last name, email, phone | To pass your request to the operator and send you updates about your request | Conclusion and performance of the contract |
| Date of birth, gender | Accurate preparation of the passenger list (manifest) as required by aviation regulations | Legal obligation |
| ID or passport number and expiry date | Flight manifest and border-crossing requirements | Legal obligation |
| Billing details (company name, tax office, tax number / Turkish ID number, address) | We do not collect them; the operator performing the flight issues the invoice and asks you for billing details itself | Not applicable |
| Payment details | We do not collect them; you pay on the operator’s own payment page and your card details never reach us | Not applicable |
| Travel preferences (catering, pets, accessibility) | To tailor pre-flight preparations to you | Your explicit consent |
| Account and usage data (login records, language preference, saved passengers) | To manage your account and speed up future requests | Legitimate interest |
3. Who we share your data with
Flight operator
When the operator confirms your request, information is shared only with the operator performing the flight, and only what is needed to make the contract and for the flight to take place: passenger names, dates of birth, ID/passport details and any special requests. This sharing is required by aviation regulations; the flight cannot take place without it.
Service providers
- Hosting and database: Amazon Web Services (Frankfurt, Germany)
- Email delivery: Amazon SES
- Payment: Daddy’s Jet uses no payment service; you pay on the operator’s own payment page
Competent authorities
Bodies such as the civil aviation authority, police, customs and courts, only where and to the extent required by law.
We do not share it with anyone else. We do not sell your personal data.
4. Transfers abroad
Our servers are hosted in the Frankfurt (Germany) region of Amazon Web Services. If you fly with an operator based abroad, manifest information may be transferred to that country as required by its aviation legislation. Transfers are carried out in accordance with the security measures and conditions laid down by the KVKK.
5. How long we keep your data
| Data | Retention period |
|---|---|
| Request and flight records | 10 years from the flight date (obligation to keep commercial books and records) |
| Invoice and payment records | Daddy’s Jet keeps no invoice or payment records about you; the operator keeps these under the law that applies to it |
| Account details and saved passengers | As long as your account remains open; immediately once you delete it |
| Marketing consent and communication preferences | Until you withdraw your consent |
When the period expires, the data is deleted or irreversibly anonymised.
6. Your rights
Under Article 11 of the KVKK, you may apply to us to:
- learn whether your personal data is processed and, if so, request information about it
- learn the purpose of the processing and whether the data is used in line with that purpose
- know the third parties, in Turkey or abroad, to whom the data is transferred
- request correction if the data has been processed incompletely or incorrectly
- request erasure or destruction where the legal conditions are met
- request that corrections and erasures be notified to the third parties to whom the data has been transferred
- object to an outcome against you resulting from analysis by automated systems
- claim compensation if you have suffered damage as a result of unlawful processing
You can send your applications to concierge@daddysjet.com. We will conclude your request within 30 days at the latest.
7. Cookies
We use the strictly necessary cookies the site needs to work: keeping you signed in, your language preference and security. Without them you cannot sign in or use some parts of the site.
We do not use third-party cookies for advertising or profiling. If we add analytics cookies in the future, we will ask for your consent beforehand.
8. Security
Your data is encrypted in transit (HTTPS), access to the database is restricted by authorisation and administrator actions are logged. Your passwords are stored irreversibly; no one, including us, can see your password.
Even so, no system can promise absolute security. In the event of a security breach, we will notify you and the Turkish Personal Data Protection Board within the period prescribed by law.
9. Changes
When we update this notice, we change the date at the top of the page. If there is a material change in our data processing practices, we will also inform our registered users by email.