1. Data controller identity
Pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”), this Privacy Notice informs data subjects about the processing of personal data by:
Data Controller: Tavaktech LTD Address: Office 106, 9 Brewers Lane, Richmond, Surrey, TW9 1HH, UK Company No.: 16563260 Email: hello@cealio.com Brand: cealio
2. Purposes of processing
Your personal data may be processed for the following purposes:
- Creating and managing user accounts on the cealio Platform.
- Receiving booking and quote requests; pricing; confirming reservations; assigning independent carriers and drivers.
- Processing payments, invoicing, accounting, and reconciliation.
- Communicating booking details, trip updates, vouchers, and support responses via email, SMS, phone, or in-app messages.
- Ensuring service quality and safety; handling complaints, ratings, and incident reports.
- Preventing fraud, abuse, and unauthorized use of the Platform.
- Fulfilling obligations under applicable legislation (including tax, consumer, and transport-related duties where applicable).
- Conducting marketing and promotional communications only where a legal basis (including explicit consent where required) exists.
- Improving Platform performance through analytics in accordance with cookie preferences.
3. Categories of personal data
Depending on the transaction, the following categories may be processed: identity; contact; customer transaction; financial/payment (typically tokenized); marketing; audio/electronic records of communications; location data related to pickup/drop-off; travel details (including flight numbers); technical/log data; and legal transaction data.
4. Method and legal basis of collection
Personal data is collected electronically via websites, apps, forms, cookies, call center / messaging channels, payment providers, and operational systems, and in limited cases physically or by email.
Legal bases under KVKK Article 5 (and Article 6 where special categories are concerned) may include:
- Explicit consent (where required, e.g. certain marketing or non-essential cookies).
- Necessity for the establishment or performance of a contract.
- Necessity for compliance with a legal obligation.
- Necessity for the establishment, exercise, or protection of a right.
- Necessity for the legitimate interests of the data controller, provided it does not harm fundamental rights and freedoms of the data subject.
5. Transfer of personal data
Personal data may be transferred domestically and, where necessary and lawfully, abroad, to:
- Independent carriers / drivers assigned to perform the transport.
- Payment institutions and banks.
- Suppliers providing hosting, cloud, SMS/email, mapping, flight information, customer support, and similar services.
- Authorized public institutions and authorities upon lawful request.
- Professional advisers bound by confidentiality.
Transfers abroad are carried out in accordance with KVKK Articles 9 and related Board decisions / mechanisms.
6. Retention period
Personal data is retained for the period required by the relevant legislation and processing purposes; thereafter it is deleted, destroyed, or anonymized in accordance with cealio’s retention and destruction policies and KVKK secondary legislation.
7. Rights of the data subject (KVKK Art. 11)
As a data subject, you may apply to the data controller to learn whether your personal data is processed; request information if processed; learn the purpose and whether it is used in accordance with its purpose; know the third parties to whom it is transferred domestically or abroad; request correction if incomplete or inaccurate; request deletion or destruction under the conditions set forth in Article 7; request notification of correction/deletion to third parties; object to results against you arising from exclusively automated analysis; and claim compensation for damage arising from unlawful processing.
Applications may be submitted to hello@cealio.com or to Office 106, 9 Brewers Lane, Richmond, Surrey, TW9 1HH, UK in accordance with the Communiqué on the Principles and Procedures for the Request to Data Controller. We will conclude your request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. If the process requires an additional cost, the tariff determined by the Board may apply.
8. Updates
cealio may update this Privacy Notice to reflect changes in processing activities or legislation. The current version is published on the Platform with the “Last updated” date.