Privacy and data protection
Who we are
Your data controller is PARELO Turizm Teknoloji Sanayi Ticaret Ltd. Şti., Esenler, Istanbul, Türkiye.
What we collect
Only what you send us: name, phone number, travel dates, family size, children's ages and your flight number. We do not keep passport details in our booking system; only the passport number is written on the invoice, as the law requires for foreign guests.
Why
To prepare your offer, make your bookings, stay in touch during your trip, and meet legal duties such as invoicing. Legal basis: entering into and performing a contract (KVKK Art. 5/2-c) and legal obligations (Art. 5/2-ç); no consent is needed for this.
Who we share it with
Only those who serve you: the hotel, your driver and the restaurants booked, and only what they need. We never sell your data or use it for advertising.
How long
Requests that do not become a booking are deleted after 6 months. Booking and invoice records are kept for the period required by Turkish law, then deleted.
The app (app.parelo.net): technical records
The app files are delivered through Cloudflare Pages. When you open the app, your IP address, browser and device type, the time of access and the Cloudflare data centre (edge) that answers you are processed briefly on Cloudflare servers outside Türkiye (including the USA), to deliver the content and protect against attacks (Art. 5(2)(f)). Your request, account and contract details do not pass through Cloudflare; they go directly to our server in Türkiye, which does not record your IP address.
E-mail
E-mails you send to PARELO addresses (kvkk@, support@, partners@ and info@parelo.net) are currently stored on a mail server outside Türkiye (Hostinger; servers in France and Germany, Hostinger staff may access them from outside the EU). We plan to move this mailbox to Türkiye. The login codes, contracts and notices we send you come from our own server in Türkiye and do not pass through this mailbox. If you prefer your data-protection request not to leave Türkiye, use our registered e-mail (KEP, parelo@hs01.kep.tr) or our postal address.
Your account in the app
If you open an account we process your e-mail address (encrypted), account language, sign-up and last sign-in dates and the packages you save. Saved packages hold no names or children's ages. We do not store the login code itself. The purpose is to run your account and show you the requests made with the same e-mail (Art. 5(2)(c)). "Delete account" removes your account, sessions and saved packages at once. Your requests are not removed by this; for them, use the deletion route under "Your rights".
Social media
If you write to our Instagram, Facebook, TikTok or Snapchat accounts, we process your message and user name to answer you (Art. 5(2)(c) and 5(2)(f)). These platforms are separate controllers for the data they process and keep it outside Türkiye; we see page statistics (such as reach and likes) only in aggregate. Please do not write passport, card or health details in these channels; use the app to book.
Automated decisions
We do not take a decision that has legal effects on you by automated means alone. Prices come from the written price table; our team checks requests and partner applications. A short-term request limit is applied to prevent abuse; this is not an assessment of you.
Children
The app is not directed at children; it is meant for adults (18 and over) planning a family trip. For children only the number and age group are entered; we do not ask for children's names, dates of birth or photos.
Your rights
You may ask to see, correct or delete your data under Article 11 of the Turkish Personal Data Protection Law (KVKK) by writing to info@parelo.net. Contact: kvkk@parelo.net, KEP (parelo@hs01.kep.tr) or our postal address. If your application is refused, you find the answer insufficient, or there is no answer within 30 days, you may complain to the Personal Data Protection Board (KVK Kurulu) within 30 days of learning the answer and in any case within 60 days of your application (KVKK Art. 14).
Last updated: 28 October 2026
