Legal
KVKK Lighting Text
ONYHUB LIGHTING METU RELATED PROCESSING PERSONAL DATA
Version: 2
Period Date: 2026-08-11
Updated On: 2026-08-11
Within the scope of the Personal Data Protection Law No. 6698 (“KVK” or “Kanin”), this Lighting Text has been prepared to inform you about the processing of your personal data.
OnyHub acts as a data controller officer under the KVKK in terms of processing, booking processes, managing customer relations, carrying out payment and financial processes, providing platform and information security and other data processing activities within its scope.
The transfer or similar services purchased through OnyHub platform can be transferred to other people who are involved in the realization of the necessary personal data, related agent, transfer company, driver or service.
This Lighting Text is the general purpose of information about personal data processing activities performed by OnyHub.
1. DATA RESPONSIBLE
Within the scope of KVKK, data controller for personal data processing activities performed by OnyHub:
Commercial Title: Onomy Yönetim Danışmanlığı Ltd. Şti.
Brand: OnyHub
MERSİS No: 0643063831900001
Tax No: 6430638319
Address: Yalı Mahallesi Kadir Sok. 34873 Kartal - İstanbul
KEP Address: onomydanismanligi@hs06.kep.tr
Phone: 05468871069
Website: https://onyhub.com
OnyHub acts as a data controller adjective in the activities determined by which purposes and which means of personal data under its own activities.
In the reservations performed on OnyHub platform, the personal data required for the fact of the service may be transferred to the relevant agent, transfer firm, driver or other persons who are involved in the realization of the service.
This person or organizations are evaluated according to the nature of the concrete processing activity of independent data processing activities performed by determining their purpose and tools with data processing activities determined by OnyHub.
2. 2. SCOPE OF LIGHTING METHOD
This Lighting Text;
- OnyHub visit the website,
- Using OnyHub platform,
- members of OnyHub,
- reservation,
- purchasing transfer or similar service,
- with information such as passengers or persons in booking,
- contact customer service,
- Commercial or operational communication with OnyHub
The purpose of informing the processing of personal data by OnyHub.
If the transaction is made on behalf of another person during the booking or the addition of other passengers to the reservation may be subject to the processing of the personal data of other real persons with information on the booking.
If the person who has booked the personal data of other people is transferred to OnyHub, it is necessary to inform the relevant people about this transfer and processing, and to provide relevant legal conditions when necessary.
In case of publishing a special lighting text in terms of a specific service or processing, the corresponding special text can also be applied.
3. PERSONAL DATA CATEGORIES FOR BUSINESS
Your personal data is processed according to the nature of the used service and the processing performed and to the extent necessary.
The processing of the data specified below in terms of each user is not subject.
3.1. Identity Information
According to the nature of the transaction and the requirements of the relevant legislation;
Name,
Home
Date of birth,
Information required for authentication,
T.C. ID number or other identification information in cases required by legislation Home
workable.
The processing of ID information is limited to the scope required by the relevant service or legal obligation.
3.2. Contact Information
Phone number,
Email address,
Address
Other contact information required for the realization of the service Home
workable.
3.3. Reservation and Transaction Information
Reservation / PNR number,
Reservation date,
Transfer date and time,
Purchase point,
Arrival point,
Number of passengers,
Vehicle or service type,
Flight number,
Flight date and time,
Reservation status,
Cancellation and change information,
Return information,
No-show information,
Special requests,
Reservation notes,
Other information required for the realization of the service
workable.
3.4. Financial and Payment Information
Within the scope of booking and payment operations;
Payment amount,
Currency,
Transaction date,
Payment method,
Payment status,
Return information,
Order / reservation number,
Payment reference,
Other information required for financial transactions
workable.
Card information is not intended to be stored directly by OnyHub.
Payment transactions can be performed via payment infrastructures and payment service providers used by OnyHub. OnyHub can take the necessary transaction information for the execution of the payment process, checking the payment status, understanding, accounting and execution of the refund processes when necessary.
In terms of data processing activities carried out under the own activities of payment service providers, information about the protection of the respective provider’s own personal data can also be applied.
3.5. Transaction Safety Information
To ensure the safety of platform, user accounts and transactions;
IP address,
Session information,
Input and output records,
User account movements,
Security logs,
Device information,
Browser information,
Operating system information,
Authentication and security records,
Records on technical error and security events
workable.
Passwords are protected by safe technical methods and stored as open text.
3.6. Platform Use Information
Visited pages,
Features used,
Transaction movements on the platform,
User preferences,
Interaction information,
Device and browser information,
Performance and error information Home
workable.
OnyHub Cookie Policy may be applied in terms of data obtained through Cookies and similar technologies.
3.7. Transfer and Location Information
If necessary for the realization of the service;
Purchase point,
Arrival point,
Transfer fee,
Location to perform the service,
Other location information specified in the booking,
The necessary status information for the realization of flight information and flight service Home
workable.
Location and transfer information are limited to the necessary scope for the realization of the service.
3.8. Customer Services and Communication Records
If you contact OnyHub;
Request and complaint records,
Email correspondence,
Support requests,
Communication records related to booking,
Contact date and time,
Information on the outcome of the request
workable.
In case of call registration, this may also be reported in the relevant communication channel.
3.9. Marketing and Permission Information
If the required legal conditions are available;
Commercial communication preferences,
Contact permissions,
Campaign and bid preferences,
Permission or rejection records,
Permission date and source
workable.
3.10. Special Qualified Personal Data
OnyHub does not require special qualified personal data as a rule for the realization of the service.
However, if there are special qualified personal data that is voluntary for the realization of the service by the user or is necessary to process the quality of the service, this data is processed only in accordance with the conditions prescribed in the KVKK and to the extent necessary.
For example, the information on mobility or special transportation needs can be processed to the extent necessary for the provision of the requested service.
4. METHODS OF PERSONAL DATA
Your personal data;
OnyHub website,
OnyHub platform,
Membership and account forms,
Reservation forms,
Payment processes,
Customer service,
Email,
Phone
SMS and similar communication channels,
Cookies and similar technologies,
Server and security logs,
Technical infrastructure systems,
Member agents and service providers,
Official public institutions and organizations
It can be collected through electronic or non-automatic methods when necessary.
As your personal data can be received directly from you, it can also be obtained from agents or service providers operating onyHub platform within the scope of the realization of the reservation or the provision of the service.
In case of obtaining personal data from third parties, the necessary information may be made under the KVKK according to the nature of the processing activity.
5. PROCESSING PURPOSES OF PERSONAL DATA
Your personal data may only be processed for the following purposes as required for the related processing activity.
5.1. Membership and Account Management
Creating a user account,
Validation of the account,
Providing account security,
Update user information,
Managing the account.
5.2. Reservation and Service Management
Create a reservation,
Validation of booking,
Management of booking,
Organizing transfer service,
Following the booking status,
execution of changes and cancellation transactions,
Completion of the service.
5.3. Integration of Transfer Service
The necessary personal data for the realization of the requested service may be transferred to the relevant agent, transfer firm, driver or other persons who are involved in the realization of the service.
This transfer is limited to the data required for the realization of the service.
For example, if the driver does not need to see the customer's email address, this information will not be transferred to the driver.
5.4. Payment, Return and Accounting Processes
realization of payment transactions,
Checking the payment status,
execution of return transactions,
Keeping financial records,
Billing,
execution of accounting processes,
The realization of absolute operations.
5.5. Customer Service
Answering questions,
Dissolving booking problems,
Evaluation of requests and complaints,
Providing after-service support.
5.6. Information Security and Poor Use
Prevention of unauthorised access,
Providing account security,
Detection of fraud and abuse,
Review of suspicious transactions,
Protection of system and network security,
Detection and prevention of cybersecurity events.
5.7. Legal and Regulatory Disputes
fulfillment of tax and accounting obligations,
Billing,
Meeting the demands of the competent institution,
Determination of court and official authorities,
Fulfillment of information and document retention obligations,
fulfillment of other legal obligations.
5.8. Treating Legal Procedures
Management of disputes,
Evaluation of legal claims,
Protection of rights,
Formation of evidence and evidence,
execution of case and execution processes.
5.9. Processing and Development of the Platform
Measuring platform performance,
Detection of technical errors,
Development of user experience,
Development of new features,
Increase system capacity and reliability,
Analyze usage trends.
The data that may not be anonymized or associated with the user ID in such activities is preferred.
5.10. Marketing and Commercial Communication
In case of the necessary permission and legal conditions;
Campaign
Discount,
Promotion,
New service announcements,
Personalized offers,
Marketing communications Home
sent.
The use of the contact information processed for the provision of the service is evaluated in the scope of the legislation relating to the realization of the reservation.
Law on Regulation of Electronic Commerce No. 6563 in terms of commercial electronic message and the permission and rejection mechanisms prescribed in the relevant legislation are applied.
6. LAW SEBEPS OF PROCESSING PERSONAL DATA
Your personal data can be processed based on a or several of the legal conditions prescribed in Article 5 of KVKK according to the nature of the data processing activity performed.
6.1. Clear Preview in Laws
The data processing activities clearly prescribed in the legislation can be realized based on the relevant laws regulations.
6.2. Provision of Contract or Directly Concerning the Subject
The creation of booking, the organization of the service, the realization of the transfer service, the provision of customer support and the necessary personal data for the completion of the service can be processed by based on this legal reason.
6.3. Fulfillment of legal burden
Personal data may be processed in order to fulfill tax, accounting, billing, registration and other legal obligations.
6.4. A Right Plant, Use or Protection
Personal data may be processed in order to manage legal disputes, enforce case and execution processes, maintain evidence and protect rights.
6.5. Meşru Menfaat
For purposes such as the prevention of platform security, fraud and abuse, the safe processing of systems and the development of quality of service, personal data may be processed based on the legal cause of legitimate interest, with the registration of the fundamental rights and freedom of the relevant person.
6.6. Open Riza
Open consent is received from the relevant person in cases where the explicit consent is required within the scope of KVKK or the relevant legislation.
Open consent is not used as a legal basis of data processing activities that are not required by explicit consent.
In terms of marketing and commercial electronic message activities, the allowed and rejection mechanisms are applied in the relevant legislation.
7. ACCEPTIONAL DATA
Your personal data may be transferred to the extent necessary for the realization of processing purposes and in accordance with the relevant legislation.
The principle of data minimization is essential in data transfers performed by OnyHub. The transferred data is limited to the data required for the purpose of the related service or processing.
7.1. Member Agencies and Transfer Companies
Information required for the acceptance of booking, planning and realization of the transfer may be transferred to the relevant agent or transfer company.
Transfer information according to the nature of the transaction;
Name,
Home
Phone
Transfer date and time,
Buy and destination points,
Flight information,
Number of passengers,
Reservation information,
Other information required for the realization of the service
can be limited to.
7.2. Drivers
Only necessary personal information is transferred to the driver for the actual realization of the transfer.
The information transferred to the driver is limited to the information required to be carried out securely and accurately.
7.3. Other Service Providers
Personal data may be transferred to the relevant service providers if necessary for the realization of the transfer service.
7.4. Payment Service Providers
The necessary information for the execution of payment, payment verification, consensus and refund transactions may be transferred to the payment service providers used by OnyHub.
7.5. Technology and Infrastructure Service Providers
Used for processing the platform;
Hosting
Server,
Cloud infrastructure,
Database,
Email,
SMS,
Notice,
Security,
Technical support,
Error monitoring,
Analysis,
Performance Measurement
With third parties that provide services, personal data required by the relevant service may be shared.
7.6. Accounting and Finance Service Providers
Information required for the execution of billing, accounting, finance and consensus processes can be transferred to authorized accounting, financial consultancy and financial service providers.
7.7. Official Institutions and Organizations
If your personal data is authorized by law or has a legal obligation;
Courts,
Executive and judicial authorities,
Sleeves,
Tax administrations,
Regulatory and controller institutions,
Other authorized public institutions and organizations
can be transferred.
8. DATA PROCESSING ACTIVITIES OF CENTIES, TRANSFER COMPANIES AND OTHER SERVICES
OnyHub brings together agents and service providers that offer transfer service with customers as a marketplace platform.
The necessary personal data of the customer may be transferred to the relevant agent, transfer company, driver or other service providers to the client to be able to perform the booking and serve the actual.
In data transfers performed by OnyHub, limitedness is essential to data categories required for the realization of the service.
Independent data processing activities performed by determining their purpose and tools with data processing activities performed in accordance with the purpose and instructions determined by OnyHub of the relevant agent or service provider.
In terms of its own independent activities of the relevant organization, it is responsible for carrying out the obligations under the KVKK in terms of data controller or any other adjective in the relevant legislation.
For example, using a agent’s personal data on the client’s onyHub is evaluated as different data processing activities that use this data for its own independent marketing activities.
OnyHub fulfils its obligations under KVKK in terms of its own data processing activities.
9. PERSONAL DATA ACCREDITATION OF SOFT
OnyHub can benefit from technical infrastructure and service providers that run data abroad or abroad within the scope of the platform to operate.
In this context;
Cloud and server services,
Software services,
Email and communication services,
Security services,
Technical support,
Error monitoring,
Analysis and performance services,
Customer support services,
Payment and financial technology services Home
If services are offered by providers located abroad, personal data required by the service may be processed or transferred abroad.
Personal data transfer abroad is carried out in accordance with the conditions prescribed in Article 9 of the KVKK No. 6698.
according to the nature of the transfer and the legislation in force on the relevant date;
Qualification decision,
Proper assurances,
Standard contracts,
Connector company rules,
Other transfer mechanisms prescribed in the law
available.
OnyHub aims to keep limited to data categories required for the realization of the relevant service of personal data transferred abroad and to take enforceable technical and administrative security measures.
In terms of data processing processes carried out within the scope of their activities of service providers abroad, the related service provider’s own privacy and data protection texts can also be applied.
10. TERMS AND CONDITIONS OF PERSONAL DATA
OnyHub retains personal data for the time required for the purpose of processing personal data and the storage times prescribed in the applicable legislation.
Personal data for booking and service operations;
Completion of the Service,
Conclusion of cancellation and return processes,
Answering customer demands,
execution of accounting and finance transactions,
Management of legal disputes,
fulfillment of relevant legal obligations
It can be stored for the required time.
The purpose of processing is deleted, destroyed or anonymized in accordance with the relevant legislation, which does not have any other legal reason requiring termination and storage.
Data that should be stored due to tax, accounting, billing, legal disputes, proof or other legal obligation is maintained only for the time required by the relevant obligation.
In case of anonymity, the data is not associated with a certain or identifiable real person.
Data brought anonymous can be used for purposes such as statistical analysis, reporting, performance assessment and platform development, as it loses personal data qualities.
Detailed basics regarding the retention and destruction processes of personal data may also be edited under OnyHub Personal Data Storage and Imha Policy.
11. 11. SAFETY OF PERSONAL DATA
OnyHub applies technical and administrative measures to ensure that personal data is processed and accessed in violation of the law under Article 12 of KVKK and to ensure that personal data is maintained securely.
In this context;
Access control,
Authorization,
User account security,
Password security,
Limiting data access,
Security logs,
System and network security,
Backup,
Update and security controls,
Supplier security,
Personnel awareness,
Data breach intervention processes Home
measures can be applied.
Personal data is limited to access, task and authorization requirements.
The card information in payment transactions is based on the fact that the card information is not stored directly by OnyHub and the execution of payment transactions through secure payment infrastructures.
12. TEKNOLOJİS AND GAS TECHNOLOGY
OnyHub website and platform;
Management of sessions,
Providing safety,
Development of user experience,
Performance measurement,
Analysis,
Marketing where required
Cookies and similar technologies can be used for purposes.
The purpose of Cookies, type, duration of use, provider and user preferences can also be explained under the OnyHub Cookie Policy.
User preferences are taken when required by legislation in terms of non-necessary cookies.
In case of data transfer abroad through cookies, the transfer is carried out in accordance with the provisions of the KVKK data transfer abroad.
Cookie Policy: https://onyhub.com/pages/cookie-settings
12. July MARKETING AND COMMERCIAL ELECTRONICS
By OnyHub you can send campaigns, discounts, promotions, service announcements and similar commercial communications.
Law and related legislation provisions are applied on the Regulation of Electronic Commerce No. 6563 in terms of commercial electronic messages submissions.
No commercial electronic messages are sent in cases where required permission or legal condition are not required.
Users may stop receiving commercial messages using ret or subscription available in commercial electronic messages sent.
Commercial communication preferences and records related to them may be stored for the necessary time for the fulfillment of obligations arising from the relevant legislation and prove the permissions.
14 July AUTOMATIC GARDING AND PROFILE
OnyHub platform;
Price calculation,
Operational planning,
Security,
Prevention of abuse,
Performance analysis,
Evaluation of service quality,
Development of platform
automatic systems can be used for purposes.
By OnyHub, it is not intended to give you a decision that gives you legal or similar results by analyzing your personal data through exclusively automated systems.
In case of a decision on the person concerned about automated processing, the obligations prescribed in the relevant legislation are also applied.
15. RIGHTS OF PERSONAL DATA OWNER
By applying onyHub as personal data holder under Article 11 of KVKK;
Learn if your personal data is processed,
Request information about it if your personal data is processed,
Learn whether your personal data is used in accordance with the purpose and purpose of processing,
Knowing third parties to whom your personal data is transferred inside or abroad,
Do not want to correct your missing or incorrect processed personal data,
If you want to delete or destroy your personal data under the conditions prescribed in KVKK,
To request that correction, deletion or destruction processes are notified to third parties where your personal data is transferred,
To object to the emergence of a result against you by analyzing the data exclusively through automated systems,
To request that your personal data is damaged due to unlawful processing
You have the rights.
These rights may be used within the terms and exceptions prescribed in the relevant secondary legislation.
16. STARTED TO PERSONAL DATA Home
You can contact OnyHub in writing to use your rights under Article 11 of KVKK or with other application methods set by KVKK.
Application Email Address:
Application Address: Yalı Mahallesi Kadir Sok. 34873 Kartal - İstanbul
KEP Address: onomydanismanligi@hs06.kep.tr
Phone: 05468871069
Application;
Name and surname,
Contact information,
Subject of the request,
Statements about the talet,
Information and documents that support the request
It facilitates the evaluation of the request.
OnyHub evaluates applications in accordance with the procedures and principles prescribed in the relevant legislation and results in the legal period.
The fee for the application may be requested if the application also requires a cost.
17. September UPDATE OF LIGHTING METN
OnyHub;
Activities,
In technologies used,
Service providers,
In personal data processing processes,
Data transfer processes or
In the relevant legislation
Due to the changes occurring, this may update the Text of Lighting.
The current text is applied from the date published onyHub website or on the platform.
In case of significant changes, information may also be provided by appropriate methods.