Privacy Policy

This policy is unusually short for a reason. Car Hire Alanya is a comparison site, not a rental company: there is no account to open here, no card is ever typed into a page we control, and the documents a rental actually needs are handed to the supplier, not to us. What follows describes the small amount that does pass through carhirealanya.com, where it goes next, and what a visitor can demand of us at any point.

Who is answerable for this

Car Hire Alanya is the controller of the data described below and can be reached at [email protected]. Nothing else exists: no telephone line was ever set up for this brand, and the inbox is read by the same small team that publishes the pages. The moment a visitor moves onto a supplier's own booking checkout, that supplier becomes the controller for everything typed there, and its own policy governs from that point.

What a search on this site sends

Choosing a pickup point, a return point and a pair of dates sends exactly those three things to our booking technology partner, which answers with the cars available on the Alanya board for that window. The reply is also parked inside the browser itself for about five minutes, so walking from one page of the site to the next does not fire the same query twice. Our server keeps the plain access trace that every web server keeps: the address a request arrived from, which browser and device sent it, whatever page referred it, and which pages were opened.

What we never receive

Driving licence numbers, passport or identity card details, dates of birth and card data are entered on the supplier or booking partner checkout, which runs on their systems and not on ours. None of that reaches Car Hire Alanya, and we could not produce it if asked. If a visitor writes to us by email, we hold the message and whatever they chose to put in it, and nothing more.

Why we are allowed to do it

Running a search a visitor asked for and replying to an email both rest on two grounds: our legitimate interest in operating a working comparison service, and the steps a visitor asks us to take before any rental contract exists. Access logs exist so that the site stays up and abuse can be spotted, which is where our legitimate interest in security sits. We run no advertising, no profiling and no measurement product, so there is nothing here that would need a consent banner to justify it.

Your data reaches Turkey, and that matters

This is the part a European visitor should read twice. The cars on this site are operated by suppliers based in Turkey, which is not part of the European Economic Area and holds no adequacy decision from the European Commission. A booking in Alanya cannot physically happen without the supplier receiving the booking details, so where that transfer takes place it rests on Article 49(1)(b) of the GDPR: the transfer is necessary to perform a contract concluded at the request of the person it concerns. Once the data is there it is handled under Turkish data protection law, Law No. 6698, which gives its own access and correction rights against the supplier. Anyone who prefers not to have their details leave the EEA should not complete a booking, and nothing is sent by simply reading the site.

Who else sees anything

Three sets of hands, and no others. Our booking technology partner, because that is how live prices and real cars appear on the page. The supplier a visitor chooses, because it is the one handing over a car. Our hosting provider and content delivery network, which carry the traffic and absorb attacks. None of them may use what we send for their own marketing. We do not sell data, we do not trade it, and no advertising network is embedded anywhere on this site.

How long any of it survives

The cached search in the browser expires in minutes and clears itself. Server logs rotate out on a short operational cycle. An email conversation is kept while a trip is live and for a modest period afterwards, in case the same person writes back about the same booking, and is then deleted. We keep nothing on the assumption that it may be useful one day.

What you can require of us

If the GDPR or a comparable law covers you, the rights below apply. Write to [email protected] and we aim to answer within one calendar month, free of charge.

One limit worth stating honestly: a right we can exercise only covers the records we hold. Data a visitor typed into a supplier's checkout has to be requested from that supplier, and we will supply its contact details if the confirmation email no longer has them.

How it is protected, and who it is not for

Every page travels over an encrypted connection, and the few records that exist are reachable only by the people who need them to keep the service running. Nothing sent across the internet can honestly be called perfectly safe, so read this as a promise of proportionate care rather than a guarantee. Since no car can be hired without a full licence, children are not an audience for these pages and we have no reason to hold anything about one; if a child's details did arrive, say so and the record goes.

Revisions to this page

If we add a tool that touches visitor data, change partners, or the law around transfers to Turkey moves, this page is rewritten before the change goes live, and the date printed above moves with it. Nobody is notified individually, so the published version on the day of a visit is the one that governs it.

A request about your own data goes to [email protected]. The Cookie Policy lists what your browser stores, the Terms and Conditions set out who contracts with whom.