Skip to content
Total Rent a Car

PRIVACY POLICY

At Total Rent a Car we collect only what we need to rent you a car. This page explains what we collect, why, who we share it with, and what rights you have. Updated October 2026.

What we collect

  • When you book: full name, e-mail, phone, flight number and any note you add (for bookings made by phone, month and year of birth may optionally be recorded as well)
  • At vehicle handover: driving licence and passport/ID details (for the rental contract, not collected on this site)
  • While you browse: which pages you open, which advert brought you here, device and browser details
  • If you contact us by e-mail, phone or WhatsApp: your name, contact details and message

Why we collect it

  • To create and confirm your booking and hand the car over to you
  • To send your confirmation e-mail and contact you if something changes
  • To fulfil the rental contract and our legal record-keeping duties
  • To understand which parts of the site work and to spend the advertising budget sensibly

Payment details

We do not take payment online. No card number, CVV or similar payment detail is ever requested, stored or processed on this site. You pay when you collect the car.

Who we share it with

  • Our database: your booking records are held in the database running on our server in Türkiye (hosting provider: İlkbyte, Netinternet Bilişim Teknolojileri A.Ş.); an old copy of the records created up to 2 November 2026 remains with our former database provider, Supabase (France, Paris, European Union)
  • Our e-mail delivery service (Resend): booking confirmation e-mails are sent through it
  • Google (Analytics and Ads) for measurement. With your consent, cookies are used. If you decline, the Google tag still loads but sets no cookies and sends only cookieless signals, which include your IP address and the address of the page you are viewing.
  • Public authorities where the law requires it
  • Yandex Metrica (Yandex, Russia), for measuring our Russian-language pages — only if you gave separate permission for that counter. Russia is not covered by a European Commission adequacy decision.
  • İlkbyte (Netinternet Bilişim Teknolojileri A.Ş.) for hosting: the site's pages and the server functions that process your booking forms run on a server in Türkiye that we rent from this company
  • Cloudflare: bot protection in the booking form (Turnstile) and forwarding of e-mails sent to our info@ address
  • Google (Gmail, Calendar, Contacts): used to manage bookings operationally; for confirmed bookings your name, phone number and booking details are saved to the calendar and contacts list (our phone book) of our Google account, and our e-mails are kept in Gmail
  • Cloudflare, Resend and Google have their company headquarters in the United States. Our database, the site's pages and our server functions run on our server in Türkiye, and the site's content is delivered directly from that server. Until 2 November 2026 our database provider was Supabase (its contracting company is based in Singapore); an old copy of the records created up to that date remains on Supabase's infrastructure in France (Paris, European Union), and no new records are written to it. Transfers abroad are subject to the conditions of Article 9 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK); you may contact us for information.

Ad measurement and enhanced conversions

When a visitor who arrived through a Google Ads campaign completes a booking, a conversion signal is sent to Google so we can measure whether the ad worked. Together with that signal, the e-mail address you entered in the booking form is transmitted to Google in an irreversibly hashed form (SHA-256); Google uses it only to match the conversion against signed-in Google accounts and never sees the plain address. This transfer happens only if you have allowed advertising cookies in the cookie settings, and you can withdraw that consent at any time via the “Cookie settings” link in the footer.

How long we keep it

Booking and contract records are kept for ten years, as required by Turkish commercial and tax law. Correspondence and conversations you have with us by e-mail, phone or WhatsApp are kept for as long as we need them to stay in touch with you. Measurement data is deleted after twenty-six months at the latest.

Your rights

You may ask what data we hold about you, have it corrected or deleted, object to its processing, and request a copy. Just e-mail or call us; we answer within thirty days at the latest. If you find our answer inadequate, your request is refused, or you receive no answer in time, you may lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days of learning our answer and, in any case, within sixty days of your request (Article 14 of the KVKK).

Contact

Questions about this policy: info@antalyarentacarservice.com or +90 532 334 52 48. Our address is Altınova Orta Mah. Vadi Sk. No: 37, 07090 Kepez / Antalya, Türkiye.

Additional information for visitors in the EU/EEA

The main law behind this policy is Turkish Law No. 6698 (KVKK); this section gives additional information to visitors located in the European Union (EU) or the European Economic Area (EEA). If you are in the EU/EEA, you may also have the following rights under the General Data Protection Regulation (GDPR): to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable form, to object to its processing and, if you gave consent, to withdraw that consent at any time, as well as to lodge a complaint with the data protection supervisory authority in your own country. To exercise these rights you can write to info@antalyarentacarservice.com. Your data is processed by us in Türkiye; our database is hosted in the European Union (France).