Privacy Policy
Last updated: 11 April 2026
This Privacy Policy describes how Brothers IT Yazılım Arge ve Bilişim Hizmetleri Tic. San. Ltd. Şti. ("Brothers IT", "we", "us", or "our") collects, uses, stores, and shares information in connection with the website FlightsTo.xyz (the "Site"). By using the Site, you agree to this policy. If you do not agree, please discontinue use of the Site.
1. Data controller
For the purposes of the EU General Data Protection Regulation ("GDPR") and, where applicable, the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is:
Brothers IT Yazılım Arge ve Bilişim Hizmetleri Tic. San. Ltd. Şti.
İstiklal Mah. 344 Sok. No:4/2
Serdivan / Sakarya 54050
Türkiye
Email: [email protected]
Phone: +90 536 986 61 71
2. Scope
This policy applies only to this Site. It does not apply to third-party websites, apps, airlines, or booking providers that you may access via links or advertisements. Those services have their own privacy policies.
3. Information we collect
We may collect the following categories of information:
- Technical and usage data: such as IP address, approximate location derived from IP, browser type and version, device type, operating system, referring URL, pages viewed, time and date of access, and diagnostic logs. This helps us operate, secure, and improve the Site.
- Search and navigation context: information implied by your use of the Site (for example airport or city selections, dates, and URLs you visit on our domain).
- Communications: if you email us, we process the content of your message and your email address to respond.
We do not intentionally collect special categories of personal data (such as health data) through this Site. Please do not send us sensitive information by email unless strictly necessary.
4. Cookies, local storage, and advertising
We and our partners may use cookies, pixels, local storage, and similar technologies for essential operation, analytics, fraud prevention, and—where you consent—personalised advertising and measurement.
Essential technologies are needed for core functionality (for example remembering your cookie choice, load balancing, or security).
Advertising and measurement partners may include, depending on how we configure the Site from time to time, vendors such as Google (for example Google AdSense or related Google advertising and measurement products) and Microsoft (for example Microsoft Advertising). These partners may set or read their own cookies or device identifiers and may process data as described in their respective policies.
On this Site, advertising scripts are intended to load only after you choose Accept all on our cookie banner (or otherwise give an equivalent consent signal where implemented). If you choose Essential only, we aim not to request non-essential advertising tags from your browser.
Where required by law (including the EEA, UK, and similar jurisdictions), we will request your consent before enabling non-essential advertising cookies. You can revisit your choice using the cookie banner on the Site. You can reopen cookie preferences at any time using the Cookie settings link in the footer.
You may also use industry opt-out tools where available (for example Google's and Microsoft's ad settings pages). Blocking cookies may affect Site functionality.
5. Third-party services and processors
We rely on third parties to operate the Site, including but not limited to:
- Hosting and infrastructure providers that store or transmit Site data.
- Flight data / affiliate platforms (for example Travelpayouts / Aviasales-style APIs) to retrieve indicative fares and partner links.
- Advertising and analytics vendors as described above.
These processors may process data on our behalf and in accordance with their agreements and policies. We do not control their independent processing beyond our role as a publisher.
6. Purposes and legal bases (GDPR)
Where GDPR applies, we rely on one or more of the following legal bases:
- Legitimate interests in operating, securing, and improving the Site, understanding aggregated usage, and (where permitted) monetising through advertising, balanced against your rights.
- Consent, where required, for non-essential cookies and personalised advertising.
- Performance of a request when you contact us and we respond.
7. Türkiye (KVKK) notice
If you are located in Türkiye or Turkish law applies, you may have rights under KVKK including the right to learn whether your personal data is processed, request information, request correction or deletion where applicable, object to processing where permitted, and request data portability where applicable. You may lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu). To exercise rights, contact us at the email address above with a clear description of your request.
8. International transfers
Our service providers may process data in the European Economic Area, the United States, Türkiye, and other countries. Where GDPR requires safeguards for transfers outside the EEA/UK, we use appropriate mechanisms such as standard contractual clauses where applicable and rely on adequacy decisions where available.
9. Retention
We retain information only as long as necessary for the purposes described in this policy, unless a longer period is required by law. Server logs and analytics data may be retained for a limited period for security and debugging.
10. Security
We implement reasonable technical and organisational measures to protect information. No method of transmission over the Internet is 100% secure.
11. Children
The Site is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.
12. Your rights (EEA/UK and similar)
Depending on your location, you may have the right to access, rectify, erase, restrict, or object to certain processing of your personal data, and the right to data portability. You may also withdraw consent where processing is consent-based. You may lodge a complaint with a supervisory authority. To exercise rights, email us at [email protected].
13. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Site after changes constitutes acceptance of the updated policy where permitted by law.