KVKK Notice

Identity of the data controller

Under Turkish Law no. 6698 on the Protection of Personal Data (“KVKK”), the data controller is the business identified below.

Categories of personal data processed

Special category data is not requested. Health information you write voluntarily in a booking note (for example an allergy) is passed only to the relevant operator so the tour can be run safely.

Purposes of processing

• Creating the membership record and managing the account
• Receiving a booking request, passing it to the operator and following it up
• Handling requests and complaints, carrying out communication activities
• Running information security processes, preventing fraud and abuse
• Meeting financial and legal obligations, retention and archiving
• Where you have given explicit consent: measurement/statistics and commercial e-mail

Legal grounds

• Art. 5/2-a — Expressly provided for by law
• Art. 5/2-c — Directly related to the formation or performance of a contract
• Art. 5/2-ç — Necessary to fulfil a legal obligation
• Art. 5/2-e — Necessary for the establishment, exercise or protection of a right
• Art. 5/2-f — Necessary for our legitimate interests, provided your fundamental rights are not harmed
• Art. 5/1 — Explicit consent (only for cookie and commercial message permissions)

To whom is data transferred, and why?

Transfers are made within the framework of KVKK Art. 8 and — where a foreign country is involved — Art. 9, with the required safeguards in place.

Method of collection

Your personal data is collected by partly automated and automated means through forms on the website and mobile app, account transactions, e-mail correspondence and — to the extent you permit — cookies.

Your rights under KVKK Art. 11

• To learn whether your personal data is processed
• To request information if it has been processed
• To learn the purpose of processing and whether the data is used accordingly
• To know the third parties to whom data is transferred at home or abroad
• To request correction of incomplete or inaccurate data
• To request erasure or destruction where the conditions are met
• To request that correction, erasure or destruction be notified to third parties the data was transferred to
• To object to an adverse outcome produced solely by automated analysis
• To claim compensation if you suffer damage due to unlawful processing

How to apply

You may submit requests in line with the Communiqué on Application Procedures to the Data Controller:

1. Your application must include your name and surname, a wet signature (for written applications), your Turkish ID number if you are a Turkish citizen, your address or e-mail address, and the subject of your request.
2. Send it to the address in the identity panel with a wet signature, by registered e-mail (KEP), or from the e-mail address registered in our system to the e-mail address in the identity panel.
3. We answer free of charge within 30 days at the latest; if the process incurs an additional cost, the fee in the Board’s tariff may be charged.

If your application is rejected, you find our answer insufficient or you receive no answer in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of the application date.

Cookies and explicit consent

Non-essential cookies only run with your explicit consent. Use the button below to give or withdraw it; details are on the Cookie Policy page.