Privacy and Personal Data Protection Policy
We clearly explain why and how we process personal data, the parties to whom data may be transferred, the measures used to protect it and your rights under Turkish data protection law.
Purpose and scope
This Policy explains the processing of personal data relating to persons who visit https://sativa.com.tr, request information, make a reservation or use tourism services provided by SATIVA TOUR & TRAVEL.
Personal data are processed lawfully, fairly, for specified and legitimate purposes and in a relevant, limited and proportionate manner.
Identity of the data controller
Categories of personal data
Identity Data
Name, surname, age, date of birth, nationality and required identity information.
Contact Data
Telephone number, email address, address and communication preference.
Reservation Data
Tour, date, passengers, reservation number, amendment and cancellation records.
Financial Data
Payment method, amount, currency, payment status, reference and invoice information.
Customer-Service Data
Requests, support applications, complaints and customer correspondence.
Security Data
IP address, access time, device, browser, session and security records.
Health, disability, allergy or special-assistance information is processed only where genuinely necessary for safe service delivery and where a lawful condition under Article 6 of the KVKK applies.
Purposes of processing
- Receiving tourism and travel requests,
- Creating, managing and completing reservations,
- Planning tours, transportation and accommodation,
- Processing payments, collections, refunds and invoices,
- Providing reservation and service notifications,
- Responding to requests and complaints,
- Maintaining website and transaction security,
- Preventing fraud and misuse,
- Complying with legal obligations,
- Establishing, exercising or protecting legal rights.
Legal grounds
- Necessity for establishing or performing a contract,
- Compliance with a legal obligation,
- Establishment, exercise or protection of a legal right,
- Processing expressly provided for by law,
- Legitimate interests that do not prejudice fundamental rights,
- Explicit consent where consent is legally required.
Methods of collection
- Reservation, contact and support forms,
- Telephone, email, WhatsApp and other communication channels,
- Reservation, payment and service-delivery processes,
- Authorised service providers and business partners,
- Cookies and similar technologies,
- Server, access and transaction-security records,
- Competent public authorities and legally authorised parties.
Transfer of personal data
- Tour operators, guides and service suppliers,
- Hotels, accommodation and transportation providers,
- Insurance providers where necessary,
- Authorised payment and financial institutions,
- Hosting, IT, communication and security providers,
- Accounting, legal and audit providers,
- TÜRSAB and competent tourism authorities,
- Courts, law-enforcement bodies and public authorities.
Transfers are carried out in accordance with Article 8 and, where applicable, Article 9 of the KVKK.
International data transfers
International tours, transportation or accommodation may require limited data transfers to foreign service providers. Certain technology or hosting infrastructures may also be located outside Türkiye.
International transfers are carried out only through lawful mechanisms compliant with Article 9 of the KVKK and applicable secondary legislation.
Retention and security
Personal data are retained for the period necessary for the relevant processing purpose and applicable statutory retention, limitation, evidential and audit periods.
When no lawful ground remains, personal data are securely deleted, destroyed or anonymised. Appropriate technical and organisational measures are applied against unlawful access, loss and misuse.
Cookies and similar technologies
Cookies may be used for secure website operation, remembering preferences and, where legal requirements are satisfied, measuring performance.
Detailed information is available in our Privacy and Cookie Policy .
Your rights under the KVKK
- Learning whether personal data are processed,
- Requesting information about processed data,
- Learning the purpose of processing,
- Learning the third parties to whom data are transferred,
- Requesting correction of incomplete or inaccurate data,
- Requesting deletion or destruction where legal conditions apply,
- Objecting to adverse results produced exclusively by automated systems,
- Claiming compensation for damage caused by unlawful processing.
Applications and contact
You may submit requests under the KVKK, together with information sufficient to verify your identity and request, through the following channels.