Personal Data Protection Privacy Notice
We explain the purposes, methods and legal grounds for processing your personal data, the parties to whom data may be transferred and your rights under Turkish data protection law.
Purpose and scope
This Privacy Notice has been prepared by MAVİ KAŞ TURİZM EMLAK YATÇILIK TAŞIMACILIK TİCARET LİMİTED ŞİRKETİ to inform data subjects in accordance with Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”).
It applies to website visitors, persons requesting information, customers making reservations, participants using tourism services and persons communicating with the Company.
Identity of the data controller
Categories of personal data
Identity Data
Name, surname, age, date of birth, nationality and required identity information.
Contact Data
Telephone number, email address, address and preferred communication channel.
Reservation Data
Selected service, dates, participants, reservation number and cancellation records.
Financial Data
Payment method, amount, status, payment reference and invoice information.
Customer-Service Data
Information requests, support applications, complaints and correspondence.
Security Data
IP address, access time, device, browser, session and technical records.
Special categories of data, including health, disability or allergy information, are processed only where genuinely necessary for safe service delivery and where a lawful condition under Article 6 applies.
Purposes of processing
- Receiving tourism and travel-service requests,
- Creating and managing reservations,
- Planning tours, transportation, transfers and accommodation,
- Processing payments, collections, refunds and invoices,
- Providing reservation and service notifications,
- Responding to requests and complaints,
- Maintaining website and transaction security,
- Preventing fraud and misuse,
- Complying with legal and contractual obligations,
- Establishing, exercising or protecting legal rights.
Legal grounds
Processing necessary to create a reservation and provide the requested service.
Compliance with tax, accounting, consumer and tourism legislation.
Establishing, exercising or protecting contractual and legal rights.
Security and service improvements that do not prejudice fundamental rights.
Processing or retention expressly required by applicable legislation.
Limited activities where consent is legally required and no other ground applies.
Methods of collection
- Website reservation and contact forms,
- Telephone, email, WhatsApp and communication channels,
- Reservation, payment and service-delivery processes,
- Tour operators and authorised service providers,
- Cookies, server logs and similar technologies,
- Competent authorities and legally authorised third parties.
Transfer of personal data
- Tour operators, guides and service suppliers,
- Hotels, accommodation and transportation providers,
- Insurance providers where relevant,
- Authorised payment and financial institutions,
- IT, hosting, communication and security providers,
- Accounting, legal and audit providers,
- TÜRSAB and competent tourism authorities,
- Courts, law-enforcement and public authorities.
Transfers are relevant, limited and proportionate to their purpose and are carried out in accordance with Article 8 of the KVKK.
International data transfers
International tours, transportation or accommodation may require transfer of necessary data to foreign service providers. Certain technology or communication infrastructures may also be located outside Türkiye.
International transfers are carried out through a mechanism permitted by Article 9 of the KVKK and applicable secondary legislation.
Retention, disposal and security
Personal data are retained for the period necessary for the processing purpose and applicable statutory retention, limitation and evidential periods.
When all processing and retention grounds cease, data are securely deleted, destroyed or anonymised. Appropriate technical and organisational measures are applied against unlawful processing and unauthorised access.
Your rights under the KVKK
Application procedure and contact
Requests under the KVKK may be submitted with information sufficient to verify your identity, contact details and the subject of your request.
Additional information may be requested to verify identity and authority for applications submitted by email. Applications are concluded as soon as possible and within the statutory period.