Personal Data Protection Notice

Under Turkey's Personal Data Protection Law No. 6698 (KVKK) — and in alignment with GDPR principles — we, as data controller, hereby inform you about the purpose, legal basis, transfer, and your rights regarding the processing of your personal data.

1. Data Controller

Our platform acts as a data controller under the KVKK with respect to the personal data it collects. Contact details can be found on our contact page.

2. Processed Personal Data

• Identity: Full name, national ID number, passport number, date of birth
• Contact: Email, phone, address
• Financial: Payment records (amount, currency, transaction reference) — card numbers are not stored
• Travel: Reservation history, flight/hotel preferences
• Digital footprint: IP address, device information, cookie data

3. Purpose of Processing and Legal Basis

• Performance of contract (KVKK Art. 5/2-c)
• Legal obligation (Art. 5/2-d): tax, invoicing, TÜRSAB archiving
• Legitimate interest (Art. 5/2-f): fraud prevention, service quality
• Explicit consent (Art. 5/1): marketing communication, profiling

4. Transfer

Data is transferred to suppliers required for the reservation (hotel, airline, payment institution, insurance company) and to competent authorities when legally required. International transfers are only made within the scope of KVKK Art. 9.

5. Your Rights (Art. 11)

You have the right to be informed, request rectification or erasure, object to processing, object to automated decision-making, and seek compensation in case of damage related to your personal data. Requests can be submitted through our support channel and are answered within 30 days at the latest.