home Homepage favorite_border Favorites person_outline Profile
verifiedTÜRSAB Certified lockSecure Payment call0850 304 84 21

KVKK Disclosure Text

Last updated: 19.09.2026

This text is a translation provided for information. The legally binding version is the Turkish text: View the Turkish text

Data Controller:<\/strong> Gezitutkunları Turizm Seyahat Konaklama Tic. Ltd. Şti. — Akdeniz Mah. Akdeniz Cad. Anba İşhanı No:8/I (ANBA Business Center) · TÜRSAB Document No: 1585 · [email protected] · 0850 304 84 21<\/p>

1. General Information<\/h2>

This text has been prepared by Gezi Tutkunları as the data controller in accordance with Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. This text is for informational purposes only; it is not a declaration of consent or approval. Your personal data will be processed within the scope explained below when you visit our website, make a reservation, or contact us via phone, email, WhatsApp, or Instagram.<\/p>

2. Processed Personal Data, Purposes, and Legal Grounds<\/h2>
Data<\/th>Purpose<\/th>Legal Ground (KVKK)<\/th><\/tr><\/thead>
Identity:<\/strong> name, surname, T.C. identity number / passport number, date of birth, gender<\/td>Creation of reservation, mandatory travel insurance policy, passenger list, accommodation/transportation notifications, invoice preparation<\/td>Article 5/2-c establishment and performance of the contract; Article 5/2-ç legal obligation (Law No. 1618, insurance and tax legislation)<\/td><\/tr>
Contact:<\/strong> phone, email, address, boarding point<\/td>Reservation confirmation, pre-tour information, operational and emergency communication<\/td>Article 5/2-c performance of the contract<\/td><\/tr>
Customer transaction:<\/strong> reservation, payment and refund records, requests and complaints, correspondence contents<\/td>Sales and after-sales service, complaint management, proof in legal disputes<\/td>Article 5/2-c, Article 5/2-ç, Article 5/2-e establishment and protection of a right<\/td><\/tr>
Financial:<\/strong> payment amount, installment, transaction reference, masked card number<\/td>Collection of payment, accounting and reconciliation. Your card information is not stored by us; it is processed in the PCI-DSS compliant infrastructure of the payment institution.<\/td>Article 5/2-c, Article 5/2-ç<\/td><\/tr>
Transaction security:<\/strong> IP address, browser information, log records, consent records<\/td>Information security, fraud prevention, obligations under Law No. 5651, proof of your consents<\/td>Article 5/2-ç, Article 5/2-f legitimate interest<\/td><\/tr>
Marketing:<\/strong> communication consents, interest and preference information, cookie data<\/td>Sending campaigns and announcements, advertising measurement and personalization<\/td>Article 5/1 explicit consent<\/strong> (optional; not providing it does not prevent you from receiving services)<\/td><\/tr>
Special category data:<\/strong> only if you voluntarily disclose it, health/disability status, dietary needs<\/td>Providing services suitable for your needs during the tour<\/td>Article 6/3 explicit consent. You are not obliged to share this information; it will not be requested by us.<\/td><\/tr> <\/tbody> <\/table>

3. Collection Method<\/h2>

Your data is collected through forms on our website, call center, email, WhatsApp and Instagram messages, and forms filled out in our office, through automatic or partially automatic means.<\/p>

Digital assistant:<\/strong> Messages received via WhatsApp and Instagram may be processed and responded to by an AI-supported digital assistant for faster replies; correspondences are monitored by our team, and you can request to speak with a representative at any time. Please do not share card information, identity photos, or health information through these channels.<\/p>

4. Transfer of Personal Data<\/h2>

Domestic<\/strong> your data is transferred to the following recipient groups limited to the relevant purpose: travel insurance company and agency; accommodation facilities, transportation companies, guides, and travel agencies with which we organize the tour together; payment institution and banks (Nkolay Payment and Electronic Money Institution Inc.); suppliers from whom we receive accounting, e-invoice, SMS/email sending, and hosting services; authorized public institutions and organizations with TÜRSAB.<\/p>

International transfer (KVKK Article 9):<\/strong> Due to the use of the following service providers whose servers are located abroad, your data may be transferred abroad limited to the specified purpose:<\/p>

  • Meta Platforms (USA/Ireland)<\/strong> — Correspondence conducted via WhatsApp and Instagram; advertising measurement if you consent to marketing cookies.<\/li>
  • Google (USA/Ireland)<\/strong> — analytics and advertising measurement (only if you consent to cookies).<\/li>
  • Resend (USA)<\/strong> — sending transactional emails such as reservation confirmation.<\/li>
  • OpenAI (USA)<\/strong> — processing of message content so that the digital assistant can understand your message and generate a response.<\/li> <\/ul>

    These transfers are carried out in accordance with the procedures stipulated in KVKK Article 9 (appropriate safeguards and exceptional cases listed in the Law). You can change your cookie preferences at any time from the "Cookie Preferences" link at the bottom of our site.<\/p>

    5. Retention Periods<\/h2>
    • Reservation, contract, payment, and invoice records: 10 years<\/strong> from the end of the contract (Article 82 of the Commercial Code No. 6102, Article 146 of the Code of Obligations No. 6098, tax legislation).<\/li>
    • Commercial electronic communication consent and rejection records: 3 years<\/strong> from the expiration of the consent (Law No. 6563 and relevant Regulation).<\/li>
    • Internet access and transaction security records: 2 years<\/strong> (Law No. 5651).<\/li>
    • Requests that do not result in a reservation, contact form, and messaging records: maximum 3 years<\/strong>.<\/li>
    • Cookie preferences: 180 days<\/strong>.<\/li> <\/ul>

      Data that has expired will be deleted, destroyed, or anonymized in the first periodic destruction period.<\/p>

      6. KVKK Article 11 — Your Rights<\/h2>

      According to Article 11 of the Law, you have the following rights:<\/p>

      • To learn whether your personal data is being processed.<\/li>
      • If processed, to request information regarding it.<\/li>
      • To learn the purpose of processing and whether it is used in accordance with its purpose.<\/li>
      • To know the third parties to whom it has been transferred, whether domestically or internationally.<\/li>
      • To request correction if it is incomplete or incorrectly processed.<\/li>
      • To request deletion or destruction within the framework of the conditions stipulated in Article 7 of KVKK.<\/li>
      • To request notification of the transactions made to the third parties to whom it has been transferred.<\/li>
      • To object to the result against you arising from the analysis conducted through automated systems.<\/li>
      • To request compensation for damages if you suffer a loss due to unlawful processing.<\/li> <\/ul>

        7. Application Methods<\/h2>

        You can submit your requests to the data controller in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller; along with identity verification information, you can use the Relevant Person Application Form<\/a> to send to [email protected]<\/strong> (from your email address registered in our system) or to Akdeniz Mah. Akdeniz Cad. Anba İşhanı No:8/I (ANBA Business Center)<\/strong> with a wet signature. Your application will be concluded free of charge within 30 days<\/strong>. You can withdraw your explicit consents and commercial communication permissions at any time through the same channels.<\/p>

        For your questions contact pageor WhatsApp you can use our hotline.