Personal Data Protection (KVKK)

This disclosure text has been prepared pursuant to Article 10 of the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK") and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform, in order to inform data subjects about the processing of their personal data.

1. Data Controller

Kusadasi Boat Tours
Güvercinada Limanı, Kuşadası, Aydın, Turkey
info@kusadasiboattours.com | +90 551 535 09 35

2. Personal Data Processed

Within the scope of our services, the following personal data may be collected and processed:

• Identity data: Name, surname.
• Contact data: Phone number, e-mail address.
• Booking data: Tour selection, participant count, preferred date, special requests.
• Transaction data: Payment and invoice records (where applicable).
• Website usage data: IP address, browser type, pages visited, session duration (via cookies).
• Communication data: Content of messages sent through our contact form or WhatsApp.

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Carrying out reservation and booking transactions.
• Sending booking confirmation and information messages.
• Providing customer support and responding to inquiries.
• Fulfilling legal and regulatory obligations.
• Improving our website and services.
• Conducting marketing activities with your prior consent.

4. Legal Grounds for Processing

Personal data is processed on the following legal grounds under Article 5 of KVKK:

• Being necessary for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract.
• Being necessary for compliance with a legal obligation.
• Being necessary for the legitimate interests pursued by the data controller, provided this does not override the interests or fundamental rights and freedoms of the data subject.
• Explicit consent of the data subject (for marketing communications).

5. Transfer of Personal Data

Your personal data may be transferred to the following categories of recipients only to the extent necessary and in accordance with the applicable legal grounds:

• Payment service providers for processing financial transactions.
• IT and cloud service providers for hosting and system maintenance.
• Competent public authorities and regulatory bodies when required by law.

We do not transfer personal data abroad except where required by applicable law or with your explicit consent.

6. Rights of Data Subjects

Pursuant to Article 11 of KVKK, you have the right to:

• Learn whether your personal data is being processed.
• Request information about the processing of your personal data.
• Learn the purpose of processing and whether it is being used in accordance with that purpose.
• Know the third parties to whom your data has been transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of personal data under the conditions set out in Article 7 of KVKK.
• Request notification of corrections or deletions to third parties to whom data has been transferred.
• Object to outcomes that are detrimental to you arising solely from automated processing.
• Claim compensation for damages arising from the unlawful processing of your personal data.

7. How to Exercise Your Rights

You may exercise your rights under KVKK by submitting a written request to us at:
Güvercinada Limanı, Kuşadası, Aydın, Turkey
or by e-mail to: info@kusadasiboattours.com

Your requests will be responded to within 30 days at the latest. Requests may be subject to a fee if they require excessive effort, as per the tariff set by the Personal Data Protection Authority (KVKK Kurumu).

8. Data Retention

Personal data is retained for as long as necessary for the purposes for which it was collected, and in any event no longer than the applicable statutory limitation periods. After the retention period expires, data is securely deleted, destroyed or anonymised.