Personal Data Protection Law

In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), your personal data will be processed by our company as the Data Controller within the framework explained below, for business purposes, to be used, recorded, stored, updated, transferred, and/or classified. In this context, our company takes all necessary technical and administrative measures to prevent the unlawful processing of your personal data, prevent unauthorized access to it, and ensure its safekeeping, in accordance with the laws and regulations established for the protection of personal data, especially regarding the privacy of personal life, in order to protect individuals' fundamental rights and freedoms.

The target audience of this document includes all real persons whose personal data are processed by our company, excluding our employees and job applicants.

The personal data processed as a Data Controller includes, but is not limited to, the following: name, surname, Turkish ID number, address, phone number, email address, signature, physical location/security camera footage, call center/service quality voice recordings, bank account number, cookie records.

Purposes and Legal Grounds for Processing Personal Data

Your personal data shared by you may be processed for the following purposes:

To benefit you and/or the institutions and organizations you represent from the products and services offered by our company.
To determine and implement our commercial and business strategies, conduct necessary studies including but not limited to marketing activities, business development, and planning activities.
To conduct administrative operations related to communication carried out by our company.
To ensure the physical security and supervision of the locations used by our company.
To establish relationships with partners/customers/suppliers (their authorized representatives or employees).
To meet the contractual requirements and financial reconciliation regarding products and services offered in cooperation with our partners, suppliers, or other third parties.
To implement our company’s human resources policies.
To facilitate the use of our company’s call center or website.
To participate in training, seminars, or organizations organized by our company.

Method of Collection and Storage of Personal Data

Your personal data shared with us may be collected verbally, in writing, or electronically through automated or non-automated methods, including offices, branches, call centers, websites, social media platforms, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. Necessary business process designs and technical security infrastructure developments are implemented to prevent unauthorized access, manipulation, loss, or damage of the personal data obtained and stored by our company. Your personal data will be processed with all necessary data security measures and will be stored for the legal retention period or for as long as necessary for the purpose of processing if no such period is specified. Upon the expiration of this period, your personal data will be removed from our company’s data flows through deletion, destruction, or anonymization methods.

Transfer of Personal Data

Your personal data may be transferred within the scope of the laws and regulations, and for the purposes stated above:

To Golden By Tour and its group companies.
To companies and representatives authorized to act on behalf of our company.
To regulatory and supervisory authorities and public institutions or organizations authorized to request your personal data under the relevant laws.
To partners, suppliers, contractors, banks, credit risk and financial institutions, and other real or legal persons within the scope of the stated purposes.
To tax and similar advisors, necessary individuals, institutions, and organizations related to legal proceedings, including auditors and third parties from whom we receive consultancy services, without limitation, both domestically and internationally, to the aforementioned partners, service providers, authorized individuals, and organizations.

Your Rights Under Article 11 of KVKK

By applying to our company, you have the rights to:

Learn whether your personal data has been processed,
Request information if it has been processed,
Learn the purpose of processing and whether it has been used accordingly,
Know the third parties to whom it has been transferred domestically or internationally,
Request correction if it has been processed incompletely or inaccurately,
Request deletion or destruction under the conditions stipulated in Article 7 of KVKK,
Request notification of the operations carried out under (e) and (f) above to third parties to whom it has been transferred,
Object to the occurrence of a result against you due to the analysis of your data exclusively by automated systems,
Request compensation for damages in case you suffer harm due to unlawful processing.

According to Article 13(1) of the KVKK, you may submit your request to exercise the above rights to our company in writing or by other methods specified by the Personal Data Protection Board.

To exercise your rights, you may deliver your request in person with necessary identification information, send it via a notary, or through other methods determined by the Personal Data Protection Board, or send it to bilgi@goldenbytour.com.tr.