Privacy Notice - Booking and Contact
2026-09-06 14:20:03
1. DATA CONTROLLER
For the purposes of Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Sarigerme Tours.com SEY. ACEN. TAŞ. İNŞ. SAN. VE TİC. LTD. ŞTİ..
Address: Sarıgerme Mahallesi, Ortaca, 48600 Ortaca/Muğla, Türkiye
Phone: +90 532 610 98 27
Email: reservation@sarigermetours.com
TÜRSAB No: 6421
2. PERSONAL DATA PROCESSED
Booking/contact data may include name, phone/WhatsApp, email, selected tour, date, party size, passenger/age-group information, customer notes and, where necessary, hotel/pickup/room information. Security records may include IP address or hashed identifiers, user agent, form-security data, Turnstile verification result, timestamps and evidence of legal acceptance. Under the current cash-payment flow Sarigerme Tours does not store full card numbers, CVV codes or card expiry dates in its own database.
3. PURPOSES
Data is processed only as necessary to receive and assess booking requests, check availability, plan operations and pickup, contact the customer, prepare passenger/operational lists, maintain service security, prevent abuse, handle changes/complaints, comply with legal and financial duties, establish/exercise/protect rights and manage disputes.
4. LEGAL BASES
Depending on the activity, processing may rely on legal bases under Article 5 of KVKK, including necessity for the establishment/performance of a contract, compliance with legal obligations, establishment/exercise/protection of a right, and legitimate interests that do not prejudice fundamental rights. Where a separate activity such as optional marketing or non-essential analytics requires consent, that consent is obtained separately from this notice and freely; the information duty is not conditional on consent.
5. COLLECTION
Data may be collected through website forms, email, phone, WhatsApp, face-to-face communications and during tour operations, electronically or verbally. Technical logs may be generated automatically for form and service security.
6. TRANSFERS
Data may be shared only to the extent necessary with authorised public bodies, legal/accounting advisers, technical providers such as hosting/email/security services, and operational parties required to perform the tour. Where technical infrastructure requires an international transfer, Article 9 of KVKK and the applicable transfer safeguards are observed.
7. RETENTION AND SECURITY
Data is kept only for the period necessary for the relevant purpose and applicable statutory retention/limitation periods, then deleted, destroyed or anonymised as required. Measures include access control, secure sessions, CSRF/honeypot/rate limiting, Turnstile, input validation and limited security logging.
8. DATA SUBJECT RIGHTS
Rights under Article 11 of KVKK may be exercised by submitting a sufficiently identifiable request to reservation@sarigermetours.com or Sarıgerme Mahallesi, Ortaca, 48600 Ortaca/Muğla, Türkiye. Requests are handled in accordance with applicable procedures and time limits.
9. NOTICE AND CONSENT
This notice fulfils the controller's information duty. If separate consent is legally required for another processing purpose, consent is obtained separately; optional marketing is not made a condition of a booking request.
For the purposes of Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Sarigerme Tours.com SEY. ACEN. TAŞ. İNŞ. SAN. VE TİC. LTD. ŞTİ..
Address: Sarıgerme Mahallesi, Ortaca, 48600 Ortaca/Muğla, Türkiye
Phone: +90 532 610 98 27
Email: reservation@sarigermetours.com
TÜRSAB No: 6421
2. PERSONAL DATA PROCESSED
Booking/contact data may include name, phone/WhatsApp, email, selected tour, date, party size, passenger/age-group information, customer notes and, where necessary, hotel/pickup/room information. Security records may include IP address or hashed identifiers, user agent, form-security data, Turnstile verification result, timestamps and evidence of legal acceptance. Under the current cash-payment flow Sarigerme Tours does not store full card numbers, CVV codes or card expiry dates in its own database.
3. PURPOSES
Data is processed only as necessary to receive and assess booking requests, check availability, plan operations and pickup, contact the customer, prepare passenger/operational lists, maintain service security, prevent abuse, handle changes/complaints, comply with legal and financial duties, establish/exercise/protect rights and manage disputes.
4. LEGAL BASES
Depending on the activity, processing may rely on legal bases under Article 5 of KVKK, including necessity for the establishment/performance of a contract, compliance with legal obligations, establishment/exercise/protection of a right, and legitimate interests that do not prejudice fundamental rights. Where a separate activity such as optional marketing or non-essential analytics requires consent, that consent is obtained separately from this notice and freely; the information duty is not conditional on consent.
5. COLLECTION
Data may be collected through website forms, email, phone, WhatsApp, face-to-face communications and during tour operations, electronically or verbally. Technical logs may be generated automatically for form and service security.
6. TRANSFERS
Data may be shared only to the extent necessary with authorised public bodies, legal/accounting advisers, technical providers such as hosting/email/security services, and operational parties required to perform the tour. Where technical infrastructure requires an international transfer, Article 9 of KVKK and the applicable transfer safeguards are observed.
7. RETENTION AND SECURITY
Data is kept only for the period necessary for the relevant purpose and applicable statutory retention/limitation periods, then deleted, destroyed or anonymised as required. Measures include access control, secure sessions, CSRF/honeypot/rate limiting, Turnstile, input validation and limited security logging.
8. DATA SUBJECT RIGHTS
Rights under Article 11 of KVKK may be exercised by submitting a sufficiently identifiable request to reservation@sarigermetours.com or Sarıgerme Mahallesi, Ortaca, 48600 Ortaca/Muğla, Türkiye. Requests are handled in accordance with applicable procedures and time limits.
9. NOTICE AND CONSENT
This notice fulfils the controller's information duty. If separate consent is legally required for another processing purpose, consent is obtained separately; optional marketing is not made a condition of a booking request.