KVKK – Personal Data Protection

1. Data Controller Information

2. Personal Data Collected

We collect and process the following categories of personal data:

• Identity Data: Name, surname, nationality.
• Contact Data: Email address, phone number.
• Booking Data: Tour preferences, dates, participant count, special requests.
• Financial Data: Payment information (processed securely; full card data is not stored).
• Technical Data: IP address, device/browser information, cookies.
• Communication Data: Content of emails and messages sent to us.

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Executing and managing tour reservation contracts.
• Sending booking confirmation and tour information.
• Providing customer support and responding to inquiries.
• Fulfilling legal obligations (tax, accounting records).
• Improving our website and services through analytics.
• Sending promotional communications (with explicit consent).

4. Legal Basis for Processing (KVKK Article 5)

• Contract performance: Processing necessary for executing the tour booking contract.
• Legal obligation: Processing required for compliance with applicable laws.
• Legitimate interest: Analytics and service improvement activities.
• Explicit consent: Marketing communications and non-essential cookies.

5. Transfer of Personal Data

Your personal data may be transferred to:

• Service providers involved in delivering your tour (guides, transport companies).
• Payment processors for transaction handling.
• IT and cloud service providers for platform operations.
• Public authorities when required by law.

All transfers are carried out in compliance with KVKK Articles 8 and 9, including to overseas service providers where required, with appropriate safeguards in place.

6. Retention Period

Personal data is retained for as long as necessary to fulfill the stated purposes and comply with legal obligations. Booking records are retained for a minimum of 5 years. Marketing consent data is retained until consent is withdrawn.

7. Your Rights Under KVKK (Article 11)

As a data subject, you have the right to:

• Learn whether your personal data is being processed.
• Request information about the processing of your personal data.
• Learn the purpose of processing and whether data is used in accordance with its purpose.
• Know the third parties to whom your data has been transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your data.
• Request notification of corrections/deletions to third parties.
• Object to automated processing that results in decisions adversely affecting you.
• Claim compensation for damages arising from unlawful processing.

8. How to Exercise Your Rights

To exercise any of the rights listed above, you may submit a written request to us via:

• Email: info@getcappadociatour.com (with subject line: "KVKK Data Request")
• Post: Tekelli Mahallesi, Karlık Sokak, No:12, 50240 Uçhisar/Nevşehir, Turkey

We will respond to your request within 30 days. You may also file a complaint with the Personal Data Protection Board (KVKK Kurumu) at www.kvkk.gov.tr.

9. Contact