KVKK Privacy Notice - Turkish Personal Data Protection Law No. 6698

KVKK Privacy Notice - Turkish Personal Data Protection Law No. 6698

Last updated: 25 May 2026 Legal basis: Turkish Personal Data Protection Law No. 6698 (KVKK)

The Turkish version is the legally binding text. This English version is provided for informational convenience.

1 - Data Controller

This Privacy Notice explains how My Point Travel processes personal data while providing travel, booking, communication and related tourism services.

2 - Personal Data Categories

We may process identity data, contact data, booking and customer transaction data, payment and invoice data, marketing permission data, website cookie data, and only with explicit consent, limited health-related information required for riding safety.

Card details are not stored by us. Card payments are processed through the PCI-DSS certified PayTR infrastructure.

3 - Purposes of Processing

Your personal data is processed to create and confirm bookings, provide the requested service, communicate changes and reminders, comply with legal obligations, manage guest safety, handle requests and complaints, issue invoices, process refunds, and improve website performance through anonymous or aggregated analytics.

Marketing messages are sent only where you have given consent.

4 - Legal Grounds

Processing is based on contract performance, legal obligations, legitimate interests, establishment or protection of rights, and explicit consent where required, especially for marketing communications and health-related safety information.

5 - Transfers

Data may be shared only where necessary with accommodation partners, PayTR, transactional e-mail providers, hosting infrastructure, TURSAB, public authorities, tax authorities, guides, instructors and field service providers.

Resend, Inc. may involve an international transfer for transactional e-mails. We do not sell personal data and do not share it with third-party advertisers.

6 - Retention

Booking and invoice records are retained for 10 years under Turkish tax and commercial law. Customer communication records may be retained for 5 years. Marketing permissions are retained until withdrawn. Cookie retention depends on the relevant cookie category. Safety-related health notes are retained only for the necessary service and claim period.

7 - Your Rights

Under KVKK Article 11, you may request information about processing, access your data, request correction, deletion or destruction, object to automated results, learn recipients of transfers, and claim compensation for unlawful processing.

Requests may be sent to kvkk@mypointtravel.com.tr, the KEP address above, or the registered postal address. We respond within 30 days.

8 - Updates

This notice may be updated when laws or services change. The current version is published at mypointtravel.com.tr/legal/kvkk.