This notice explains how TERRATURKEY TURIZM ANONIM SIRKETI (“Terra Turkey DMC”, “we”) processes personal data when you use our booking pages and Services. It is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, Articles 13–14 of the EU General Data Protection Regulation (“GDPR”).
1.Data controller
TERRATURKEY TURIZM ANONIM SIRKETI, Fulya Mah. Sakiz Agaci Sk. No: 16/3 Sisli, Istanbul, Türkiye. Contact for privacy matters: concierge@terraturkeydmc.com.
2.Personal data we process
- Identity: first and last name, and where a venue or authority requires it, identification details.
- Contact: e-mail address and mobile number.
- Booking details: selected Services, dates, participants and accompanying guests, event or organisation membership details (such as chapter or registration status), remarks and special requests.
- Travel details: flight numbers, arrival and departure times, pick-up and drop-off locations.
- Special requirements: accessibility needs or dietary requirements you choose to give us. Some of this may be health-related data; we use it only to arrange your Service and only with your explicit consent.
- Payment and invoicing: amount, currency, payment status, transaction references and billing details. Card payments are processed through the licensed bank's secure payment infrastructure.
- Technical data: IP address, browser information and session cookies needed for the booking page to work and to protect it against misuse.
- Communications: e-mails and messages you exchange with us.
3.Why we use it and legal basis
| Purpose | Legal basis (KVKK Art. 5 / GDPR Art. 6) |
|---|---|
| Taking and managing your booking, providing the Service, contacting you about it | Performance of a contract |
| Taking payment, issuing invoices, keeping accounting and tax records | Legal obligation; performance of a contract |
| Venue, stadium, airport and security access; ticket issuance | Performance of a contract; legal obligation where required by authorities |
| Accessibility and dietary arrangements | Your explicit consent (KVKK Art. 6 / GDPR Art. 9) |
| Operating capacity limits and waiting lists, preventing fraud and misuse, keeping the site secure | Legitimate interests |
| Handling complaints and legal claims | Establishment, exercise or defence of legal claims |
We do not use your data for marketing unless you have separately agreed to it.
4.Who we share it with
Only as needed for the purposes above, we share data with:
- service providers delivering parts of your Service, such as transport operators, drivers, airport service providers, restaurants, venues, boat operators, sports clubs and competition organisers (for example for ticketing and stadium access);
- the event Organiser for whose event or guests the Service is offered, for participant lists and coordination;
- banks and payment institutions processing your payment;
- hosting, IT, e-mail and messaging providers acting on our instructions;
- accountants, auditors and legal advisers; and public authorities where legally required.
Some recipients, such as international event organisers or IT providers, may be located outside Türkiye. Such transfers are carried out in accordance with Article 9 of KVKK and, where applicable, Chapter V of the GDPR, using the safeguards those laws require.
5.How long we keep it
- Booking and participant data: for the duration of the Service and up to 2 years afterwards for service follow-up and claims, unless a longer period is required by law.
- Payment, invoice and accounting records: for the periods required by Turkish tax and commercial law (generally 10 years).
- Waiting list entries that do not lead to a booking: deleted within 6 months after the Service date.
- Special requirements (accessibility, dietary): deleted or anonymised within 3 months after the Service date.
After these periods data is deleted, destroyed or anonymised.
6.Your rights
Under Article 11 of KVKK and, where applicable, the GDPR, you may ask us to:
- tell you whether we process your data and give you information about it;
- tell you the purposes of processing and the recipients inside or outside Türkiye;
- correct incomplete or inaccurate data, and delete or anonymise data under the conditions set by law, and notify recipients of these actions;
- object to a result against you arising solely from automated processing;
- compensate damage caused by unlawful processing;
- where the GDPR applies, restrict processing, receive your data in a portable format, object to processing based on legitimate interests, and withdraw consent at any time without affecting earlier processing.
Send your request to concierge@terraturkeydmc.com. We reply within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or, where the GDPR applies, to a supervisory authority in your country of residence.
7.Cookies
Our booking pages use only cookies that are strictly necessary for the page and the payment process to work (such as session cookies). We do not use advertising cookies on these pages.
8.Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and restricted staff access.
9.Changes to this notice
We may update this notice. The current version is always published on this page with its date.