1.Data controller
| Trade name | Villa Trendi Turizm Seyahat Ticaret Limited Şirketi ("Prime Turist") |
|---|---|
| Address | Tuzla Mah. Mustafa Kemal Bulvarı No: 63/C, 48300 Fethiye / Muğla |
| Tax | Fethiye Vergi Dairesi (Fethiye Tax Office), 925 121 6850 |
| Trade registry | Fethiye Ticaret ve Sanayi Odası (Fethiye Chamber of Commerce and Industry), trade registry no. 14968, chamber registry no. 014240 |
| MERSİS | 0925121685000001 |
| TÜRSAB | Group A Travel Agency, certificate no. 17020 |
| Contact | info@primeturist.com · +90 252 606 06 12 · Registered e-mail (KEP): villatrenditurizm@hs01.kep.tr |
2.Personal data processed
| Data category | Data | How it is collected |
|---|---|---|
| Identity | Full name | Booking form, WhatsApp, Telegram, phone, e-mail |
| Contact | Phone number, e-mail address (optional) | Booking form, WhatsApp, Telegram, phone, e-mail |
| Booking | Tour, date, number of people and age groups, hotel and room details, pickup area, your note, the language you selected, and, if any, the coupon code and the hotel/agency that referred you | Booking form, WhatsApp, Telegram, phone |
| Payment | Payment method, prepayment and remaining amount, collection records. Your card details are not collected or stored on our website; card payments are made on the bank's secure payment page (VakıfBank virtual POS or QNB Pay) via the link we send you on WhatsApp. | Booking form, payment institution |
| Identity document | Turkish ID card or passport details, only for the Rhodes tour and for the statutory passenger lists of boat tours | WhatsApp, on the tour day |
| Review | Your rating, your review and the name shown on the website (your first name and the initial of your surname) | Post-tour review form |
| Transaction security | IP address and request time (kept for a short time to prevent misuse of the forms), error logs | Automatic |
| Visit statistics | Pages you visit, the site you came from, device type. Your IP address is not stored; an anonymous hash that changes every day is used to count visits within the same day. | Automatic (cookieless) |
| Analytics cookies | Usage data collected through Google Analytics cookies, only if you give your consent | Automatic, with cookie consent |
3.Purposes of processing
- To receive your booking, check availability and give you confirmation
- To prepare the hotel pickup and the daily plan of the tour (vehicle, guide, time)
- To provide the tour service and communicate with you on the tour day
- To track prepayments and tour-day payments, and to issue invoices
- To fulfill obligations arising from tourism, tax and commercial legislation
- To handle your requests, complaints and cancellations
- To ask for your review after the tour and publish it with your consent
- To ensure the security of the website and to keep statistics in order to improve the website
4.Legal grounds
Your personal data are processed on the basis of Article 5 of the KVKK:
- Establishment and performance of a contract (art. 5(2)(c)): booking, pickup, tour service, payment tracking
- Legal obligation (art. 5(2)(ç)): invoice and accounting records, tourism legislation, passenger lists where required
- Establishment, exercise or protection of a right (art. 5(2)(e)): disputes and complaints
- Legitimate interest (art. 5(2)(f)): website security, prevention of misuse, cookieless visit statistics
- Explicit consent (art. 5(1)): analytics cookies; publication of your review with your name
5.Transfers
| Recipient | Purpose | Country |
|---|---|---|
| Businesses with which we jointly operate the tours (boat, safari, paragliding, transfer) | Provision of the tour service and the hotel pickup | Türkiye |
| VakıfBank (virtual POS) or QNB Pay | Collection of card prepayments | Türkiye |
| Insurance company | Guest insurance taken out on all tours | Türkiye |
| Ferry operator and border authorities (only on tours abroad such as Rhodes) | Passenger list, ticketing and passport control | Türkiye / Greece |
| Vercel Inc. | Hosting and running of the website (servers in Frankfurt, Germany) | US company, EU server |
| Neon Inc. | Booking database (servers in Frankfurt, Germany) | US company, EU server |
| Business e-mail (Google Workspace); Google Analytics if you give consent | USA / EU | |
| GitHub Inc. | The website's content repository; published reviews (first name, surname initial, review) | USA |
| Cloudflare Inc. | Domain name (DNS) service | USA |
| WhatsApp (Meta), Telegram | WhatsApp and Telegram conversations initiated by you | USA / EU / UAE |
| Competent public authorities | Legal obligations (Ministry of Culture and Tourism, harbor master's office, tax administration, judicial and administrative authorities) | Türkiye |
Transfers to service providers abroad are carried out pursuant to Article 9 of the KVKK by signing the standard contracts announced by the Personal Data Protection Board and notifying the Board.
6.Retention period
Booking, payment and invoice records are kept for 10 years as required by Article 82 of the Turkish Commercial Code; the 5-year retention period under the Tax Procedure Law and the 3-year retention period under the Distance Contracts Regulation fall within this period; guests' ID and passport numbers, however, are deleted 2 years after the tour date. When this period ends, the data are deleted, destroyed or anonymized. Security logs are kept for a short time. Cookieless visit statistics cannot be associated with a person.
7.Your rights
Under Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data are processed
- If they have been processed, to request information about this
- To learn the purpose of the processing and whether the data are used in accordance with that purpose
- To know the third parties to whom the data are transferred in Türkiye or abroad
- To request their rectification if they are incomplete or inaccurately processed
- To request their erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK
- To request that the rectification, erasure and destruction operations be notified to the third parties to whom the data have been transferred
- To object to a result against you arising from the analysis of the processed data exclusively by automated systems
- To request compensation for the damage if you suffer damage due to unlawful processing
8.Applications
You may submit your application in writing to the address above, to the registered e-mail (KEP) address villatrenditurizm@hs01.kep.tr, or from your e-mail address registered in our system to info@primeturist.com. Your application will be answered free of charge within 30 days at the latest, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. If the process additionally requires a cost, the fee in the tariff set by the Personal Data Protection Board may be charged.