Göcek Yachting Logo

Privacy Notice on the Processing of Personal Data

At Göcek Yachting, we attach the highest importance to the security of the personal data you share with us during travel transactions carried out through our offices, call center and digital channels (web and mobile). This notice has been prepared to inform you within the scope of Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

1) Personal Data Collected and Purposes of Processing

Depending on the service you request, we may collect and process the following categories of personal data through automated or non-automated means, verbally, in writing or electronically:

  • Identity & Contact: Name, surname, national ID/passport number, date of birth, nationality; address, email, mobile phone.

  • Travel Information: Reservation/ticket details, accommodation/transportation data, transfers, special requests.

  • Documents & Policies: Passport details (issue/expiry dates, copy), travel insurance policy details.

  • Loyalty/Miles (if any): Frequent flyer/miles number and transaction details.

  • Companions: Identity/contact and travel information of persons traveling with you (as provided by the booking party).

  • Preferences & Notes: Cabin/room preferences, dietary/allergy information and similar items that affect service delivery (special categories are processed only with your explicit consent).

Purposes (illustrative):

  • Provision and performance of the travel services you request (accommodation, transport, ground services, etc.) and performance of contract

  • Completion of reservations, ticketing, payment and invoicing

  • Customer support and operational notifications (changes/cancellations, time, location, reminders)

  • Fulfillment of legal obligations (accounting, auditing, statutory reporting)

  • Security and fraud prevention activities

  • Marketing communications: with your consent, informing you about campaigns/offers tailored to you

Legal bases (KVKK Art. 5/2, 6; GDPR Art. 6 & 9 where applicable): Performance of a contract, legal obligation, legitimate interests, establishment/exercise/defense of legal claims, data made public by the data subject; explicit consent for special categories (e.g., health/allergies) and for marketing/analytics where required.

2) Methods of Collection

  • Our offices and call center

  • Website/mobile applications, online forms and messaging channels

  • Email and other correspondence

  • Reservation/operations data received from service partners and authorized agencies

  • Cookies and similar technologies (see our Cookie Policy for details)

3) Sharing and Transfer of Your Data

Depending on the nature of the service, your personal data may be shared with:

  • Our affiliates and group companies, authorized sales agencies (domestic and abroad)

  • Service providers related to your reservation (hotels, airlines, yacht/transfer companies, insurers, ground handlers, etc.)

  • Payment institutions, banks and partners providing logistics/IT/legal support

  • Public authorities and regulators (where required by law)

In certain processes, data may be transferred to countries outside Türkiye/the EU/EEA. In such cases, we ensure adequate protection and appropriate safeguards in accordance with KVKK and applicable data-protection laws (e.g., standard contractual clauses).

4) Retention Periods

  • Contracts and accounting records: 10 years (as required by law)

  • Reservation/operations records: For the service performance period + relevant statute of limitations

  • Marketing data: Until consent is withdrawn or until the end of the legitimate retention period

  • In case of disputes/claims: Until the process is concluded

Upon expiry, data is deleted, destroyed or anonymized.

5) Our Data Security Commitment

Your personal data is protected against unauthorized access, unlawful processing and accidental loss/destruction/damage through technical and organizational measures. Access is restricted via role-based controls; we execute confidentiality and data-processing agreements with vendors, and processes are regularly audited.

6) Your Rights (KVKK/GDPR)

You have the following rights under KVKK and, where applicable, GDPR:

  • Access: Learn whether your data is processed and obtain information

  • Information on purposes and whether processing is fit for purpose

  • Knowledge of third parties to whom data is transferred domestically/abroad

  • Rectification of incomplete or inaccurate data

  • Erasure/Destruction where processing grounds no longer exist

  • Notification to third parties regarding rectification/erasure/destruction

  • Objection to results arising solely from automated processing that significantly affect you

  • Compensation for damages due to unlawful processing

  • Data portability and withdrawal of consent (where GDPR/consent applies)

7) Submitting a Request / Contact Method

Please submit your requests together with documents proving your identity via the channels below:

Your applications will be concluded as soon as possible within the legally required time limits. Additional information/documents may be requested if necessary.

8) Updates to This Notice

This Privacy Notice may be updated in line with legislative changes and our business processes. You can always access the latest version on this page. The current date is shown at the top of the page.

Sincerely, Göcek Yachting (Gocekonline Turizm Yatçılık Ltd. Şti.)