Skip to content
Booking request

Legal

Privacy notice and KVKK disclosure

This notice is provided under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK), to inform you about the personal data processed by World Walker Travel.

1. Data controller

The data controller for your personal data is World Walker Travel. You can reach us using the details on our contact page.

2. The personal data we process

  • Identity and contact details: first name, surname, email address and telephone number (including WhatsApp).
  • Booking details: the tour, activity or transfer you choose, the date, number of people, children's ages, hotel name, flight details and your notes (for example dietary or accessibility needs).
  • Correspondence: messages you send us through the contact form, email and WhatsApp.
  • Cookie and usage data: analytics and marketing data only if you give consent; details are in the Cookie Policy.
  • Health information (optional): conditions such as pregnancy or limited mobility that you choose to tell us about for your own safety.

Processing of Payment Data and Sharing with Yapı Kredi

The data controller for this section is GEP Turizm İşletmeciliği Ltd. Şti.. If you pay by card, the card number, security code (CVV) and expiry date are not stored or recorded by GEP Turizm İşletmeciliği Ltd. Şti.. This information is transmitted instantly, solely for 3D Secure verification and collection, to the virtual POS (Posnet) infrastructure of Yapı Kredi Bankası A.Ş.

The purpose of the sharing is to receive and verify the payment and, where necessary, to make the refund. The legal grounds are that it is necessary for the conclusion and performance of a contract (KVKK Art. 5/2-c) and for the data controller to comply with a legal obligation (KVKK Art. 5/2-ç).

Transaction records (order number, amount, bank approval code, transaction date and masked card number) are kept for accounting, resolution of objections and statutory retention obligations.

For your rights under KVKK Art. 11 you can apply at [email protected].

3. Purposes of processing

  • Receiving, confirming and managing your booking request, and sending you your pick-up time.
  • Carrying out the tour, activity and transfer you selected.
  • Answering your contact and support requests.
  • Meeting legal and financial obligations and protecting our rights in any dispute.
  • Where you consent, analysing site usage to improve our services.

4. Legal bases

Your data is processed on the grounds listed in the second paragraph of Article 5 of KVKK: the establishment or performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, and legitimate interests. Analytics and marketing cookies, and special categories of data such as health information, rely on your explicit consent, which you can withdraw at any time.

5. Transfers of data

Your data may be shared, only as far as needed to deliver the service, with: licensed balloon operators who run the flight, service providers such as transfer and accommodation providers, guides and activity partners, providers that host the site and supply email and messaging infrastructure, and competent public authorities. If data is transferred to a provider abroad, the conditions of Article 9 of KVKK are observed. We do not sell your data to third parties for marketing.

6. Retention periods

  • Booking records: for the limitation periods of rights and obligations arising from the contract and the retention periods required by financial legislation.
  • Contact form and WhatsApp messages: for a reasonable period after your request is resolved.
  • Analytics data: only for as long as you consent and for the lifetime of the cookie.

When the period ends, your data is deleted, destroyed or anonymised.

7. Your rights (KVKK Article 11)

By applying to the data controller you may exercise these rights:

  • To learn whether your data is processed and, if so, to request information.
  • To learn the purpose of processing and whether it is used accordingly.
  • To know the third parties, at home or abroad, to whom it is transferred.
  • To request correction if it is incomplete or inaccurate.
  • To request deletion or destruction under the conditions of Article 7 of KVKK, and to ask that this be notified to third parties who received the data.
  • To object to a result against you arising from analysis by automated systems.
  • To claim compensation if you suffer damage due to unlawful processing.

8. How to apply

You can send your requests in writing, with information that confirms your identity, using the details on our contact page. Your application is answered according to its nature within thirty days at the latest. If you find the reply insufficient, you may complain to the Personal Data Protection Board. If you are visiting from the European Economic Area, any rights you have under the relevant data protection law are also preserved.

This text is updated when necessary; the current version is published on this page.