KVKK Information Notice

Your personal data is processed by Barbaros Turizm Yatçılık İnşaat İthalat İhracat ve Ticaret Anonim Şirketi (“Barbaros Yachting” or the “Company”) as data controller.

• Address: Neyzen Tevfik Cad, Saray Sk. No:4, 48400 Bodrum/Muğla
• E-mail: info@barbarosyachting.com
• Phone: +90 549 401 00 01

Depending on how you use the Platform and your relationship with us, the following categories of personal data may be processed:

• Identity data: first name, last name.
• Contact data: phone number, e-mail address, country.
• Customer transaction data: enquiry and quote details (yacht, route or tour preference, dates or preferred month, number of guests, budget range, destination, special requests), booking details and correspondence.
• Passenger data: where a booking is confirmed, the passenger information required by law and by the operation (e.g. full name, gender, nationality, passport or ID number).
• Financial data: information such as payment status and transaction reference. Your card details are processed by the payment institution; the Company does not store card details.
• Transaction security data: IP address, date and time, browser and device information, server logs.
• Marketing and analytics data (only if you give permission): website usage data obtained through cookies and similar technologies, and the browsing record described in section 4 below.

Your personal data is processed for the following purposes and on the legal grounds listed in Article 5 of the KVKK:

Filling in an enquiry form is necessary for us to respond to you; this processing is a pre-contractual step and therefore does not rely on your consent. Processing for analytics and marketing is entirely optional; declining it does not prevent you from using the Platform or sending an enquiry.

If you give “Analytics” permission in your cookie preferences, a first-party browsing record is kept in your browser’s local storage (localStorage). It helps us understand which pages you were interested in so that we can respond to your enquiry better.

• Content: the address and title of the pages you visit, the time you entered each page, the time spent on the page while the tab was visible, the number of visits, your first landing page, the address of the referring website (without query parameters) and any campaign parameters (utm_*, gclid, fbclid, msclkid). Other query parameters in addresses and the contents of forms are not recorded.
• Limits: the record covers the last 30 days and at most 50 pages; older entries are deleted automatically. At most 30 minutes are counted per page.
• Sharing: the record is sent to us only when you submit an enquiry or contact form, attached to that enquiry. If you never send an enquiry, the record never leaves your device.
• Retention: browsing information attached to an enquiry is kept together with, and for as long as, the enquiry record.
• Withdrawal: when you withdraw analytics permission, the record in your browser is deleted. You can ask us to delete information already attached to an enquiry using the methods in section 8.

Your personal data is collected partly or fully by automated means through the enquiry, contact, booking and account forms on the Platform, communication channels such as phone, e-mail and WhatsApp, payment service providers, and cookies and similar technologies.

Your personal data may be transferred, limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, to the following groups of recipients:

• Yacht owners, captains and operational partners, to the extent required to perform the booking,
• Payment institutions (e.g. iyzico) and banks,
• Hosting, cloud, content delivery and e-mail service providers (e.g. Google Cloud/Firebase, Cloudflare),
• Analytics and advertising providers (only if you give permission): Google (Google Analytics, Google Tag Manager, Google advertising products), Microsoft (Clarity) and Meta (Meta Pixel),
• Legal, accounting and audit advisers,
• Competent public authorities and courts, upon request.

Transfers abroad: some of these providers (in particular Google, Microsoft and Meta) may process data on servers outside Türkiye, including in the European Union and the United States. Such transfers are based on the mechanisms set out in Article 9 of the KVKK (an adequacy decision, appropriate safeguards such as standard contracts, or the other cases provided by law). Analytics and marketing tools only run if you allow the relevant cookie category.

• Enquiry and quote records: for as long as needed to handle the enquiry and, afterwards, for the applicable statutory limitation periods in case of disputes.
• Booking, invoicing and accounting records: for the periods required by the Turkish Commercial Code and tax legislation.
• Transaction security records: for the periods required by Law No. 5651 and related legislation.
• Cookies: for the periods listed in the table in our Cookie Policy; the browsing record in your browser for at most 30 days.

At the end of these periods your personal data is deleted, destroyed or anonymised.

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it has been transferred; to request correction if it is incomplete or inaccurate; to request erasure or destruction under the conditions of Article 7 of the KVKK; to request that these actions be notified to the third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation if you suffer damage due to unlawful processing.

You can withdraw the consent you gave for consent-based processing at any time via the “Cookie preferences” link at the bottom of the website. Withdrawal does not affect the lawfulness of processing carried out before it.

You can submit your application, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller and together with information identifying you, by e-mail from the address registered in our systems to info@barbarosyachting.com, with a secure electronic or mobile signature, or in writing with a wet signature to Neyzen Tevfik Cad, Saray Sk. No:4, 48400 Bodrum/Muğla.

Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature; if the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, if you find our answer insufficient or if we do not respond in time, you may lodge a complaint with the Personal Data Protection Board.

This notice may be updated to reflect changes in legislation or in our processing activities. The current version is always published on this page; for significant changes, your cookie preferences may be requested again.