Privacy Policy
Last updated: 04.11.2026
This Privacy Policy explains how Barbaros Yachting collects, uses, shares and protects your personal data through the barbarosyachting.com website and related digital channels (the “Platform”). It has been prepared with regard to the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, for our users in the European Union, the General Data Protection Regulation (“GDPR”).
For the information notice required under the KVKK see our KVKK Information Notice, and for cookies see our Cookie Policy.
1. Who We Are
The data controller responsible for your personal data is Barbaros Turizm Yatçılık İnşaat İthalat İhracat ve Ticaret Anonim Şirketi.
- Address: Neyzen Tevfik Cad, Saray Sk. No:4, 48400 Bodrum/Muğla
- E-mail: info@barbarosyachting.com
- Phone: +90 549 401 00 01
For any privacy question or request, please write to info@barbarosyachting.com.
2. Data We Collect
- Information you give us: the first name, last name, e-mail, phone, country, travel preferences (dates, number of guests, budget, destination, yacht/route/tour) and messages you share in enquiry, contact, booking and account forms; passenger details in the case of a booking.
- Payment information: payment status and transaction reference. Card data is processed directly by the payment institution.
- Technical data collected automatically: IP address, browser and device type, language, time of visit and server logs.
- Data subject to your permission: usage data collected through analytics and marketing cookies.
- Pre-enquiry browsing record: kept in your browser as part of the enquiry service and sent to us only together with an enquiry (details below).
- Live support data: if you give “Live support” permission, the pages you visit and the time spent on them; if you use live chat, your messages and the name and e-mail you optionally share (details below). When our team views your page, also the page you see at that moment and your cursor movements, scrolling and clicks (form fields are masked; nothing is stored).
3. Why We Use Your Data and on What Legal Basis
| Purpose | GDPR basis | KVKK basis |
|---|---|---|
| Responding to your enquiries, preparing quotes and communicating with you | Pre-contractual steps / performance of a contract (Art. 6(1)(b)) | Art. 5/2-c |
| Managing your booking, collecting payment and providing the service | Performance of a contract (Art. 6(1)(b)) | Art. 5/2-c |
| Complying with legal obligations (invoicing, accounting, passenger lists, official requests) | Legal obligation (Art. 6(1)(c)) | Art. 5/2-ç |
| Platform security and preventing misuse | Legitimate interests (Art. 6(1)(f)) | Art. 5/2-f |
| Measuring and improving website usage | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5/1) |
| Keeping the pre-enquiry browsing record and attaching it to your enquiry so that we can respond to it | Steps prior to entering into a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) | Art. 5/2-c and Art. 5/2-f |
| Live visitor tracking so that we can offer you real-time help while you browse | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5/1) |
| Conducting a live chat you started yourself and answering your questions | Steps prior to entering into a contract (Art. 6(1)(b)) | Art. 5/2-c |
| Measuring advertising and campaign performance | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5/1) |
| Sending campaigns and newsletters | Consent (Art. 6(1)(a)) | Explicit consent and commercial message approval |
You may object at any time to processing based on legitimate interests. You may withdraw consent for consent-based processing at any time.
4. Cookies, Analytics, the Browsing Record and Live Support
No cookie or tracking tool other than strictly necessary cookies runs until you give permission. All optional categories are off by default. Google tools run in “Consent Mode”: as long as you have not given permission, no analytics or advertising cookies are written.
As part of the strictly necessary functioning of our enquiry service, a browsing record of the pages you visit before an enquiry and the time spent on each page is kept in your browser, regardless of your cookie preferences. It never leaves your device unless you submit an enquiry or contact form; it is then sent to us attached to that enquiry so that we can respond to it, helping our sales team understand your interests and make you a more relevant offer. The record is limited to 30 days and 50 pages. You can delete it at any time by clearing this website’s data in your browser, and you can object to, or request deletion of, information already attached to an enquiry as described in section 9. See our KVKK Information Notice and Cookie Policy for details.
Live support is separate from the browsing record and entirely optional. If you give “Live support” permission in your cookie preferences, the pages you visit while browsing, the time you spend on them, your device type, language and source of arrival are sent to our servers with a random identifier kept in your browser (by_live) and shown to our sales team in real time; our team may offer you help by starting a chat. This data is kept for 30 days. Without this permission you can still start a chat yourself via the “Live chat” option in the support bubble; in that case only your messages and the optional name and e-mail are processed, no page tracking takes place, and the pages you viewed are shared only if you tick the box in the chat panel. Chat records are kept for 12 months. When you withdraw permission, tracking stops and the tracking data on our servers is deleted; if you have no open chat, the identifier in your browser is deleted too. With this permission, when our team starts viewing your page to help you, the page you see and your cursor movements, scrolling and clicks are shown live to our team only while they are viewing; a notice appears at the bottom right of your screen meanwhile. What you type into form fields is masked, and screen viewing never runs on payment, booking, passenger details, account or offer pages. These views are not recorded; they are held temporarily for at most 3 minutes for transmission and then deleted.
You can change your choices at any time via the “Cookie preferences” link at the bottom of the website.
5. Who We Share Your Data With
- Yacht owners, captains and operational partners, to the extent your booking requires,
- Payment institutions and banks,
- Hosting, cloud, content delivery and e-mail service providers (e.g. Google Cloud/Firebase, Supabase, Cloudflare),
- With your permission, analytics and advertising providers: Google, Microsoft (Clarity) and Meta,
- Legal and financial advisers, competent public authorities and courts.
Our service providers process data only on our behalf and according to our instructions. We do not sell your personal data.
6. International Data Transfers
Some of our service providers may process data outside Türkiye and the European Economic Area, in particular in the United States. These transfers rely on mechanisms such as European Commission adequacy decisions (e.g. the EU-U.S. Data Privacy Framework), the European Commission’s standard contractual clauses and the appropriate safeguards set out in Article 9 of the KVKK. You can request a copy of the safeguards applied by writing to us.
7. Retention
We keep personal data only for as long as the purpose of processing requires and for the retention obligations and limitation periods set by law. Browsing information attached to an enquiry is kept for as long as the enquiry record; the browsing record in your browser is kept for at most 30 days. Live support tracking data is kept for 30 days and chat records for 12 months; a chat converted into an enquiry is kept for as long as the enquiry record. Cookie lifetimes are listed in our Cookie Policy. At the end of these periods, data is deleted, destroyed or anonymised. Screen viewing data is not stored; it is held temporarily for at most 3 minutes for transmission.
8. Security
We apply appropriate technical and organisational measures, such as encrypted connections (HTTPS), access controls and logging, to protect your data against unauthorised access, loss and misuse. No method of transmission or storage is completely risk-free, but we review our security on an ongoing basis.
9. Your Rights
Depending on where you are, you have the following rights under the KVKK and/or the GDPR:
- to access your data and obtain a copy,
- to have inaccurate or incomplete data corrected,
- to have your data erased,
- to restrict processing,
- to data portability (GDPR),
- to object to processing based on legitimate interests and to direct marketing,
- to withdraw your consent at any time,
- to lodge a complaint with a supervisory authority: in Türkiye the Personal Data Protection Board, in the EU the data protection authority of the country where you live or work.
To exercise your rights, write to info@barbarosyachting.com. We may ask for additional information to verify your identity. We respond to requests within 30 days at the latest.
10. Automated Decisions and Children
We do not take decisions producing legal effects about you based solely on automated processing. The Platform is not directed at people under 18; passenger details of children are shared only by the adult making the booking and only to the extent the booking requires.
11. Changes
We may update this policy from time to time. The current version is always published on this page and the date at the top changes. For significant changes relating to consent, your cookie preferences will be requested again.