Privacy Policy

1.1 Data controller

The data controller is Elite Travel Agency Cappadocia ('we', 'us'). Address: İsalı Gaferli, Avcılar Mahallesi, Eski Bağyolu Sk. No:9/1, Avcılar Mahallesi, Nevşehir, 50180, Turkey. Contact: [email protected] / +90 532 290 86 50.

1.2 Personal data we collect

• Booking & contact data: name, email, phone, nationality/country (if required), pickup location, participant details you provide during booking.
• Reservation data: booking code, selected service, date, number of persons, special notes you submit, and communications with support.
• Payment data: payment status, amount, currency, and transaction references from our payment providers. We do not store full card numbers.
• Technical data: IP address, device/browser info (user agent), approximate location (city/country), and basic logs for security and fraud prevention.
• Preferences: language, currency, marketing opt-out status, and cookie preferences (where available).

Note: We generally do not request 'special categories' of data (e.g., health). If you voluntarily share such details in notes for safety/assistance, we handle them with extra care and only as necessary.

1.3 How we collect data

We collect data when you use our website, submit a booking form, contact us, or complete a payment. Some technical/analytics data may be collected automatically via cookies or similar technologies. In limited cases, we may receive data from suppliers (e.g., balloon operators, guides, transfer companies) to confirm or manage your reservation.

1.4 Purposes of processing

• To create, confirm, and manage your bookings.
• To deliver the requested services (including pickup and operational coordination).
• To communicate with you about changes, safety, and support.
• To process payments, prevent fraud, and handle disputes or chargebacks.
• To comply with legal obligations (consumer rights, accounting/tax, tourism regulations).
• To improve our website and services (security monitoring, troubleshooting, performance analytics).

1.5 Sharing and disclosure

We share personal data only when necessary for the purposes above, including with:

• Suppliers: licensed balloon operators, guides, transportation providers, activity providers, hotels (to deliver your service).
• Payment providers: to process payments and manage refunds/chargebacks.
• Technology providers: hosting, email delivery, analytics tools, security services (under confidentiality/processing terms where applicable).
• Authorities: where required by law or valid legal requests.

We do not sell your personal data.

1.6 International transfers

Some providers (e.g., cloud hosting, analytics, email services) may process data on servers located outside Türkiye. Where required, we apply appropriate safeguards and contractual protections to maintain a level of protection consistent with applicable law.

1.7 Data retention

We keep personal data only as long as necessary for the purposes described above, including legal retention obligations (e.g., accounting/tax records, consumer dispute handling). When no longer needed, we delete or anonymize data within a reasonable timeframe.

1.8 Security

We use reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or loss (e.g., access controls, encryption in transit, monitoring). No online system is 100% secure, but we work to keep risk low and boring.

We use cookies (or similar technologies) for essential functionality (e.g., session, preferences) and to understand how the website performs (analytics). You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

If we use non-essential cookies (e.g., marketing/advertising), those are enabled only where permitted and typically with your choice/consent (for example via a cookie banner/preferences).

This section is provided to fulfill the information obligation under KVKK No. 6698 (Article 10).

3.1 Data controller

Elite Travel Agency Cappadocia is the data controller. Address: İsalı Gaferli, Avcılar Mahallesi, Eski Bağyolu Sk. No:9/1, Avcılar Mahallesi, Nevşehir, 50180, Turkey. Contact: [email protected] / +90 532 290 86 50.

3.2 Categories of personal data processed

• Identity & contact: name, email, phone, country/nationality (when required).
• Booking & service: reservation code, selected service, date, persons, pickup location, participant details you submit.
• Customer communication: support messages, complaints, service-related communications.
• Payment & finance: payment status, amount, currency, transaction references (card details are processed by payment providers; we do not store full card numbers).
• Technical/security: IP, device/browser info, logs, anti-fraud signals.
• Preferences: language/currency, cookie preferences (where available), marketing opt-out.

3.3 Purposes of processing

• Creating, confirming, and managing reservations.
• Delivering tourism services (tours, balloon, transfers).
• Operational coordination (pickup, supplier confirmation, safety).
• Payment collection, refunds, dispute/chargeback handling.
• Compliance with legal obligations (consumer law, taxation, accounting, tourism legislation).
• Security, fraud prevention, platform reliability and improvement.
• Sending service-related notifications (marketing only where permitted and with opt-out/consent rules).

3.4 Recipients / recipient groups and transfer purposes

We may transfer personal data, limited to the purposes above, to:

• Tourism service suppliers (balloon operators, guides, transfer providers, hotels, activity partners) for fulfilling reservations and operational coordination.
• Payment institutions/providers for payment processing, refunds, and chargeback/dispute management.
• IT/service providers (hosting, email/SMS, analytics, security) to operate the platform securely.
• Authorized public institutions when required by law or valid legal requests.
• Professional advisors (accountants, auditors, lawyers) bound by confidentiality where necessary for legal compliance and dispute management.

International transfers may occur if certain providers host or process data outside Türkiye; safeguards are applied where required.

3.5 Method of collection & legal bases

Your personal data is collected via website forms, cookies or similar technologies, email/phone communications, payment providers, and (where necessary) through suppliers for reservation fulfillment.

Main legal bases under KVKK (Article 5/6), depending on the context:

• Contract necessity: processing required to establish/perform the reservation and provide the service.
• Legal obligation: processing required for tax/accounting, consumer rights, and tourism regulation compliance.
• Legitimate interests: security, fraud prevention, service improvement, and operational continuity (without harming fundamental rights).
• Establishing/defending a right: handling disputes, complaints, and chargeback processes where applicable.
• Consent (where required): certain marketing communications or non-essential cookies/technologies.

If special category data is ever processed (e.g., health data you choose to share for safety assistance), we apply stricter measures and rely on the appropriate legal basis/explicit consent where required by law.

3.6 Retention period

Data is retained for the duration necessary to fulfill the purposes above and to comply with legal retention requirements. After that, data is deleted or anonymized in line with our internal retention and disposal procedures.

3.7 Your rights (KVKK Article 11) & how to apply

Under KVKK Article 11, you have the right to:

• Learn whether your personal data is processed
• Request information if your personal data has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know third parties to whom your data is transferred
• Request correction of incomplete/incorrect data
• Request deletion or destruction under legal conditions
• Request notification of correction/deletion to third parties where applicable
• Object to results arising from automated processing
• Request compensation if you suffer damage due to unlawful processing

To exercise these rights, contact [email protected] and include sufficient information to verify your identity. We respond within the legally required timeframes.

Questions about privacy or KVKK? Contact us at [email protected] or +90 532 290 86 50.

Address: İsalı Gaferli, Avcılar Mahallesi, Eski Bağyolu Sk. No:9/1, Avcılar Mahallesi, Nevşehir, 50180, Turkey.