Privacy Policy

Effective date: [DATE]
Last updated: [DATE]

1. Purpose and Scope

This Privacy Policy has been prepared to explain the general principles and practices regarding the protection of personal data processed within the scope of all services offered by TRIPORA GROUP TURİZM GAYRİMENKUL VE DANIŞMANLIK LİMİTED ŞİRKETİ ("Tripora").

The Policy covers data processing activities carried out through our website tripora.com, our mobile applications, WhatsApp and other communication channels, our offices, our call center, and all our digital assets.

Detailed information regarding the processing of your personal data is included in our documents titled KVKK Clarification Text and Cookie Policy. This policy is complementary to the documents in question.

2. Data Controller

3. Our Core Principles

Tripora processes your personal data in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK") and the relevant secondary legislation, in compliance with the following principles:

• Compliance with the law and rules of honesty

• Being accurate and up-to-date when necessary

• Processing for specific, explicit, and legitimate purposes

• Being relevant, limited, and proportionate to the purpose of processing

• Retention for the period stipulated in the relevant legislation or required for the purpose of processing

4. What Data We Collect

Tripora collects data in different categories such as identity, contact, financial, passport, health declaration, cookie, and traffic data within the scope of reservation, package tour, transfer, visa agency, customer service, and marketing activities. For a detailed list, please review the KVKK Clarification Text.

5. How We Collect Data

We collect your personal data through the following channels:

• Forms and reservation systems on our website

• WhatsApp, phone, e-mail, and call center correspondences

• Face-to-face interviews and physical documents

• Messages received through our social media accounts

• Cookies and similar tracking technologies

• Data flows from our business partners and suppliers (only for the provision of the service)

6. For What Purpose We Use Data

Your personal data is processed within the framework of performance of the contract, legal obligations, legitimate interest, and your explicit consent for the following purposes:

• Execution of reservation and tour operations

• Evaluation of customer requests and complaints

• Management of financial processes

• Legal reporting and notification obligations

• Marketing, campaign, and innovation notifications (with explicit consent)

• Improving service quality and statistical analysis

7. Sharing with Third Parties

Your data is shared with airlines, hotels, transfer providers, insurance companies, payment institutions, consulates, TÜRSAB, and authorized public institutions to the extent necessary for the service to be completed. Tripora obtains a commitment to process data in compliance with KVKK from all parties with whom data is shared.

We do not sell your data to third parties for marketing purposes.

8. Cross-Border Data Transfer

Due to international tours, your data may be transferred to suppliers in the EU and other countries. These transfers are made under the scope of the exception of KVKK Art. 9/2, as they constitute a necessity for the implementation of the contract, or based on your explicit consent.

9. Data Security Measures

Tripora applies technical and administrative measures for the security of your personal data:

Technical Measures

• Data transmission with SSL/TLS encryption

• Database encryption (encryption at rest)

• Regular security tests and penetration tests

• Firewall and intrusion detection/prevention systems

• Access logs and audit trails

• Regular backup and disaster recovery plans

• Anti-virus and malware protection systems

Administrative Measures

• Confidentiality agreements for personnel

• Regular KVKK and data security training

• Role-based management of access rights

• Data processing agreements signed with suppliers

• KVKK compliance policies and internal audits

• Data breach response plan

10. Children's Data

Tripora processes the data of participants under the age of 18 only with the written permission of the parent/guardian and to the extent necessary for the execution of the reservation service. Data processing for marketing purposes is not performed for children.

11. Rights of the Data Subject

Within the framework of Article 11 of the KVKK, you have the right to learn whether your data is being processed, to request access, correction and deletion, to learn about the third parties to whom it is transferred, to object to processing, and to request the elimination of damages. For application channels and procedures, see the KVKK Clarification Text.

12. Cookies

Cookies are used on our website for performance, functionality, and marketing purposes. Please review our Cookie Policy for cookie usage, managing preferences, and disabling methods.

13. Linked Websites

Our website may contain links to third-party sites (hotel booking platforms, airlines, social media, etc.). Tripora is not responsible for the privacy practices of these sites.

14. Policy Changes

This Privacy Policy may be revised in line with changes in legislation or updates in the scope of services. Significant changes are announced via email or on our website.

15. Contact

• E-mail: [info@tripora.com]

• KEP: [kep address]

• Phone: +90 541 824 79 09

• Address: 19 Mayıs Mah. Halaskargazi Cad. No: 216 İç Kapı No: 3, Şişli / İstanbul

Your right to complain to the Personal Data Protection Authority is reserved: kvkk.gov.tr