Data Protection Notice (KVKK)

01

Data controller

This notice has been prepared in accordance with Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles of the Disclosure Obligation.

The data controller is the company operating the Aşk İstanbul brand. Its registered name, registry details, address and official correspondence channels will be published in this section once confirmed by the company; we do not publish unverified corporate details.

• Registered company nameAwaiting confirmation from the company
• Trade registry (MERSİS) / tax numberAwaiting confirmation from the company
• Office addressAwaiting confirmation from the company
• Registered e-mail (KEP) addressAwaiting confirmation from the company
• Application e-mail addressAwaiting confirmation from the company

02

Personal data we process

We process only what you send us and what is genuinely needed to deliver the service. The data collected through this site is:

• Identity data: your first and last name.
• Contact data: your phone / WhatsApp number and, if you provide it, your e-mail address.
• Request data: the service you are interested in, your travel dates and the free text you write in the message field.
• Transaction data: the page the form was sent from (source tag), the site language you selected and the time of submission.
• Chat data: the messages you send through the live support window on the site.
• Security data: IP address, browser and device information held in server logs.

In medical tourism, health data is a special category of personal data under Article 6 of the KVKK. Please do not write diagnoses, reports or medical photographs into the form or chat fields; such information is processed only with your explicit consent and only to the extent required.

03

Purposes of processing

• Receiving your request, preparing a price and programme proposal, and answering your questions.
• Organising the service you asked for: booking, airport welcome, accommodation, tours, property viewings or clinic appointments.
• Keeping in touch with you during and after the service, and resolving complaints and requests.
• Measuring service quality and improving the website through aggregated statistics that do not identify you.
• Meeting the retention, evidence and reporting obligations imposed by law.

Campaign or promotional messages unrelated to your request are sent only if you give separate consent for them.

04

Legal basis

• KVKK Art. 5/2-c — Directly related to the conclusion or performance of a contract: fulfilling booking, transfer, tour and similar service requests.
• KVKK Art. 5/2-ç — Compliance with a legal obligation: record-keeping and retention duties under tax, tourism and consumer legislation.
• KVKK Art. 5/2-f — Legitimate interest: maintaining communication, measuring service quality and ensuring transaction security.
• KVKK Art. 5/1 — Explicit consent: processing that can only be carried out with your consent, such as optional cookies, commercial electronic messages and sharing of special category data.

05

Transfer of personal data

We do not sell your data and do not transfer it to third parties for marketing purposes. Transfers happen only to fulfil your request and only as far as necessary:

• Providers of the service you requested: hotels, transfer and car rental companies, tour and guiding services, property developers, partner clinics and hospitals.
• Technology providers hosting the website and the database; they process the data only on our instructions.
• Public authorities and judicial bodies legally entitled to request it, in the cases required by law.

If you prefer to write via WhatsApp, the conversation takes place on WhatsApp (Meta) infrastructure and is subject to that service’s own privacy terms. Where a transfer abroad is required, the conditions of KVKK Art. 9 apply; the list of providers and the legal ground for transfer will be stated explicitly in this text once the technical infrastructure is finalised.

06

Retention period

Your personal data is kept for as long as it is needed for the purpose it was collected for, and for the retention and limitation periods required by law.

• Requests and quotes that did not proceed: deleted a reasonable time after the last contact.
• Records tied to an actual service relationship: kept for the statutory retention period (for example ten years for financial records).
• Live support conversations: deleted once the support process is complete.

Exact retention periods and destruction methods will be added to this section once the company’s data retention and destruction policy is approved by legal counsel.

07

Your rights as a data subject (Art. 11)

By applying to the data controller you may exercise the following rights:

• Learn whether your personal data is being processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties in Turkey or abroad to whom the data has been transferred.
• Request correction if the data is incomplete or incorrect.
• Request erasure or destruction within the conditions of Art. 7.
• Request that correction, erasure and destruction be notified to third parties the data was transferred to.
• Object to a result against you produced solely by automated analysis of your data.
• Claim compensation for damage arising from unlawful processing.

08

How to apply

You may submit requests regarding your rights in writing, through registered electronic mail (KEP), or from the e-mail address registered in our system, in line with the Communiqué on Application Procedures to the Data Controller. Your application is concluded free of charge within thirty days at the latest; if the process entails an additional cost, the fee set out in the Board’s tariff may be charged.

If your application is rejected, if you find the response insufficient, or if no response is given in time, you retain the right to file a complaint with the Personal Data Protection Board.

The postal address, KEP address and e-mail account to be used for applications will be published here once confirmed by the company. Until then you can reach us through the WhatsApp line or the request form on this site.