(KVKK Compliant – Türkiye Kişisel Verileri Koruma Kanunu)
Last Updated: [01-06-2025]
1. Data Controller Information
Under Law No. 6698 (KVKK), the data controller is:
Visit Istanbul
[Istanbul]
MERSIS No:
Email: kvkk @ visitistanbul.com
2. Personal Data Collection
We process data in accordance with KVKK Article 5:
Explicit Consent Cases:
✓ Marketing communications
✓ Cookie tracking (non-essential)
✓ Sensitive data (if collected)
Without Consent (KVKK Art. 5/2):
✓ Contract fulfillment (e.g., booking requests)
✓ Legal obligations (e.g., tax records)
✓ Publicly available data
3. KVKK-Specific Provisions
Data Subject Rights (KVKK Art. 11):
You may request:
▸ Whether your data is processed
▸ Purpose of processing and third parties
▸ Correction of incomplete/incorrect data
▸ Deletion/destruction per KVKK Art. 7
▸ Objection to automated processing
Request Method:
Submit a signed written application to our address with:
- Name/surname
- TR ID number (or passport for foreigners)
- Contact details
- Request details
Response time: 30 days (KVKK Art. 13)
4. Data Transfers
International transfers comply with KVKK Art. 9:
✓ EU partners: Protected under GDPR adequacy
✓ Other countries: Implemented via Binding Corporate Rules or your explicit consent
5. Cookie Policy (KVKK Alignment)
We categorize cookies as:
Strictly Necessary
(No consent required – KVKK Art. 5/2-f)
- Session cookies
- Security features
Performance & Advertising
(Require consent via banner)
- Google Analytics (_ga)
- Facebook Pixel
Withdrawal: Adjust via Cookie Settings
6. Data Retention
Per KVKK Art. 4:
- Personal data is stored only as long as legally required
- Deletion/anonymization occurs when purposes expire
7. Security Measures
We implement:
✓ Technical: Encryption, access controls
✓ Administrative: KVKK training for staff
✓ Physical: Secure server locations
8. Complaints
To the Turkish Data Protection Authority (KVK Kurumu):
📧 [email protected]
🌐 www.kvkk.gov.tr