Legal
Privacy & KVKK Information Notice
This notice explains how personal data is collected, used, shared and protected when you browse TripTurkeyNow, request information or make a booking.
Last updated: 18 July 2026
1. Data controller
For the purposes of Türkiye's Personal Data Protection Law No. 6698 (“KVKK”), the data controller is:
- Legal entity
- BAGİNYA TURİZM SEYAHAT ACENTASI ORGANİZASYON SANAYİ TİCARET LİMİTED ŞİRKETİ
- Agency / brand
- BOVEMIN GLOBAL TURİZM / TripTurkeyNow
- Address
- Cumhuriyet, Güllüce-1 Sokak No:16/3, 50400 Ürgüp/Nevşehir, Türkiye
- Phone
- +90 538 988 49 50
2. Personal data we may process
| Category | Examples |
|---|---|
| Identity and contact | Name, email address, telephone or WhatsApp number, country and billing details |
| Booking and travel | Tour, date, group size, child ages, hotel, pickup point, itinerary, flight details and booking reference |
| Traveller documentation | Passport or identification details when required for a named flight, ticket, insurance or regulated supplier service |
| Requests and preferences | Language, destination interests, dietary information, accessibility requests and special arrangements |
| Payment and transaction | Amount, currency, payment status, transaction reference and refund information; card data may be processed by the payment provider used at checkout |
| Communications | Email, WhatsApp, telephone and support correspondence, complaints and feedback |
| Technical and usage | IP address, device and browser information, security logs, consent choices and cookie or analytics data when enabled |
| Marketing preferences | Newsletter or promotional-message choices and consent records |
Health, disability, dietary or other sensitive information should be provided only when relevant to a requested service. Where such data is legally considered special-category data, it is handled using the processing condition and safeguards required by applicable law.
3. Purposes and legal grounds
Depending on the interaction, personal data may be processed to:
- Answer enquiries and prepare requested itineraries or quotations
- Create, confirm, modify and deliver travel bookings
- Coordinate guides, transport, accommodation, flights, balloon operators, attractions and other suppliers
- Process payments, refunds, invoices and accounting records
- Provide pre-trip, pickup, operational and emergency communication
- Handle complaints, disputes, legal claims and regulatory obligations
- Maintain website security, prevent misuse and diagnose technical problems
- Measure or improve the website where the required consent or another lawful basis exists
- Send marketing only where permitted and honour opt-out choices
Processing may rely on the steps necessary to establish or perform a contract, compliance with legal obligations, establishment or protection of legal rights, legitimate interests that do not override individual rights, and explicit consent where the law requires it. A privacy notice and an explicit-consent request are separate: receiving this notice does not itself mean you consent to optional processing.
4. How data is collected
Data may be collected through website forms and checkout, email, telephone, WhatsApp, social media messages, cookies and similar technologies, written proposals, suppliers involved in your trip, or another person making a group booking for you.
If another traveller provides your information, they should make this notice available to you and provide only information they are authorised to share.
5. Who may receive personal data
Only data reasonably needed for the relevant purpose may be shared with recipient groups such as:
- Hotels, airlines, transport companies, balloon operators, guides, attractions, insurers and other travel suppliers
- Payment, banking, accounting and invoicing providers
- Website hosting, cloud, communications, analytics, security and customer-support providers
- Professional advisers, auditors and insurers
- TÜRSAB, courts, law-enforcement, tax, consumer and other competent public authorities where legally required
Suppliers may act as separate data controllers for their own legal and operational purposes. Their notices may also apply.
6. International transfers
Travel arrangements and online service providers may require personal data to be accessed or processed outside Türkiye. Where a cross-border transfer occurs, it must rely on a transfer mechanism, appropriate safeguard or permitted exceptional situation recognised by applicable law. The mechanism used depends on the recipient, destination and processing activity.
7. Retention
Personal data is retained only for the period needed for the stated purpose and applicable legal, accounting, tax, consumer, insurance, dispute and recordkeeping obligations. When the reason for keeping data ends, it is deleted, destroyed or anonymised in accordance with the applicable retention and disposal process.
8. Security
Reasonable administrative and technical measures are used to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage method can be guaranteed completely secure, so customers should also protect their devices and avoid sending card credentials or passwords through messages.
9. Marketing communications
Promotional electronic messages are sent only where permitted by applicable rules and the recorded preference. You can withdraw marketing consent or opt out using the method in the message or by contacting us. Service messages required for an enquiry or booking are not marketing.
10. Children
Booking information about a child should be supplied by a parent, guardian or authorised group organiser. Provide only the details needed to price, assess and deliver the service safely.
11. Your KVKK rights
Subject to Article 11 of KVKK and its conditions, you may ask whether personal data is processed, request information about processing, learn its purpose and whether it is used accordingly, learn recipient categories, request correction, request deletion or destruction where conditions are met, request notification of certain actions to recipients, object to an outcome produced exclusively by automated analysis where it is against you, and request compensation where unlawful processing causes damage.
Other privacy laws may provide additional rights where they apply to the processing.
12. How to make a privacy request
Send a written request marked “KVKK Application” to the registered address above or email info@bvnglobaltravel.com. State your name, contact method, relationship with TripTurkeyNow, the right being exercised and enough detail to identify the relevant processing.
We may request proportionate information to verify identity and prevent disclosure to an unauthorised person. Applications are handled using the method and timeframe required by applicable law.
13. Updates
This notice may be updated when processing activities, suppliers, technologies or legal requirements change. The current version and update date will be published on this page.



