Personal Data Protection Policy

Personal Data Protection

TULPAR TRAVEL TURİZM ORGANİZASYON VE TİC. LTD. ŞTİ. processes personal data in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and the EU General Data Protection Regulation (GDPR).

Processing Principles

• Processing in compliance with the law and good faith
• Keeping data accurate and up to date
• Processing for specified, explicit, and legitimate purposes
• Being proportionate to the processing purposes
• Retention only for the period required by law

Legal Grounds

Data is processed based on the conclusion and performance of a contract, compliance with legal obligations, the legitimate interests of the company, and the explicit consent of the data subject where required.

Data Subject Rights

• Learn whether personal data is being processed
• Request access to and rectification of the data
• Request erasure or destruction of the data
• Object to processing
• Withdraw previously given consent

To exercise your rights, contact: tulpar@tulpar-travel.com.

Security

Technical and organizational measures (SSL encryption, PCI DSS compliance, secure servers in Turkey and the EU, regular audits) are applied to prevent unauthorized access.