Personal Data Protection & Privacy Notice

Personal Data Processing Information Notice

As Mystic Tour Travel Agency Limited Company ("Mystic Tour Travel"), we attach the utmost importance to protecting the privacy and security of your personal data.

In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we process and protect all personal data relating to our customers, business partners, website visitors, and other individuals with whom we interact.

As the Data Controller under the applicable legislation, we process your personal data in accordance with the principles and requirements set out below.

1. Collection, Processing, and Purpose of Personal Data

Your personal data may vary depending on the nature of your relationship with Mystic Tour Travel.

We may collect your personal data through various methods, including:

Our website
Email correspondence
Telephone communications
Social media platforms
Mobile applications
Online reservation systems
Contact forms
Face-to-face communication
Other electronic or non-electronic channels

Your personal data may be collected, updated, stored, and processed throughout your relationship with Mystic Tour Travel.

The information collected may be processed for purposes including, but not limited to:

Providing requested travel services and reservations
Organizing tours and travel arrangements
Customer support and communication
Managing bookings and payments
Improving our products and services
Ensuring legal and commercial security
Fulfilling contractual obligations
Complying with legal requirements
Financial and accounting operations
Internal administration
Business planning and development
Human resources management (where applicable)

All personal data is processed in accordance with Articles 5 and 6 of the Turkish Personal Data Protection Law (KVKK).

2. Sharing of Personal Data

Your personal data may be shared only when necessary and only for the purposes described above.

Depending on the services requested, your information may be shared with:

Business partners
Hotels
Airlines
Transportation providers
Licensed tour guides
Payment service providers
Insurance companies
Technology service providers
Authorized public authorities
Legally authorized institutions
Other third parties where required by law

Personal data is transferred only in accordance with applicable legal requirements and the provisions of Articles 8 and 9 of the Turkish Personal Data Protection Law.

3. Method and Legal Basis for Collecting Personal Data

Your personal data may be collected verbally, in writing, or electronically.

The legal basis for processing your data includes:

Performing travel reservation and tour services
Fulfilling contractual obligations
Compliance with applicable legal obligations
Protecting the legitimate interests of Mystic Tour Travel
Providing customer support
Obtaining your consent where legally required

Personal data collected under these legal grounds may be processed and transferred for the purposes described in this Privacy Notice in accordance with Articles 5 and 6 of the Turkish Personal Data Protection Law.

4. Your Rights Under the Turkish Personal Data Protection Law

As a data subject, you have the following rights under Article 11 of the Turkish Personal Data Protection Law (KVKK):

Learn whether your personal data is being processed.
Request information regarding the processing of your personal data.
Learn the purpose of processing and whether your data is used in accordance with that purpose.
Know the third parties to whom your personal data has been transferred, whether within Turkey or abroad.
Request correction of incomplete or inaccurate personal data.
Request the deletion or destruction of your personal data where the legal grounds for processing no longer exist.
Request notification of corrections or deletions to third parties to whom your data has been transferred.
Object to decisions based solely on automated processing that produce legal consequences affecting you.
Request compensation if you suffer damage due to unlawful processing of your personal data.

How to Exercise Your Rights

You may submit your requests regarding your personal data in writing or through any other method permitted under applicable legislation.

Mystic Tour Travel will respond to your request as soon as possible and no later than 30 days, free of charge, unless a fee is required under the applicable regulations issued by the Turkish Personal Data Protection Authority.

Your request should include sufficient information to verify your identity together with a clear explanation of the rights you wish to exercise.

For privacy-related requests, please contact us using the information provided on our website.