Data Controller
Pursuant to the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Orfoz Bodrum ("the Business") acting as data controller, within the scope explained below.
- Company: Orfoz Bodrum Turizm A.Ş.
- Address: Kumbahçe Mah. Zeki Müren Cd. No: 13/1, 48400 Bodrum/Muğla, Türkiye
- Phone: +90 544 316 4285
- Email: info@orfoz.net
- Tax Office / No: Bodrum Tax Office – 645 083 92 77
- MERSİS No: [MERSİS NUMBER]
Personal Data Processed
- Identity information: first name, last name
- Contact information: phone number, email address
- Reservation/transaction information: selected experience, date/time, number of guests, special notes/requests
- Transaction security information: order/payment records, IP address, cookie data
Purposes of Processing Personal Data
- Carrying out reservation and order processes
- Communicating with the BUYER (WhatsApp, phone, email)
- Carrying out payment transactions and any refund processes
- Fulfilling legal obligations (invoicing, accounting records, etc.)
- Measuring and improving service quality
Legal Basis
Your personal data is processed on the legal bases set out in Article 5 of the KVKK, namely "being directly related to the establishment or performance of a contract," "compliance with a legal obligation," and "the data controller's legitimate interest, provided this does not harm the fundamental rights and freedoms of the data subject."
Transfer of Personal Data
Your personal data may be transferred, in accordance with the conditions set out in Articles 8 and 9 of the KVKK, to partner banks/payment institutions for the purpose of carrying out payment transactions, to authorized public institutions and organizations within the scope of legal obligations, and to the suppliers from whom we receive services (such as hosting/infrastructure service providers).
Retention Period
Your personal data is retained for the periods stipulated by applicable legislation (for example, 5 years for invoice records under the Tax Procedure Law) or for the period required by the purpose of processing; at the end of these periods, it is deleted, destroyed, or anonymized.
Rights of the Data Subject (KVKK Art. 11)
Pursuant to Article 11 of the KVKK, by applying to the Business you have the right to: learn whether your personal data is being processed; request information about it if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request correction if it has been processed incompletely or incorrectly; request its deletion/destruction within the conditions stipulated in the KVKK; request that correction/deletion be notified to third parties to whom the data has been transferred; object to a result that is to your detriment arising from the analysis of processed data exclusively through automated systems; and request compensation for damages if you suffer loss due to unlawful processing.
Method of Application
You may submit your requests regarding the rights listed above, together with documents verifying your identity, by email to info@orfoz.net or in writing to the Business's address stated above. Your requests will be concluded free of charge, depending on their nature, as soon as possible and within 30 days at the latest.