1. Data controller
Data controller: [REGISTERED BUSINESS NAME]. Address: [BUSINESS ADDRESS]. Contact email / registered electronic mail (KEP): [CONTACT ADDRESS]. These fields must be completed by the website operator.
2. Data processed and purposes
The quote form collects your full name, email address, optional phone number, preferred route, date, number of guests and message. This information is used to assess your enquiry, prepare a suitable proposal and contact you about your request. Do not include unnecessary identity documents, payment details or sensitive personal data in the message field.
3. Collection method and legal basis
Data is collected electronically when you complete the website form. For quote requests relating to entering into a contract, the condition in Article 5(2)(c) of the Turkish Personal Data Protection Law may be relied upon following an assessment of necessity for the relevant processing activity. Any processing based on a legal obligation, the establishment of rights or other grounds must have its purpose and basis explained separately. [COMPLETE THE SPECIFIC LEGAL BASES ACCORDING TO THE PROCESSING INVENTORY]. Acknowledging that you have read the notice is not marketing permission or general explicit consent.
4. Recipients and transfers
The current application stores the request in the database on the website server and makes it available to authorised administrators; it does not send SMS messages. If email notifications are configured, the administrator receives the request number and a panel link; the personal content of the form is not included in the notification email. The live business must identify its hosting provider, technical service providers and any boat operators with whom information is shared to prepare a proposal, together with the relevant purposes: [RECIPIENT GROUPS AND TRANSFER PURPOSES]. Where international transfers take place, the service used and legal mechanism must be described separately: [INTERNATIONAL TRANSFER ARRANGEMENTS].
5. Retention
[RETENTION PERIOD OR CRITERIA USED TO DETERMINE IT]. The current software does not automatically delete requests at the end of a retention period. The business must define retention and disposal procedures and take appropriate action when the processing purpose or legal retention requirement ends.
6. Rights and requests
Under Article 11 of the Law, you have rights to learn whether your data is processed, request information if it is, learn the purpose of processing and whether it is used accordingly, identify recipients, request correction of incomplete or inaccurate data, request deletion or destruction under the applicable legal conditions, and request that these actions be notified to recipients. You may object to adverse results arising from automated analysis and seek compensation for damage caused by unlawful processing.
See the data subject request page for contact channels and the information required.