Privacy Policy
Your privacy is important to us. This policy outlines how Cappadocia Trip Travel collects, processes, and protects your personal data.
INTRODUCTION
Cappadocia Trip Travel is a tourism company providing nationwide services, including transportation tickets, private transfers, accommodation and dining services, package tours, and full-day tours located in Cappadocia, Turkey. Cappadocia Trip Travel complies with Turkish legislation regarding personal data protection, including the Personal Data Protection Law (https://www.kvkk.gov.tr/en/), and its supplementary provisions.
Cappadocia Trip Travel is committed to:
- Collecting and using personal information responsibly.
- Ensuring the quality and security of information.
- Respecting the rights of individuals regarding their personal data.
This commitment includes reviewing and continuously improving processes to ensure adequate protection of personal data and compliance with legal requirements. Additional procedures, regulations, and guidelines may supplement this Policy as long as they align with its principles.
OBJECTIVE
This document establishes principles, uniform practices, and responsibilities for the processing of personal data by Cappadocia Trip Travel.
SCOPE
This Policy applies to all Cappadocia Trip Travel processes involving the personal data of customers stored in its databases. All employees, suppliers, and associated parties must comply with this Policy.
DEFINITIONS
- Personal Data: Information identifying a natural person, such as ID card, physical address, full name.
- Sensitive Data: Biometric data, racial/ethnic origin, income, political, religious, philosophical, or moral opinions, union membership, or health-related information.
- Processing: Any operation on personal data, including collection, storage, modification, consultation, use, transfer, or deletion.
- Consent: Prior, free, unequivocal, and explicit authorization for processing personal data.
- Personal Data Bank: Organized collection of personal data in any format.
- Data Controller: Entity responsible for processing personal data on behalf of the owner.
- Anonymization: Irreversible processing that prevents identification of the data subject.
- Disassociation: Reversible processing that prevents identification of the data subject.
COMPLIANCE OFFICERS
Cappadocia Trip Travel assigns responsibilities to personnel and suppliers for compliance. General Management reviews this Policy annually and addresses related inquiries. All employees and third parties handling personal data must comply with this Policy.
CONFIDENTIALITY
This Policy is confidential and for internal use only. Personal data may not be used without prior consent, except where legally required. Employees with access to sensitive data are required to maintain professional secrecy even after their employment ends.
PRINCIPLES
All processing must comply with the following principles:
- Legality: Personal data must be collected and processed legally.
- Consent: Personal data may only be processed with prior, free, and explicit consent.
- Purpose: Data must be collected for a clear, lawful, and specified purpose.
- Proportionality: Data collected must be adequate and not excessive.
- Quality: Data must be accurate, relevant, and kept up to date.
- Security: Adequate technical, legal, and organizational measures must protect personal data.
- Adequate Protection: International data transfers must ensure proper protection.
- Rights of Data Subjects: Data subjects may request access, update, rectification, deletion, or restriction of their data.
TRANSFERS OF PERSONAL DATA
Personal data may only be transferred to third parties with the consent of the data owner, except as permitted by law.
COLLECTION OF SENSITIVE DATA
Sensitive data will only be collected when strictly necessary and in compliance with purpose and proportionality principles.
DISCLOSURE OF PERSONAL DATA
Personal data will only be disclosed when:
- Required for providing services through third parties.
- The data owner is informed or provides consent.
- Required by law or public authorities.
- Necessary for audits or professional services with confidentiality obligations.
DELETION OF PERSONAL DATA
Once processing is complete and no legal obligation exists, data will be deleted or disassociated for statistical, commercial, or analytical purposes. Procedures for deletion will be defined accordingly.
SANCTION REGIME
Violations of this Policy are considered serious misconduct and may result in disciplinary action.
DISSEMINATION AND ENFORCEMENT
Cappadocia Trip Travel ensures compliance with this Policy, publishes it in accessible locations, and requires confidentiality obligations from all employees, contractors, and third parties handling personal data.
CONTACT INFORMATION
For any questions or to exercise your data protection rights:
- Company Name: Cappadocia Trip Travel
- Address: Cappadocia / Turkey
- Email: info@cappadociatriptravel.com
- Phone: +90 545 150 01 00
- Website: cappadociatriptravel.com
We will respond to requests within the legal timeframes.
Turkish Personal Data Protection Authority (KVKK) Compliant
GDPR Aligned for International Data Processing
By using our services, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: 20.03.2026