KVKK Privacy Notice

Data controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), the company operating the GoGlobal platform is the data controller with respect to the processing of your personal data.

The data controller's legal name, trade registry details, registered address and contact channels [avukat/sahip tarafından doldurulacak]. Until this information is completed, this text remains a draft; the notice banner at the top of the page states this explicitly.

Personal data processed

When you create a membership: your full name and email address are processed. This information is used to create your account, sign you in, and link your bookings to you.

When you pay as a guest (without membership): your full name, email address, and, for identity verification purposes, your passport number are processed. These three fields are mandatory in the platform's guest payment flow, and none may be skipped.

During the order and payment process, the following is also processed: information about the activity/service you selected, the payment amount and currency, the order status, the booking date and time, and a verification record confirming that the service was received via QR scan. Your payment instrument details (card number, etc.) are not stored by the platform; this data is processed directly by the payment institution.

Purposes of processing

Your personal data is processed to establish your booking and correctly process your order, and to actually fulfil the service you selected (tour, accommodation, transport, currency exchange and similar).

It is also processed so that your payment is held in escrow until the service is completed, so that the delivery of the service to you can be verified by scanning a single-use QR code assigned to you, and so that, after this verification, the payment can be transferred to the relevant business/driver/courier.

Finally, it is also processed to fulfil legal retention obligations, to resolve possible disputes, and to ensure the security of the platform.

Legal basis

Your membership data (name, email) and your order/payment data are processed on the basis of KVKK Art. 5/2-c, "being directly related to the establishment or performance of a contract" — your booking request is the performance of the contract between you and the platform.

When you pay as a guest (without membership), additional identity data such as your passport number is processed on the basis of your explicit consent as well. Your consent is recorded via the checkbox on the guest payment screen, and which notice text (which version of this text) you consented to, together with the moment your consent was given, is stored server-side.

Transfer

Your payment amount is transferred to the licensed payment institution so that your payment can be processed; this transfer is required for the payment to be carried out.

The platform's architecture is designed to keep each country's data on a separate technical infrastructure ("cell") hosted in that country. Today the platform runs on a single deployment; the country in which your data is actually hosted, and whether any transfer abroad takes place, is declared as [avukat/sahip tarafından doldurulacak].

Retention period

Your personal data is retained for as long as necessary to achieve the purposes listed above and within the framework of the legal retention obligations arising from applicable law; once that period ends, the data is deleted, destroyed, or anonymised.

The exact retention periods (in years) [avukat/sahip tarafından doldurulacak].

Data subject rights (KVKK Art. 11)

Under Article 11 of the KVKK, you have the right to learn whether your personal data is being processed, to request information about it if it is, to learn the purpose of processing and whether it is used in accordance with that purpose, and to know the third parties to whom it is transferred domestically or abroad.

You also have the right to request correction if your data has been processed incompletely or incorrectly, to request its erasure or destruction within the conditions set out in the KVKK, to request that any correction/erasure be notified to the third parties to whom the data was transferred, to object to a result that is to your detriment arising from analysis of the processed data exclusively through automated systems, and to request compensation for damage suffered as a result of unlawful processing.

How to apply

To exercise the rights above, you may apply to the data controller in writing or by any other method prescribed by the KVKK.

Application address, email address and registered electronic mail (KEP) address [avukat/sahip tarafından doldurulacak].