Privacy Policy

CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA WITHIN THE SCOPE OF THE LAW NO. 6698

Last Update: 01.05.2026

As Barbaros Turizm Yatçılık İnşaat İthalat İhracat ve Ticaret Anonim Şirketi (“Barbaros Yachting”), in our capacity as the Data Controller, we show maximum sensitivity to comply with the Law No. 6698 on the "Protection of Personal Data" regarding the processing and preservation of your personal data.

This KVKK Clarification Text has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) to inform you regarding the procedures and principles concerning the processing of your personal data by Barbaros Yachting (“Data Controller”).

The legal concepts used in this text regarding the protection of personal data shall have the meanings assigned to them in the Law.

Definitions used in this clarification text:

• Personal Data: Any information relating to an identified or identifiable natural person.
• Law on the Protection of Personal Data (“KVKK”): The Law No. 6698 on the Protection of Personal Data.
• Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.
• Data Processor: The natural or legal person who processes personal data on behalf of the Data Controller, based on the authority granted by the Data Controller.
• Platform: The website operated by Barbaros Yachting (“Site”) and/or the mobile application (collectively referred to as the “Platform”).

1. Data Controller

Within the scope of KVKK, your personal data is processed by Barbaros Yachting in its capacity as the Data Controller.

Contact Information:

• E-mail: info@barbarosyachting.com
• Phone: +90 549 401 00 01
• Address: Neyzen Tevfik Cad, Saray Sk. No:4, 48400 Bodrum/Muğla, Türkiye

2. Processed Personal Data

The following personal data may be processed through the Platform (website / mobile interfaces):

2.1. Identity and Contact Data

• First name, last name
• Phone number
• E-mail address

2.2. Reservation / Service Data

• Reservation request details (date, route, number of guests, boat preference, etc.)
• Proposal requests and correspondence content
• Service usage history

2.3. Financial Data (If payment is made)

• Payment information (payment status, transaction reference, etc.)
• Note: Your card details are processed by payment institutions; Barbaros Yachting does not store card information on its systems.

2.4. Technical Data

• IP address
• Device information
• Log records
• Cookie data (subject to your preference)

3. Purposes of Processing Personal Data

Your personal data is processed by Barbaros Yachting in accordance with the following principles:

• In compliance with the law and the rule of honesty,
• Within the framework of the employment contract arising between us and our supplier employees,
• By maintaining accuracy and timeliness as reported to us,
• For specific, explicit, and legitimate purposes, in a limited and measured manner,
• To be preserved for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Your personal data may be processed for the following purposes:

• Carrying out proposal and reservation processes
• Managing customer relations and communication processes
• Providing the service and planning operational processes
• Carrying out payment processes (if any)
• Fulfilling legal obligations
• Internal audit, security, and fraud prevention activities
• Managing request/complaint processes
• Marketing and campaign processes (if explicit consent is given)
• Measuring and improving Platform performance (depending on cookie preferences)

4. Method of Collecting Personal Data

Your personal data may be collected through automatic or partially automatic methods via:

• Website forms (proposal/reservation/contact),
• Phone, e-mail, WhatsApp, and similar communication channels,
• Cookies and log records,
• Payment infrastructure providers (if any).

Personal data may be processed under Article 5 of the KVKK based on the following legal grounds:

• It is directly related to the establishment or performance of a contract
• Fulfillment of the data controller's legal obligations
• Data processing is mandatory for the establishment, exercise, or protection of a right
• Legitimate interest (provided that it does not harm your fundamental rights and freedoms)
• Explicit consent (in cases such as marketing/analytics)

5. Transfer of Your Personal Data

Your personal data may be transferred to the following persons/institutions, limited to the purposes stated above and in accordance with KVKK:

• Payment service providers (e.g., iyzico, etc.)
• Hosting / server / infrastructure providers
• E-mail and communication service providers
• Legal advisors, financial consultancy services
• Authorized public institutions and organizations (in case of legal obligation)

If a transfer abroad is in question, necessary measures are taken within the scope of the relevant provisions of the KVKK.

6. Retention Period of Personal Data

Your personal data is stored:

• For the periods stipulated in the relevant legislation,
• For the duration required by the purpose of processing,
• By taking storage obligations and statute of limitations into account.

At the end of the period, data is deleted, destroyed, or anonymized.

7. Rights of the Data Subject and Methods of Application

The rights that data subjects can exercise regarding their personal data under Article 11 of the KVKK are as follows:

• To learn whether personal data is processed or not,
• To request information if personal data has been processed,
• To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data if it is incomplete or incorrectly processed,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK and to request notification of these operations to third parties to whom personal data has been transferred,
• To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• To request compensation for damages in case of loss due to unlawful processing of personal data.

Principles Regarding the Exercise of Rights: You can submit your requests regarding your rights to us through the following methods, ensuring your application meets the minimum conditions stipulated by the Communiqué on the Procedures and Principles of Application to the Data Controller. We will conclude your request free of charge as soon as possible and within thirty days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged.

8. Enforcement and Updates

This Clarification Text has entered into force on the date of its publication and may be updated to adapt to changing conditions and legislation, which will be announced on the website.

Barbaros Yachting