Personal Data Protection Notice
Information notice regarding the processing of your personal data under the Personal Data Protection Law (Law No. 6698)
Legal Information
This notice is a mandatory information document prepared pursuant to the Personal Data Protection Law No. 6698. Please read carefully before using the Tripuck platform.
Important Information
This information notice has been prepared within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. By using the Tripuck platform, you accept that your personal data will be processed as specified in this notice.
Data Controller
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Tripuck Turizm Limited Şirketi as the data controller within the scope explained below.
Company Information
Your Personal Data Processed
As Tripuck, we provide metasearch (comparison) platform services. During your platform usage, the following personal data may be processed:
- Identity Information: Name, surname, ID number (when required)
- Contact Information: Email address, phone number, address
- Customer Transaction Information: Search history, preferences, saved searches
- Transaction Security Information: IP address, cookie information, device information, browser type
- Marketing Information: Communication preferences, campaign participation
- Visual and Audio Records: Profile photo (if any), call center voice recordings
- Financial Information: Payment information (only shared with third-party providers, not stored on Tripuck)
Important: Tripuck is a metasearch platform. Reservation and payment transactions are carried out on the providers' own systems. Data collected in this process is subject to the relevant provider's data protection policy.
Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Providing and improving platform services
- Creating and managing your user account
- Providing travel search and comparison services
- Performing redirection operations to third-party providers
- Providing customer support services
- Conducting communication activities
- Marketing and advertising activities (with your permission)
- Fulfilling legal obligations
- Ensuring platform security and preventing fraud
- Statistical analysis and reporting
- Resolution of legal disputes
Legal Basis for Processing Personal Data
Your personal data is processed based on the following legal reasons specified in Articles 5 and 6 of the KVKK:
- Your explicit consent (for marketing communication)
- Being directly related to the establishment or performance of the contract
- Being necessary for the data controller to fulfill its legal obligation
- Being made public by the data subject
- Data processing being mandatory for the establishment, exercise or protection of a right
- Data processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Transfer of Personal Data
Your personal data may be transferred to the following parties in order to achieve the purposes stated above:
- Third Party Travel Providers: Airlines, hotels, tour operators, car rental companies (for reservation redirection)
- Business Partners: Payment institutions, technology providers, infrastructure service providers
- Legal Obligations: Legally authorized public institutions and organizations, courts
- Analytical Services: Analysis platforms such as Google Analytics, Meta Pixel
- Communication Services: Email, SMS and notification service providers
- International Transfer: Some third-party service providers may be located abroad (in compliance with KVKK)
Important: Your data is transferred only in line with the stated purposes, by taking necessary security measures and in accordance with KVKK.
Retention Period of Personal Data
Your personal data is stored for the period required by the processing purpose and within the scope of our legal obligations:
- Account Information: As long as your account is active + 10 years (tax and commercial record obligation)
- Search History: 2 years (for service quality analysis)
- Communication Records: 10 years (legal retention obligation)
- Call Center Records: 3 years (pursuant to Consumer Law)
- Cookie and IP Information: 2 years (for security and analysis)
- Marketing Permissions: Until you withdraw your consent
- Legal Dispute Records: Lawsuit period + 10 years
When the retention periods expire or the processing purpose ceases to exist, your data will be deleted, destroyed or anonymized.
Your Rights as a Data Subject (Article 11)
In accordance with Article 11 of the KVKK, as a data subject, you have the following rights:
- To learn whether your personal data is processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether they are used for their purpose
- To know the third parties to whom your personal data is transferred domestically or abroad
- To request correction if your personal data has been processed incompletely or incorrectly
- To request deletion or destruction of your personal data within the conditions stipulated in the KVKK
- To request that correction, deletion or destruction operations be notified to third parties to whom personal data has been transferred
- To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems
- To request compensation for damages if you suffer damage due to unlawful processing of your personal data
Application Method and Process
You can apply using the following methods to exercise the rights mentioned above:
By Email
You can submit your application to [email protected]
Written Application
You can send it to Güzeloluk Mah. 1830 Sk. Özpınarlar Lavinya Evleri E Blok No: 175 İç Kapı No: 7 Muratpaşa/Antalya via notary or registered mail with return receipt
KEP Address
You can apply with a secure electronic signature to [email protected]
Required Information for Application
- Your name, surname, ID number (passport number if foreign) in your application
- Residential or business address for notification
- Email address, phone and fax number for notification, if any
- Subject of request (which right you want to exercise)
- Copy of ID for identification
- Your signature (for email applications, send from your registered email address)
Application Process
- Your applications will be answered within 30 days at the latest
- If the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged
- If your application is rejected, the reason for rejection will be notified in writing or electronically
- In case of rejection of the response, finding the response insufficient or not responding on time; you can file a complaint with the Personal Data Protection Board within 30 days from the date you learn and in any case within 60 days from the application date
Data Security
The security of your personal data is our priority. We take technical and administrative measures to protect your data: SSL/TLS encryption, firewalls, access controls, regular security audits, and staff training.
However, please note that data transmission over the internet is not 100% secure. It is important to keep your account information and passwords safe.
Have Questions?
If you have questions about your rights under data protection law or the processing of your personal data, please contact us.
Your Data is Safe
We serve you with our fully compliant, transparent, and secure data processing policy