GDPR / Personal Data Protection

Data Controller: MoonSA Tourism Construction Limited Company ("Company") holds the status of data controller within the scope of the Personal Data Protection Law.

Purpose of Processing Personal Data

The Company processes your personal data for the following purposes:

  • Making and managing travel reservations
  • Providing and performing the services
  • Meeting guest requests and providing support
  • Evaluating guest satisfaction and feedback
  • Fulfilling legal obligations

Processed Personal Data

The Company processes the following categories of personal data:

  • Contact details (name, surname, address, email, telephone number, etc.)
  • Identity details (ID number, passport number, etc.)
  • Payment details (credit card information, bank account number, etc.)
  • Travel details (flight details, hotel reservations, etc.)

Legal Grounds for Processing Personal Data

The Company processes your personal data based on the following legal grounds:

  • Performance of a contract or fulfilling pre-contractual requests
  • Fulfilling legal obligations
  • Protection of legitimate interests
  • Obtaining explicit consent

Transfer of Personal Data to Third Parties

The Company may transfer your personal data to third parties, limited to the following situations:

  • Service providers (hotels, airlines, tour operators, etc.)
  • Public institutions or competent authorities in accordance with legal regulations
  • Business partners or service providers with whom the Company cooperates

Retention of Personal Data

The Company retains your personal data for the periods specified in the relevant legislation. When the retention period expires or the purpose of processing ceases, data is deleted or destroyed automatically.

Rights of the Personal Data Owner

You have the rights specified in the KVKK legislation:

  • Right of access to your personal data: The Company informs you which of your personal data it processes and how you can access this data.
  • Right to rectification of personal data: If your personal data held by the Company is incorrect or incomplete, you can request it to be corrected.
  • Right to erasure or destruction of personal data: Under certain conditions, you can request your personal data to be deleted or destroyed from the Company systems.
  • Right to restrict processing of personal data: If you wish to oppose the processing of your personal data or stop the processing, you can use this right.
  • Right to data portability: You can request to receive your personal data in a structured format and transmit it to another data controller.
  • Right to object to personal data: You have the right to object to the processing of your personal data for a specific purpose.

Contact Details

To apply for any matter related to your personal data or to exercise your rights, you can reach us via our contact page.