GDPR / Personal Data Protection

Data Controller: MoonSA Turizm İnşaat Limited Şirketi ("Company") acts as a data controller under the Law on Protection of Personal Data (KVKK).

Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK Law No. 6698:

• Being directly related to the establishment or performance of a contract,
• Fulfilling the legal obligations of our Company,
• Data processing being mandatory for the establishment, exercise or protection of a right,
• Data processing being mandatory for the legitimate interests of the data controller,
• Being clearly envisaged in the laws,
• Availability of your explicit consent in necessary cases.

Purpose of Processing Personal Data

The Company processes your personal data for the following purposes:

• Making and managing travel reservations
• Providing and performing the services
• Meeting guest requests and providing support
• Evaluating guest satisfaction and feedback
• Fulfilling legal obligations

Processed Personal Data

The Company processes the following categories of personal data:

• Contact details (name, surname, address, email, telephone number, etc.)
• Identity details (ID number, passport number, etc.)
• Payment details (credit card information, bank account number, etc.)
• Travel details (flight details, hotel reservations, etc.)

Legal Grounds for Processing Personal Data

The Company processes your personal data based on the following legal grounds:

• Performance of a contract or fulfilling pre-contractual requests
• Fulfilling legal obligations
• Protection of legitimate interests
• Obtaining explicit consent

Transfer of Personal Data to Third Parties

The Company may transfer your personal data to third parties, limited to the following situations:

• Learning whether your personal data is processed,
• Requesting information if your personal data is processed,
• Learning the purpose of processing and whether it is used in accordance with its purpose,
• Knowing the third parties to whom your personal data is transferred domestically or abroad,
• Requesting correction if it is incompletely or incorrectly processed,
• Requesting deletion or destruction of your personal data within the scope of Article 7 of KVKK,
• Requesting notification of correction or deletion operations to third parties to whom your personal data is transferred,
• Objecting to the occurrence of a result against you by analyzing it exclusively through automated systems,
• Requesting compensation for the damage in case of damage due to unlawful processing.

Retention of Personal Data

The Company retains your personal data for the periods specified in the relevant legislation. When the retention period expires or the purpose of processing ceases, data is deleted or destroyed automatically.

Rights of the Personal Data Owner

You have the rights specified in the KVKK legislation:

• Right of access to your personal data: The Company informs you which of your personal data it processes and how you can access this data.
• Right to erasure or destruction of personal data: Under certain conditions, you can request your personal data to be deleted or destroyed from the Company systems.
• Right to restrict processing of personal data: If you wish to oppose the processing of your personal data or stop the processing, you can use this right.
• Right to data portability: You can request to receive your personal data in a structured format and transmit it to another data controller.
• Right to object to personal data: You have the right to object to the processing of your personal data for a specific purpose.

Contact Details

You can submit your applications and requests under KVKK to our Company as the data controller.

Credit Card Payments: Your credit card information is processed securely by the payment institution and is not viewed or stored by our company.