CONFIDENTIALITY AGREEMENT AND PERSONAL DATA PROTECTION POLICY
Last Update: January 14, 2026
As Suffa Tour, we prioritize the security of your personal data within the scope of the Personal Data Protection Law No. 6698 ("KVKK"). This privacy policy explains how your personal data is collected, processed, stored, and protected.
1. DATA CONTROLLER
Data Controller: Suffa Tourism Foreign Trade Ltd. Co.
Address: Fulya Mah Mevlüt Pehlivan Yanı Sok No 1/B Şişli Istanbul
Website: www.suffatour.com
2. PERSONAL DATA COLLECTED
The following personal data may be collected when you visit our website and use our services:
2.1. Identity Information
- First and last name
- Turkish ID number (for visa procedures)
- Date of birth
- Passport information
2.2. Contact Information
- Email address
- Phone number
- Address details
2.3. Financial Information
- Credit card information (stored encrypted)
- Bank account information
- Invoice information
2.4. Transaction Security Information
- IP address
- Cookie records
- Browser type and version
- Operating system information
- Visited pages and click data
2.5. Customer Transaction Information
- Reservation history
- Purchase information
- Preferences and interests
3. PURPOSES OF PROCESSING PERSONAL DATA
3.1. Service Provision
- Executing tour reservations
- Conducting visa procedures
- Booking hotels and transfers
- Providing customer services
3.2. Legal Obligations
- Document retention as required by tax legislation
- Commercial bookkeeping obligations
- Contract and invoice issuing
3.3. Communication and Marketing
- Campaign and promotion notifications
- Customer satisfaction surveys
- Newsletter sending (with your consent)
3.4. Security
- Fraud prevention
- Ensuring system security
- Resolving legal disputes
4. TRANSFER OF PERSONAL DATA
4.1. Service Providers
- Hotels and accommodation facilities
- Airline companies
- Transfer companies
- Visa consultancy services
- Insurance companies
4.2. Payment Institutions
- Banks and payment institutions
- Credit card transaction centers
4.3. Legal Authorities
- Courts
- Prosecutor’s offices
- Tax offices
- Other public institutions and organizations
5. RETENTION PERIOD OF PERSONAL DATA
- Financial records: 10 years
- Contracts and invoices: 10 years
- Communication records: 3 years
- Marketing permissions: Until permission is withdrawn
- Cookie data: Maximum 2 years
6. SECURITY OF PERSONAL DATA
6.1. Technical Measures
- Encrypted data transmission with SSL certificate
- Firewall protection
- Regular security updates
- Data backup systems
6.2. Administrative Measures
- Employee confidentiality agreements
- Access authorization system
- Regular security training
7. YOUR RIGHTS UNDER KVKK
- To learn whether your personal data is processed
- To request correction of your personal data
- To request deletion or destruction of your personal data
- To object to the processing of your personal data
- To learn the third parties to whom your personal data has been transferred
- To request compensation for damages arising from unlawful processing according to KVKK provisions
8. CONTACT
Suffa Tour
Address: Fulya Mah. Mevlüt Pehlivan Sk. No:4 D:1, Şişli/Istanbul
Email: [email protected]
Phone: +90 212 292 33 03
Website: www.suffatour.com