Personal Data Notice (KVKK)

Under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we explain below for which purposes and on which legal grounds your personal data is processed, to whom it is transferred, and what your rights are. This notice covers all communication with us via our website, phone, e-mail and our WhatsApp line. The Turkish version prevails.

1. Data Controller

Siena Turizm Org. Danışmanlık Ltd. Şti. (TURSAB License No: 7121)
Address: Piri Paşa Mah. Şaban Deresi Sk. No:3/A Hasköy Beyoğlu / Istanbul 34445, Türkiye
E-mail: info@sienaturizm.com · Phone: 444 5 849

2. Personal Data We Process

  • Identity: name, surname, date of birth, national ID / passport number and passport details
  • Contact: phone number (including your WhatsApp number), e-mail, address
  • Customer transactions: flight, hotel and visa requests, travel dates, booking and payment records
  • Message content: messages, voice notes, photos and documents you send via WhatsApp and other channels, and transcripts and summaries created from them
  • Transaction security: IP address, timestamps, activity logs

Unless required for a visa application, please do not send special categories of personal data such as health, religion or ethnic origin. If an application requires such a document, we will ask for your explicit consent before processing it.

3. Purposes of Processing

  • Receiving, pricing and fulfilling your flight, hotel and visa requests
  • Answering your questions and providing customer support
  • Booking, payment and invoicing
  • Complying with legal obligations (tax, commercial and tourism legislation)
  • Measuring service quality, ensuring information security and keeping evidence for possible disputes

4. Collection Method and Legal Grounds

Your data is collected when you provide it via our website, phone, e-mail or WhatsApp, partly by automated means. Legal grounds (KVKK Art. 5/2):

  • Processing is directly related to the conclusion or performance of a contract (fulfilling your request) — Art. 5/2-c
  • Compliance with our legal obligations — Art. 5/2-ç
  • Establishment, exercise or protection of a right — Art. 5/2-e
  • Our legitimate interests (service quality, security), provided your fundamental rights are not harmed — Art. 5/2-f

5. WhatsApp Line and AI-Assisted Replies

  • Messages you send to our WhatsApp line may be read and answered by an AI-assisted assistant. The assistant is used only to understand your request, provide information and prepare your transaction.
  • Voice notes may be transcribed; conversations may be summarized for our team.
  • Information given by the assistant is preliminary. Final pricing, bookings and visa applications are completed with the approval of our team. No decision with legal effect on you is left solely to an automated system.
  • You can ask to speak with a member of our staff at any time; your request will be passed to our team.

6. Transfer of Personal Data

Your data may be transferred, limited to the purposes above, to:

  • Service providers: airlines, hotels, visa application centers and consulates
  • Our communication and software providers (data processors): VeriTakibi (Yücel Kahraman), which operates our WhatsApp line and AI assistant; Meta as the WhatsApp Business Platform provider; AI providers (such as OpenAI, Google, Anthropic); cloud and hosting providers. Current list: veritakibi.com/legal/subprocessors
  • Authorized public authorities: upon lawful request
  • Our accounting and legal advisors: for legal obligations and protection of rights

7. International Transfers

Servers of AI, messaging and cloud providers may be located in European Union countries, the United States and other countries where the providers operate global infrastructure. These transfers are made under KVKK Art. 9 based on appropriate safeguards such as the standard contracts published by the Turkish Personal Data Protection Board.

Where the service you request is performed abroad, such as a hotel booking abroad or a foreign visa, your data is transferred to the relevant hotel, airline or consulate to the extent necessary to perform the contract (KVKK Art. 9/6-b).

8. Retention

Your data is retained for as long as required by the purpose of processing and the retention and limitation periods set by applicable law; it is then deleted, destroyed or anonymized.

9. Your Rights (KVKK Art. 11)

By applying to the data controller, you may:

  • learn whether your personal data is processed and request information about it,
  • learn the purpose of processing and whether it is used accordingly,
  • know the third parties in Türkiye or abroad to whom your data is transferred,
  • request correction of incomplete or inaccurate data,
  • request deletion or destruction under the conditions of KVKK Art. 7,
  • request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
  • object to a result against you arising from analysis exclusively by automated systems,
  • claim compensation for damage arising from unlawful processing.

10. How to Apply

Send your request in writing to our address above, or from the e-mail address registered with us to info@sienaturizm.com, together with information verifying your identity. Your request will be answered free of charge within thirty (30) days at the latest; if the process requires an additional cost, the fee set by the Board may apply.

Last updated: September 2026