This Privacy Policy explains how Marmaris Journey (https://marmarisjourney.com) collects, uses, stores and protects your personal data when you visit our website or contact us, and what rights you have. We keep data collection to a minimum: you can read every guide on this website without giving us any personal information.
We process personal data in accordance with Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, for visitors from the European Union and the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).
1. Data controller
| Data controller | Serdar Taş, publisher of Marmaris Journey |
| Address | Tepe Mah. Yeniyol Cad. No:7 Marmaris / Muğla, Türkiye |
| E-mail for privacy requests | [[email protected]] |
| Contact form | marmarisjourney.com/contact |
Full publisher details are available on our Imprint page.
2. What data we collect and why
2.1 When you visit the website
When you open any page, our web server and security service automatically record technical data such as your IP address, browser type, device type, operating system, the page you visited, the referring page and the date and time of access. We use this data to deliver the website, keep it secure, prevent abuse and fix technical problems.
Legal basis: our legitimate interest in operating a secure website (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). Server logs are deleted after [30] days unless needed to investigate a security incident.
2.2 When you contact us
If you write to us through the contact form or by e-mail, we process your name, e-mail address and the content of your message in order to reply. If you send a correction or a travel tip, we may use the information (not your personal details) to update our guides.
Legal basis: taking steps at your request and our legitimate interest in answering readers (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)). Messages are kept for up to [2] years and then deleted, unless a longer period is required by law.
2.3 When you leave a comment
If comments are enabled and you post one, we store the name, e-mail address and website you enter, your comment, your IP address and the browser user agent, to display the comment and to detect spam. Your e-mail address is never published. Comments may be checked by an automated spam-filtering service.
Legal basis: your consent when submitting the comment and our legitimate interest in preventing spam. Comments stay on the site until you ask us to remove them or we delete them.
2.4 Analytics
With your consent, we use Google Analytics to understand, in aggregate, how visitors find and use our guides. Google Analytics uses cookies and collects data such as pages viewed, time spent on the site, approximate location (country or city) and device information. IP addresses are not stored in full. We use this information only to improve our content.
Legal basis: your consent (KVKK Art. 5(1) and Art. 9; GDPR Art. 6(1)(a)). You can withdraw your consent at any time through the cookie settings link at the bottom of every page.
2.5 Bookings through partner platforms
Our Marmaris tours page and some guides link to tours offered by partner booking platforms, such as GetYourGuide. When you click such a link, you leave our website. Any booking, payment or personal data you provide there is processed by the booking platform and the tour operator as independent data controllers, under their own privacy policies. We do not receive your payment details or booking information. We may receive anonymous reports on the number and value of bookings referred by our website, so that our commission can be calculated.
2.6 Embedded content
Some guides contain embedded content, such as Google Maps. These services may collect data about you, set cookies and track your interaction with the embedded content in the same way as if you had visited their website directly. Please see the Google Privacy Policy for details.
2.7 What we do not do
- We do not sell, rent or trade your personal data.
- We do not create user accounts or ask you to register.
- We do not collect sensitive (special category) data.
- We do not use your data for automated decision-making or profiling that affects you.
- We do not knowingly collect data from children under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
3. Cookies
We use strictly necessary cookies to run and secure the website and, with your consent, analytics, functional and partner cookies. Full details, including cookie names, purposes and durations, are in our Cookie Policy.
4. Who we share data with
We share personal data only with service providers that help us run the website, and only as far as necessary. They process the data on our behalf and under our instructions:
| Recipient | Purpose | Location |
|---|---|---|
| [Hosting provider name] | Website hosting and server logs | [Country] |
| Cloudflare, Inc. | Security, protection against attacks, content delivery | Global network, USA |
| Google LLC / Google Ireland Ltd | Website analytics (only with consent), embedded maps | USA / EU |
| Spam-filtering service (if used) | Detecting spam comments | [Country] |
We may also disclose personal data if required by law, by a court order or by a competent public authority.
5. International data transfers
Some of the service providers listed above are located outside Türkiye, the European Economic Area or the United Kingdom, for example in the United States. Where personal data is transferred abroad, we rely on the safeguards permitted by law, such as standard contractual clauses or your explicit consent, in line with Article 9 of the KVKK and Chapter V of the GDPR.
6. How we protect your data
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), a web application firewall, regular software updates, restricted administrative access and secure passwords. No method of transmission over the internet is completely secure, but we work to protect your information and to respond promptly to any incident.
7. How long we keep data
| Data | Retention period |
|---|---|
| Server and security logs | Up to [30] days |
| Contact messages | Up to [2] years |
| Comments | Until removed at your request or by us |
| Analytics data | [14] months (Google Analytics setting) |
| Cookie consent record | Up to 1 year |
8. Your rights
Under Article 11 of the KVKK and Articles 15 to 22 of the GDPR, you have the right to:
- find out whether we process your personal data and receive a copy of it,
- learn the purpose of the processing and whether it is used accordingly,
- know the third parties, in Türkiye or abroad, to whom your data is transferred,
- ask us to correct incomplete or inaccurate data,
- ask us to delete or destroy your data,
- ask us to notify third parties of any correction or deletion,
- object to processing based on our legitimate interests, and to any result against you arising from analysis by automated systems,
- withdraw your consent at any time, without affecting processing carried out before the withdrawal,
- receive your data in a portable format (GDPR),
- claim compensation for damage caused by unlawful processing.
To exercise any of these rights, please contact us at [[email protected]] or through our contact page. We will respond free of charge within 30 days. We may ask you to verify your identity before acting on your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, if you live in the EU or UK, with your local data protection authority.
9. Changes to this policy
We may update this Privacy Policy when we add new services or when the law changes. The date at the top of this page shows the latest version. Significant changes will be highlighted on this page.
10. Contact
For any questions about this Privacy Policy or the way we handle your personal data, please write to [[email protected]] or use our contact page. See also our Terms of Use.