Privacy Policy

1. Information We Collect

When you contact us via WhatsApp, Telegram, phone, or through our website, we may collect:

• Full name and contact details (phone number, email address)
• Booking details (cruise date, tour type, package, number of guests)
• Hotel name and address (if transfer service is requested)
• Payment information (processed securely via iyzico; we do not store card details)
• Communication history (WhatsApp, Telegram, phone calls)
• Language and country preferences
• Website usage data (pages visited, device type, browser — via Google Analytics)

2. How We Use Your Information

We process your personal data for the following purposes:

• Processing and confirming your cruise reservation
• Communicating with you before, during, and after your cruise
• Coordinating with cruise operators to fulfill your booking
• Sending booking confirmations, reminders, and follow-up messages
• Processing payments and issuing receipts
• Improving our services and website experience
• Complying with legal obligations

Legal basis (GDPR): Contractual necessity (Art. 6(1)(b)), legitimate interest (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)).

Legal basis (KVKK): Performance of a contract (Art. 5(2)(c)), legal obligation (Art. 5(2)(ç)), and legitimate interest (Art. 5(2)(f)).

3. Data Sharing

We may share your personal data with the following parties, solely for the purposes described above:

• Cruise operators: To fulfill your reservation (name, guest count, package, special requests)
• Payment processor (iyzico): To process online payments securely
• Transfer service providers: Hotel address and pickup details (if applicable)
• Google Analytics: Anonymized website usage data
• Legal authorities: When required by Turkish law or court order

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. International Data Transfers

Your data may be transferred to and processed in countries outside of Turkey and the EU/EEA, including:

• United States (Google Analytics, cloud infrastructure)
• EU (payment processing)

Such transfers are protected by appropriate safeguards in accordance with GDPR Article 46 and KVKK Article 9.

5. Data Retention

We retain your personal data for the following periods:

• Booking records: 10 years (Turkish Commercial Code requirement)
• Payment records: 10 years (tax legislation)
• Communication logs: 2 years after last contact
• Website analytics: 26 months (Google Analytics default)

After the retention period expires, your data is securely deleted or anonymized.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption on our website
• End-to-end encryption for WhatsApp and Telegram communications
• Secure payment processing via iyzico (PCI DSS compliant)
• Access controls and authentication for our admin systems
• Regular security reviews

7. Cookies

Our website uses the following cookies:

• Essential cookies: Language preference, session management
• Analytics cookies: Google Analytics (anonymized IP, usage patterns)
• Advertising cookies: Google Ads conversion tracking

You can disable cookies in your browser settings. Disabling essential cookies may affect website functionality.

8. Your Rights

Under GDPR and KVKK, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at:

• Email: reservation@bosphorusnight.com
• Phone/WhatsApp: +90 532 244 29 22

We will respond to your request within 30 days.

11. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us: