Privacy Policy and Data Protection Notice

Prepared as data controller under Turkish Personal Data Protection Law no. 6698 ("KVKK").

Seller / Service Provider

Legal name: Riviyera Turizm Ticaret Limited Şirketi (Kalkan Experiences)
Address: İkizce Mah. İkizce Merkez Küme Evleri No:14 Kaş/ANTALYA
Phone: +90 554 186 40 07
E-mail: kalkanexperiences@gmail.com
Tax office / no: Kaş / 7352211121
TÜRSAB licence no: 17734

Personal Data We Process

Identity and contact: Full name, e-mail address, phone number.
Transaction data: Reservation code, tour/date/time selection, number of guests, amount, payment status.
Technical data: IP address, browser information, cookie records.

Payment and Card Data

We never store your card details. The card number, expiry date and security code are transmitted over an encrypted connection directly to a PCI-DSS certified payment institution the moment they are entered. Our systems retain only the payment outcome (success/failure), the amount and the transaction reference produced by the payment institution.

Purposes

Receiving, reviewing and approving booking requests,
Collecting and accounting for payments,
Performing the service and communicating with the customer,
Meeting statutory retention and disclosure obligations.

Legal Basis

Data is processed on the grounds of KVKK art. 5/2-(c) "directly related to the conclusion or performance of a contract" and art. 5/2-(ç) "compliance with a legal obligation".

Transfers

Personal data is shared with the payment institution, e-mail delivery provider and hosting provider only to the extent necessary to perform the service, and with public authorities where legislation requires.

Retention

Booking and payment records are retained for 10 years as required by tax and commercial legislation, then deleted or anonymised.

Your Rights

Under KVKK art. 11 you may learn whether your data is processed, request information, request correction or deletion, object to processing and claim compensation for damages. Please send requests to kalkanexperiences@gmail.com.

Cookies

We use strictly necessary cookies for session and security, and analytics cookies to measure visit statistics. You may refuse non-essential cookies via your browser settings; some parts of the site may then not work correctly.

Security

Site traffic is encrypted with SSL/TLS. Access to the admin panel is restricted by authorisation. 3D Secure verification is applied at the payment step.