Privacy Notice (KVKK)

Controller: Ostrav. Contact: info@ostrav.com.tr — ostrav.com.tr/iletisim

Identity & contact: name, email, phone.

Booking: tour, date, time, guests, pickup location (if transfer), referral code.

Account: password hash, role, company details for partner/agency applications.

Technical: IP, session cookie, language — for security and service delivery.

Creating and routing booking requests; confirmations and cancellations.

Transactional email and WhatsApp (if configured).

Reviewing partner/agency applications.

Security, fraud prevention, legal duties.

Legal bases include contract performance, legal obligation and legitimate interest; consent where required.

To the tour operator as needed to fulfil the booking.

To processors (hosting, database, email, storage) strictly as needed.

To authorities when legally required.

Kept for as long as needed for the service and applicable limitation periods, then deleted or anonymised.

You may request access, correction, deletion and other KVKK rights via info@ostrav.com.tr.