1. Data Controller
Under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by the following data controller:
- Data controller: knowurTouR
- Contact: Contact page
- Website: knowurtour.com
This notice explains what personal data we process when you visit the knowurTouR website (“Site”), why and on what legal basis, who it may be shared with, and what rights you have.
2. Personal Data We Process
2.1. Through the contact form
| Data | Required? |
|---|---|
| Full name | Yes |
| Email address | Yes |
| Message content | Yes |
| Hotel name | No (optional) |
| Subject | No (optional) |
Whatever you write in the message field is entirely up to you. Please do not include sensitive or unnecessary personal data — health information, ID or passport numbers, bank or card details. You don’t need any of that to describe your problem.
2.2. Collected automatically (only with your consent)
If you accept cookies:
- Usage and analytics data: pages visited, categories viewed, link clicks, session duration, referring address, approximate location (country/city level), device and browser information.
- Pseudonymous client identifier: a random identifier assigned to your browser that does not directly identify you (Firebase Analytics client ID).
- Error logs: if a technical error occurs, the error message, the page address, browser information, and the client identifier above.
- Advertising / affiliate data: if you click the affiliate content shown on relevant pages of the Site (Travelpayouts and the brands it works with), the click information and affiliate tracking identifier processed to attribute a booking for commission tracking. This content is not personalised advertising and is not targeted based on your past behaviour.
If you do not consent, the analytics, error-logging, and advertising/affiliate systems do not run at all. See our Cookie Policy for details.
3. Purposes of Processing
- To receive, review, and respond to the questions, comments, and reports you send through the contact form.
- To improve the Site’s content and understand which topics readers find most useful (only with your consent).
- To keep the Site working properly and to detect and fix errors (only with your consent).
- To comply with legal obligations and protect legal rights where necessary.
Your personal data is never sold, rented, or shared with third parties for marketing purposes. We do not send you promotional email without your consent.
4. Legal Bases
| Data | Legal basis (KVKK Art. 5) |
|---|---|
| Contact form data | Necessary for the establishment, exercise, or protection of a right, and the legitimate interests of the data controller, provided your fundamental rights and freedoms are not harmed (Art. 5/2-e, 5/2-f) — responding to you at your own request |
| Analytics and error logs | Your explicit consent (Art. 5/1) |
| Strictly necessary cookies | Legitimate interest (Art. 5/2-f) — operating the Site and remembering your preferences |
5. Sharing and International Transfers
The Site relies on the following service providers:
- Google Firebase (Firebase Hosting, Firestore, Firebase Analytics) — hosting, message backup, analytics, and error logs. Servers may be located outside Turkey.
- EmailJS — delivering your contact form message to the data controller’s email address. Servers may be located outside Turkey.
- Travelpayouts (and the brands it works with, such as Kiwitaxi, Tiqets, AirHelp, Localrent, Klook) — only with your explicit consent, to serve the affiliate advertising content shown on relevant pages of the Site and, if you click a link, to attribute a booking for commission tracking. Servers may be located outside Turkey. When you click an affiliate link, that brand’s own privacy policy applies.
Because these providers’ servers sit outside Turkey, your personal data is transferred abroad. Such transfers are carried out under Article 9 of the KVKK, where one of the appropriate safeguards recognised by the Turkish Data Protection Board is in place or another condition set out in that article applies. For analytics and error logs, the transfer additionally relies on your explicit consent.
Beyond this, your data may only be shared with legally authorised public authorities where a legal obligation or request requires it.
6. Retention Periods
- Contact form messages: kept for up to 2 years after the purpose of contact has been fulfilled, then deleted or anonymised. Where a legal dispute exists, data may be kept for the applicable limitation period.
- Analytics data: kept for the retention period configured in Firebase Analytics (by default up to 14 months).
- Error logs: kept for up to 12 months.
- Your cookie preference: stored in your browser for 12 months.
7. Your Rights (KVKK Art. 11)
You have the right to:
- Learn whether your personal data is being processed;
- Request information if it has been processed;
- Learn the purpose of processing and whether the data is used accordingly;
- Know the third parties, in Turkey or abroad, to whom your data has been transferred;
- Request correction if the data is incomplete or inaccurate;
- Request erasure or destruction under the conditions in Article 7 of the KVKK;
- Request that correction, erasure, or destruction be notified to third parties to whom the data was transferred;
- Object to a result against you produced solely by automated analysis;
- Claim compensation if you suffer damage due to unlawful processing.
How to apply: For requests under Article 11 of the KVKK, as well as general questions and information requests, please use our contact page. Your request will be answered within 30 days at the latest. If your request is refused, the response is inadequate, or you receive no reply in time, you may file a complaint with the Turkish Personal Data Protection Board.
You can withdraw your consent at any time by changing your preference through the cookie settings link in the Site footer.
8. Security
We take appropriate technical and organisational measures to prevent unlawful processing of and access to your personal data and to keep it secure. Site traffic runs over an encrypted connection (HTTPS), and access to the data is limited to the data controller.
9. Children’s Data
The Site is not intended for anyone under 18, and we do not knowingly collect personal data from them. If we become aware of such data, it will be deleted.
10. Changes
This notice may be updated in line with changes in legislation or in our services. The current version is always published on this page; the date at the top shows when it was last updated.