Privacy Policy & Data Protection Notice
This notice explains how Emin Sertaç Apanay ("we", "us"), as data controller, processes personal data collected through sertacapanay.net, in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable to visitors from the European Economic Area, the General Data Protection Regulation (GDPR).
Data Controller
Emin Sertaç Apanay
Güllerpınarı Mah. Bulut Sok. No:2B, Alanya / Antalya, Türkiye
Tax office: Alanya Vergi Dairesi — Tax No: 0570075313
Contact: [protected]
What Data We Collect and Why
| Purpose | Data collected | Legal basis |
|---|---|---|
| Responding to contact form inquiries | Name, email address, message content | Legitimate interest / pre-contractual communication |
| Publishing traveler testimonials | Name, email, profile photo (via Google Sign-In), review text, tour name | Explicit consent (you initiate sign-in and submission) |
| Newsletter | Email address | Explicit consent (opt-in) |
| Site analytics (Google Analytics) | Usage data, approximate location, device/browser type, cookies | Consent (see our Cookie Policy) |
| Security & abuse prevention | IP address, request logs | Legitimate interest |
How Long We Keep Your Data
Contact form messages are retained only as long as needed to handle your inquiry and are periodically deleted. Testimonials are kept until you request removal or we archive them. Analytics data is retained per Google Analytics' default retention window. We do not sell or rent your personal data to third parties.
Who We Share Data With
We use the following processors, each bound by their own data processing terms: Google (Sign-In, Analytics, Maps/embeds where used), our hosting provider (InMotion Hosting), and, if you contact us via WhatsApp, Meta/WhatsApp under its own privacy policy. We do not share your data with any other third party for marketing purposes.
Your Rights
Under KVKK Article 11 and, where applicable, GDPR Articles 15–22, you have the right to: learn whether your data is processed; request information about processing; learn the purpose of processing and whether it is used accordingly; know third parties to whom data is transferred; request correction of incomplete or inaccurate data; request erasure or destruction of your data; object to a result arising from automated processing that is to your detriment; and request compensation for damages caused by unlawful processing.
To exercise these rights, write to [protected]. We will respond within 30 days at the latest, as required by law.
Children
This site is not directed at children under 13, and we do not knowingly collect personal data from them.
Changes to This Policy
We may update this notice from time to time. The "last updated" date above reflects the most recent revision.