Privacy & Data Protection

Last Updated: September 2026

1. IMPORTANT INFORMATION AND WHO WE ARE

Mertrip respects your privacy and is committed to protecting your personal data.

This Privacy & Data Protection Policy is designed to explain how we collect, use, store and protect your personal data when you visit our website, contact us, request information, request a quotation, make a booking or use our travel services.

It explains what information we collect, why we collect it, how we use it, when we may share it with third parties, how long we retain it and the rights you may have in relation to your personal data.

This Privacy & Data Protection Policy should be read together with any other privacy notice or information that we may provide to you at the time we collect or process your personal data.

Where applicable, the processing of personal data by Mertrip is carried out in accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and other applicable legislation.

Data Controller

MERTRIP TİCARET VE TURİZM LTD. ŞTİ. is the data controller responsible for your personal data.

For the purposes of this Privacy & Data Protection Policy, “Mertrip”, “we”, “us” and “our” refer to MERTRIP TİCARET VE TURİZM LTD. ŞTİ.

Contact Details

If you have any questions about this Privacy & Data Protection Policy, our privacy practices, or the processing of your personal data, you can contact us using the following details:

Legal Entity: MERTRIP TİCARET VE TURİZM LTD. ŞTİ.
Address: Marmaris, Turkey
Email: info@mertrip.com
Telephone: +90 537 504 41 44

2. THE DATA WE COLLECT ABOUT YOU

Personal data means any information relating to an identified or identifiable individual.

Depending on how you interact with Mertrip and the services you request, we may collect, use, store and transfer different categories of personal data.

These may include:

Identity Data

This may include your first name, last name, title, date of birth and other information necessary to identify you.

Contact Data

This may include your email address, telephone number, residential address, billing address and other contact information.

Travel Data

This may include your travel dates, destinations, accommodation preferences, transfer requirements, tour and activity preferences, itinerary details and other information necessary to arrange your requested travel services.

Transaction Data

This may include details of services you have requested or purchased from us, booking details and information relating to payments and transactions.

Financial Data

Where applicable, this may include information necessary to process a payment or refund.

Payment card information may be processed by our authorized payment service providers in accordance with their own privacy and security practices.

Technical Data

This may include your IP address, browser type and version, operating system, device information, time zone, language settings and other technical information relating to the device you use to access our website.

Profile and Communication Data

This may include information contained in your enquiries, previous communications with us, travel preferences, requests, feedback and other information you voluntarily provide to us.

Usage Data

This may include information about how you use our website, including pages visited, interactions with our website and other website activity.

We may also use aggregated or anonymized information for statistical, analytical and business purposes. Where such information cannot reasonably be used to identify you, it will not be treated as personal data.

3. SPECIAL CATEGORY DATA

In certain circumstances, you may voluntarily provide information relating to health, mobility, dietary requirements or other information that may constitute special categories of personal data under applicable data protection legislation.

For example, you may provide information about a medical condition, disability, mobility requirement or dietary restriction where this information is relevant to arranging your requested travel services.

We will only process such information where there is an appropriate legal basis under applicable law and where it is necessary for the purpose for which it was provided.

Where your explicit consent is required by law, we will obtain your consent before processing such information.

If you choose not to provide information that is necessary for the safe and appropriate provision of a requested service, we may not be able to provide that service.

4. IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need to collect personal data in order to provide a requested service, fulfill a contract, comply with a legal obligation or otherwise perform a necessary business function, you may not be able to receive the relevant service if you do not provide the required information.

We will inform you when certain information is necessary for us to provide the requested service.

5. HOW WE COLLECT YOUR PERSONAL DATA

We use different methods to collect personal data, including:

Direct interactions

You may provide personal data to us when you:

• Contact us through our website;
• Submit an enquiry through a contact form;
• Request information about our travel services;
• Request a quotation;
• Request accommodation, transfers, tours or activities;
• Make or manage a booking;
• Communicate with us by email or telephone;
• Provide information during the planning of your itinerary;
• Communicate with us through social media or other communication channels; or
• Provide feedback or otherwise communicate with us.

Automated technologies

As you interact with our website, we may automatically collect certain Technical Data about your device and browsing activity through cookies, server logs and similar technologies.

Please see our Cookie Policy for further information about the cookies and similar technologies used on our website.

Third parties

Where necessary and permitted by applicable law, we may receive personal data from third parties involved in providing or supporting travel services, such as accommodation providers, transportation providers, tour operators, payment service providers and technology providers.

6. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data where permitted by applicable law.

We may use your personal data for the following purposes:

• To respond to your enquiries;
• To provide information about our travel services;
• To prepare quotations and travel proposals;
• To design and arrange travel itineraries;
• To arrange accommodation;
• To arrange private transfers and transportation;
• To arrange tours, activities and experiences;
• To process and manage bookings;
• To communicate with you regarding your requested services;
• To coordinate your travel arrangements with relevant suppliers;
• To process payments, refunds and related transactions;
• To provide customer support;
• To maintain and improve our website and services;
• To protect the security of our website, systems and business;
• To prevent fraud, misuse or unauthorized activity;
• To comply with applicable legal and regulatory obligations; and
• To establish, exercise or protect our legal rights.

7. LEGAL BASIS FOR PROCESSING

Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), personal data may be processed where one or more of the applicable legal grounds are present.

Depending on the circumstances, these may include:

• Processing is expressly permitted or required by law;
• Processing is necessary for the establishment or performance of a contract;
• Processing is necessary for Mertrip to fulfill a legal obligation;
• Processing is necessary for the establishment, exercise or protection of a legal right;
• Processing is necessary for Mertrip’s legitimate interests, provided that such processing does not disproportionately interfere with the fundamental rights and freedoms of the data subject; or
• Explicit consent has been obtained where required by applicable law.

Where we rely on your consent as the legal basis for processing, you may withdraw your consent at any time, subject to applicable legal requirements and limitations.

8. PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

Responding to enquiries and requests
Types of Data: Identity, Contact, Travel, Communication
Legal Basis: Performance of a contract, pre-contractual steps or legitimate interests

Preparing travel proposals and quotations
Types of Data: Identity, Contact, Travel, Profile
Legal Basis: Pre-contractual steps or performance of a contract

Arranging accommodation, transfers, tours and activities
Types of Data: Identity, Contact, Travel, Transaction
Legal Basis: Performance of a contract

Managing bookings
Types of Data: Identity, Contact, Travel, Transaction
Legal Basis: Performance of a contract

Processing payments and refunds
Types of Data: Identity, Contact, Financial, Transaction
Legal Basis: Performance of a contract or legal obligation

Communicating with you about your booking or enquiry
Types of Data: Identity, Contact, Travel, Communication
Legal Basis: Performance of a contract or legitimate interests

Maintaining website security
Types of Data: Technical, Usage
Legal Basis: Legitimate interests or legal obligation

Improving our website and services
Types of Data: Technical, Usage, Profile
Legal Basis: Legitimate interests

Complying with legal obligations
Types of Data: Identity, Contact, Transaction and other relevant data
Legal Basis: Legal obligation

Establishing or protecting legal rights
Types of Data: Relevant personal data
Legal Basis: Legitimate interests or legal obligation

9. DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal data with third parties where this is necessary to provide the services you request, operate our business or comply with applicable legal obligations.

These third parties may include:

Travel Service Providers

• Hotels and accommodation providers;
• Transportation and private transfer providers;
• Tour operators;
• Activity and experience providers;
• Local destination service providers;
• Other travel suppliers necessary to fulfill your itinerary.

Payment Service Providers

Where applicable, payment information may be processed by authorized payment service providers used by Mertrip to process transactions.

Technology and Service Providers

We may share relevant information with service providers that support our website, hosting, IT systems, customer communications, security, analytics and other business operations.

Public Authorities

We may disclose personal data to courts, governmental authorities, regulatory bodies, law enforcement agencies or other authorized public institutions where required or permitted by law.

Professional Advisers

Where necessary, personal data may be shared with professional advisers such as lawyers, accountants, auditors, insurers and other professional service providers.

We require third parties who process personal data on our behalf to take appropriate security measures and to process personal data only for specified and lawful purposes.

10. INTERNATIONAL DATA TRANSFERS

As an international travel business, Mertrip may need to share personal data with travel suppliers, service providers and other third parties located outside Turkey.

Where personal data is transferred outside Turkey, we will take appropriate measures and comply with the applicable requirements of Turkish Law No. 6698 (KVKK) regarding international transfers of personal data.

Such transfers will be carried out only where there is an appropriate legal basis and the necessary safeguards are in place under applicable legislation.

11. PAYMENT INFORMATION

When online payment functionality is available through our website, payments may be processed through authorized third-party payment service providers.

Payment service providers may collect and process payment card and transaction information in accordance with their own privacy and security policies.

Mertrip does not intend to store full payment card details on its own systems unless this is specifically required, legally permitted and necessary for the provision of the relevant service.

12. COOKIES

Our website may use cookies and similar technologies to improve your browsing experience, understand website usage and maintain website functionality and security.

Cookies may be used for purposes such as:

• Essential website functionality;
• Security;
• Remembering user preferences;
• Website analytics;
• Improving website performance; and
• Understanding how visitors interact with our website.

Where required by applicable law, we will obtain your consent before using non-essential cookies.

For more information, including information about how you can manage your cookie preferences, please see our Cookie Policy.

13. THIRD-PARTY LINKS

Our website may contain links to third-party websites, platforms or services.

These third-party websites operate independently from Mertrip and may have their own privacy policies and terms.

Mertrip is not responsible for the privacy practices, content or security of third-party websites.

We recommend that you review the privacy policy of any third-party website before providing personal information.

14. CHANGE OF PURPOSE

We will generally use your personal data only for the purposes for which it was collected.

If we need to use your personal data for another purpose, we will assess whether such use is compatible with the original purpose and whether an additional legal basis or other requirement applies under applicable law.

Where required, we will provide you with additional information before processing your personal data for a new purpose.

15. DATA SECURITY

We have implemented appropriate technical and administrative measures designed to protect personal data against accidental loss, unauthorized access, unauthorized disclosure, alteration, destruction or other unlawful processing.

Access to personal data is limited to persons who have a legitimate business need to access such information.

However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.

If you believe that your personal data or communications with us may have been compromised, please contact us using the contact details provided in this Privacy & Data Protection Policy.

16. DATA RETENTION

We will retain your personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing requested travel services and complying with legal, regulatory, accounting and reporting requirements.

The appropriate retention period may vary depending on:

• The nature and amount of personal data;
• The purpose for which it was collected;
• Whether we have an ongoing relationship with you;
• Applicable legal and regulatory requirements; and
• Whether the information may be required to establish, exercise or defend legal claims.

When personal data is no longer required, it will be deleted, destroyed or anonymized in accordance with applicable legislation.

17. YOUR RIGHTS UNDER TURKISH DATA PROTECTION LAW (KVKK)

Under Article 11 of Turkish Law No. 6698 on the Protection of Personal Data, you may have the following rights, subject to the conditions and limitations established by applicable law:

• To learn whether your personal data is being processed;
• To request information regarding the processing of your personal data;
• To learn the purpose of processing and whether your personal data is being used in accordance with that purpose;
• To know the third parties to whom your personal data has been transferred;
• To request correction of incomplete or inaccurate personal data;
• To request the deletion or destruction of your personal data where the applicable legal requirements are satisfied;
• To request notification of correction, deletion or destruction to third parties to whom your personal data has been transferred, where applicable;
• To object to a result arising against you through the analysis of your personal data exclusively by automated systems, under the conditions provided by law;
• To request compensation for damages arising from unlawful processing of your personal data.

18. HOW TO EXERCISE YOUR RIGHTS

If you wish to exercise your rights under KVKK or have any questions regarding the processing of your personal data, you may contact us:

MERTRIP TİCARET VE TURİZM LTD. ŞTİ.
Email: info@mertrip.com
Telephone: +90 537 504 41 44
Address: Marmaris, Turkey

To protect your personal data, we may request additional information to verify your identity before responding to certain requests.

Your request will be handled within the applicable legal period and in accordance with the procedures established under KVKK.

19. NO FEE USUALLY REQUIRED

You will generally not be required to pay a fee to exercise your rights under applicable data protection legislation.

However, where permitted by law, a reasonable fee may be charged for requests that are manifestly unfounded, repetitive or excessive.

20. IDENTITY VERIFICATION

We may request specific information from you to help us verify your identity before providing access to personal data or processing certain requests.

This is a security measure intended to ensure that personal data is not disclosed to a person who is not entitled to receive it.

We may also request additional information where necessary to process your request efficiently.

21. CHANGES TO THIS PRIVACY & DATA PROTECTION POLICY

We may update this Privacy & Data Protection Policy from time to time to reflect changes in our services, technology, business practices or applicable legal requirements.

When we make changes, the updated version will be published on this page together with the revised Last Updated date.

We encourage you to review this Privacy & Data Protection Policy periodically.

22. CONTACT US

If you have any questions about this Privacy & Data Protection Policy or how Mertrip processes your personal data, please contact us:

MERTRIP TİCARET VE TURİZM LTD. ŞTİ.
Marmaris, Turkey
Email: info@mertrip.com
Telephone: +90 537 504 41 44

We are committed to handling your personal data responsibly, transparently and securely.