Last updated: 23 October 2026

This Privacy Policy explains how Oktogon Travel collects, uses and protects your personal data when you visit oktogontravel.com, contact us or book a tour with us. We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors and travellers in the European Union, the General Data Protection Regulation (GDPR).

Who we are

The data controller is Oktogon Travel, a travel agency licensed by the Association of Turkish Travel Agencies (TÜRSAB, licence no. A-4392).

Address: Hüseyinağa Mahallesi, İstiklal Caddesi, Sahne Sokak, Alihan No: 1, D: 503, 34435 Beyoğlu, İstanbul, Türkiye
Email: ask@oktogontravel.com
Phone: +90 212 238 62 62

What personal data we collect

When you send an enquiry. Our enquiry and quote forms ask for your full name, email address, phone number, group size, the tour you are interested in and your message. We use this information only to answer your request and prepare a tour proposal.

When you contact us on WhatsApp or by email. We receive your phone number or email address, your name as shown in your account and the content of your messages.

When you book a tour. To arrange your travel we may need further details such as the names of travellers as they appear in their passports, nationality, date of birth, passport details where required by hotels, airlines or authorities, room preferences, and dietary or accessibility needs that you choose to share with us.

When you browse our website. Our web server automatically records technical data such as your IP address, browser type, the pages you visit and the date and time of your visit. This is needed to deliver the website securely.

Why we use your data

• To answer your questions and prepare quotes (steps taken at your request before entering into a contract).
• To organise and deliver the tours you book, including hotel, transport, guide and entrance arrangements (performance of a contract).
• To meet our legal obligations, for example accounting, tax and tourism regulations (legal obligation).
• To keep our website secure and working properly (legitimate interest).

We do not sell your personal data and we do not use it for automated decision-making.

Who we share your data with

We share only the information that is necessary to provide your tour with:

• Hotels, transport companies, airlines, licensed guides and local partners who deliver parts of your trip.
• Partner agencies abroad when your tour includes other countries, such as Greece, Israel, Jordan, Egypt, Italy or Georgia.
• Service providers that support our business, such as our website hosting, email and messaging providers.
• Public authorities when we are legally required to do so.

Some of these recipients are located outside Türkiye. Where personal data is transferred abroad, we do so in line with KVKK and, where applicable, the GDPR, for example because the transfer is necessary to perform the travel contract you have requested.

Cookies

Our website uses cookies that are necessary for it to work, for example to remember the language you have selected. If we use analytics or marketing cookies, we will ask for your consent before setting them, and you can change your choice at any time.

Links to other services

Our website links to WhatsApp and Instagram. When you use these services, their own privacy policies apply.

How long we keep your data

We keep enquiry data for as long as needed to answer your request and follow up on a possible booking. Booking and invoicing records are kept for the periods required by Turkish commercial and tax law. When data is no longer needed, we delete, destroy or anonymise it.

How we protect your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Our website is served over an encrypted (HTTPS) connection.

Your rights

Under Article 11 of KVKK and, where applicable, the GDPR, you have the right to:

• learn whether we process your personal data and request information about it;
• learn the purpose of the processing and whether it is used for that purpose;
• know the third parties in Türkiye or abroad to whom your data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data, and notification of these actions to the third parties who received it;
• object to a result that is to your detriment arising from analysis exclusively by automated systems;
• claim compensation for damage arising from unlawful processing;
• for GDPR: restrict processing, object to processing, receive your data in a portable format, and lodge a complaint with your local data protection authority.

To exercise these rights, please write to us at ask@oktogontravel.com or to our postal address above. We will respond within 30 days at the latest.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always published on this page with its update date.