ibmonti Travel Agency
EN
Sign in Plan a Journey

Personal data

Privacy Notice

How we process your personal data under Türkiye’s Personal Data Protection Law (KVKK, Law No. 6698).

This is an English translation for information. The Turkish KVKK Aydınlatma Metni is the authoritative version.

1. Data controller

Under Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”), the data controller is İbomonti Turizm Danışmanlık Fot. Ve Org.Tic.Ltd.Şti (“İbomonti Turizm”).

2. The data we process

  • Identity and contact details: the name, phone number and email address you give us on WhatsApp, by phone, by email or at our office.
  • Details of your travel request: destination, dates, number of travellers, budget and your notes.
  • Booking details: information a booking requires (for example passport details and date of birth) and payment records.
  • Account details: if you open an account, your name, email address, a one-way encrypted (hashed) form of your password, your language, your newsletter choice, consent records (date, IP address and browser of each consent) and session records (IP address, browser and time). Your password itself is never stored; no one, not even our team, can see it.
  • Booking and quote requests: when you press “Book on WhatsApp” for a tour or ask for a flight quote: the tour or route you chose, the dates, the number of travellers, the price you were shown, your name and email address if you are signed in, your IP address and your browser.
  • Technical logs: records such as IP address, browser and time of visit created on our hosting provider’s servers when you visit the site.

When you press “Book on WhatsApp” for a tour or ask for a flight quote, the request (the “booking and quote requests” details above) is recorded on our servers so that our team can get back to you and to prevent misuse of the site; the message itself is only turned into a WhatsApp message that you choose to send. Only our team sees these records. Our other request forms store nothing. The account forms store the account details above in order to create and run your account.

3. Why we process it

  • To answer your request, follow up on your booking and quote requests and suggest suitable travel options,
  • To arrange your flights, hotels, tours, transfers and visa applications,
  • To conclude and perform our contract with you and handle payments,
  • To create your account, confirm your email address, let you sign in and protect your account from misuse,
  • If you agree, to email you about new tours, offers and coupons,
  • To meet our tax, accounting and tourism-law obligations,
  • To keep the site secure and working.

4. Legal grounds

Under Article 5 of KVKK, we process your data because it is directly necessary to conclude or perform a contract, because it is required to meet our legal obligations, or because it is necessary for our legitimate interests provided this does not harm your fundamental rights and freedoms; where none of these applies, we rely on your explicit consent. Under Law No. 6563 on the Regulation of Electronic Commerce, we send offers and news by email only if you have agreed; you can withdraw at any time under “Email preferences” in your account or with the link in our emails.

5. Who we share it with

Where the service you ask for requires it, and only for that purpose, your data may be shared with airlines, hotels, tour and transfer providers, consulates and visa application centres, insurers, and public authorities entitled by law.

Some of the providers we use for messaging (WhatsApp), email and website hosting keep their servers outside Türkiye. Account details and booking and quote requests are held in a database located in the European Union on the infrastructure of Cloudflare, Inc., and account emails are sent through Cloudflare; and bookings with hotels or airlines abroad may require your details to be sent abroad. Such transfers are subject to the conditions of Article 9 of KVKK.

6. How long we keep it

We keep personal data for the periods required by law or for as long as the purpose requires, and then delete, destroy or anonymise it. Account details are kept while your account is open; when you delete your account on the “My account” page, they are deleted except for records we must keep by law, and your name and email address are removed from your booking requests. Booking and quote requests are kept for at most 1 year, and records of actions in our admin panel for at most 2 years. Records of consent to marketing emails are kept for the period the law requires.

7. Cookies and browser storage

This site uses no advertising, analytics or tracking cookies. For visit statistics we use Cloudflare Web Analytics, which sets no cookies and does not identify visitors; it only produces totals such as page views and how fast pages load. Our hosting provider Cloudflare may set a strictly necessary security cookie when needed to protect the site from malicious traffic. When you sign in to your account, a strictly necessary session cookie keeps you signed in and a second cookie lets the page show your initials in the top corner; both are removed when you sign out. The sign-up, sign-in and password-reset forms use Cloudflare Turnstile to keep out bots; it processes technical information about your browser for that check. The site also stores only the currency you choose, the tours you viewed recently and whether the opening animation has been shown in your browser’s own storage; this stays on your device and is not sent to us. While pages load, exchange rates come from the Frankfurter service, which publishes the Central Bank of the Republic of Türkiye’s rates; your IP address is passed to that provider in the process. Fonts are served from our own server.

8. Your rights

Under Article 11 of KVKK you may ask whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; ask for incomplete or inaccurate data to be corrected, and for data to be deleted or destroyed under the conditions of the law, and for third parties to be notified of this; object to an outcome against you that arises solely from automated analysis; and claim compensation for damage caused by unlawful processing.

9. How to apply

You can send requests about these rights in writing to the address above or by email to info@ibomontiturizm.com. We answer free of charge within thirty days at the latest, depending on the nature of the request; if the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged.

Last updated: 11 November 2026

WhatsApp