Privacy Policy | Arbat Travel

Last updated: 28 October 2026

1. Scope and contact

This policy covers use of arbattravel.com and enquiries and bookings for tours, activities and transfers through Arbat Travel.

Operator: ARMİ TURİZM TİCARET İTHALAT İHRACAT LİMİTED ŞİRKETİ.

Agency: Arbat Travel, Class A travel agency, licence no. 11309.

Address: Saray Mahallesi, Şirinevler Sokak, Best Home 20 Sitesi, No:16/B, Alanya/Antalya, Türkiye.

Email: [email protected]

Please also read the Personal Data Protection Notice (KVKK) for details of processing purposes, legal grounds, transfers and your rights.

2. Booking and contact information

We use the name, contact and participant details, selected service, date, time, transfer details and, where necessary, billing information required to create a booking and provide the service. Identity or passport details are requested only when required for the service or by law. Correspondence about cancellations, refunds and complaints is also processed to assess these requests and protect rights.

If you book for others, please ensure the information is accurate and inform them about the Personal Data Protection Notice. Information about children should be provided by a parent or legal representative and limited to what the service requires.

3. Sharing with service providers

Information necessary to deliver the service may be shared with the relevant tour operator, local agency, guide, transfer or transport company, accommodation establishment and ticket provider. Recipients may be in Türkiye or the foreign country concerned by the booking. Only data necessary for the relevant service should be sent to the relevant provider. Information may also be shared with necessary providers of website infrastructure, communications, payment, accounting and legal support.

Domestic and international transfers are subject to the conditions in Articles 8 and 9 of Law No. 6698. Neither this policy nor a service booking alone authorises every type of international data transfer. Details are provided in the Personal Data Protection Notice.

4. Payment security

Payment options and the payment recipient are displayed during booking. If card payments are offered, please follow the information on the bank’s or payment provider’s secure payment screen. Do not share your card security code, online banking password or one-time verification code by email, telephone or messaging. Records needed for payments and refunds are processed to the extent required by the service and legal obligations.

5. Cookies and similar technologies

The website’s Cookie Preferences panel includes necessary, analytics and marketing technology categories. Necessary technologies support sessions, security and essential functions such as bookings. Analytics technologies measure visits and usage; marketing technologies evaluate advertising and its performance.

Google Analytics 4, Google Tag Manager, Yandex Metrica and Meta Pixel may be listed in the preferences panel. Listing a service does not mean it is active on every visit. Analytics and marketing processing requiring consent needs a separate choice; reading this policy does not constitute consent. You can change your choices using the Cookie Preferences button at the bottom of the page and delete or block cookies through your browser settings. Blocking necessary cookies may affect some functions.

6. Retention and security

Information should be retained only for periods required for the processing purpose and by applicable law. The service and booking relationship, legal record-keeping obligations and possible disputes are considered when determining these periods. When processing grounds and retention obligations end, data is deleted, destroyed or anonymised. The data controller is responsible for taking the necessary technical and organisational measures to protect data.

7. Marketing communications and external links

Service messages sent to fulfil a booking have a different purpose from advertising or campaign messages. Commercial electronic communications requiring permission need a separate choice or consent. Providing contact details for a booking does not itself constitute marketing consent.

When the website redirects you to third parties such as banks, social networks or messaging services, their own privacy practices also apply.

8. Requests and updates

You may exercise your personal data rights using the methods described in the Personal Data Protection Notice. Please send questions to [email protected]. This policy may be updated to reflect changes in service processes or legislation; the update date is shown at the top. Future changes do not replace any separately required consent.