Privacy and Personal Data Notice

Identity of the data controller

This notice is provided by İmaj Rafting Travel Agency, the website operator and data controller. TÜRSAB License No: 18088. Website: https://raftingtourantalya.com.tr. Phone: +90 531 363 99 62.

Personal data that may be processed

The website does not currently take online payments or use an in-site booking form. Still, limited technical access records, language preference information and device/browser data may be processed when you visit the site.

If you contact us on WhatsApp, your name, phone number, preferred date, number of participants, tour or accommodation request and message content may be shared with us. If you call us, your phone number and the information you provide during the call may be processed.

Purposes of processing

Personal data may be processed to answer questions, assess booking requests, discuss date and availability, communicate by phone or WhatsApp, keep the site language preference, provide a secure and functional website and meet legal obligations.

How data is collected

Data may be collected electronically or by phone when you visit the website, save a language preference, click the WhatsApp link, call us or use the Google Maps directions link.

Legal grounds

Data may be processed where it is directly related to establishing or performing a service relationship, where we have a legitimate interest, where legal obligations require it, or where you provide the information directly through your own communication. If a separate consent is required, that process will be assessed separately.

Parties data may be transferred to

Name, phone, date, participant count and booking request details you send via WhatsApp may also be processed through WhatsApp/Meta infrastructure. Phone calls take place through telecom operator infrastructure, and the directions link sends you to Google Maps.

The Google Maps map on the site is a third-party Google service. When the map loads, a technical connection may be established with Google infrastructure; IP address, browser and device information may then be processed by Google under its own terms.

Third-party services such as Google Maps and WhatsApp/Meta may apply their own privacy terms.

Data may also be shared, only where necessary, with technical hosting/infrastructure providers and legally authorised public authorities. This notice does not invent a recipient institution list.

Retention and security approach

Personal data is kept for the period required by the communication or booking request and to the extent required by applicable law. Information that is no longer needed is deleted, destroyed or anonymised within a reasonable period.

Reasonable technical and administrative measures are used to reduce unauthorised access risks. Third-party services apply their own security and retention practices.

Your rights

You may request information about whether your personal data is processed, the purposes of processing, recipients of the data, correction of incomplete or inaccurate data, deletion or destruction where conditions apply, notification of these actions to recipients, objection to automated decisions and compensation for damage where applicable under the law.

How to apply

For personal data requests, you can contact us at +90 531 363 99 62 or use the current contact channels on the website. We may ask you to identify yourself and clearly explain your request so it can be evaluated.

Updates to this notice

If the service flow, contact channels or cookie use on the website changes, this notice may be updated. The current version becomes effective when published on the website.