This Privacy Policy explains how HZM Tourism (“HZM Tourism”, “we”, “us”) collects, uses, stores and protects your personal data when you visit our website at hzmturizm.com, use our contact and consulting request forms, or interact with our services.
This document has been prepared under Turkish Law No. 6698 (KVKK) and applicable data protection legislation. It should be read together with our Data Protection Notice and Cookie Policy.
1. Data Controller
Your personal data is processed by HZM Tourism as the data controller.
Contact: info@hzmturizm.com — Contact page
2. Scope
This policy applies to personal data processed through our website, contact forms, consulting request processes and online services. Links to third-party websites are outside this policy; those sites have their own privacy practices.
3. Personal Data We Collect
We may collect the following categories of data directly from you or automatically during your use of the site:
- Identity and contact details: Name, job title, company name, email address, phone number.
- Request and message content: Messages, subjects, project summaries and additional information you share via contact, consulting or career forms.
- Security and technical data: IP address, browser type and version, operating system, device type, pages visited, session duration, referral source and similar log records.
- Preference data: Language selection, cookie consent choice.
- Analytics data: Anonymised or pseudonymised usage statistics via Google Analytics (GA4), collected only after your cookie consent.
We do not request special category personal data (health, biometric, religion, etc.) through our website. If you voluntarily provide such data, it may be processed only to respond to your request and based on your explicit consent.
4. Purposes of Processing
- Responding to contact and consulting requests and communicating with you
- Providing tourism consulting services, preparing proposals and managing contractual processes
- Ensuring website security, fixing technical issues and improving performance
- Remembering your language preference and personalising user experience
- Statistically analysing site traffic and usage behaviour with your consent
- Fulfilling legal obligations and protecting our rights in potential disputes
5. Legal Bases
Your personal data is processed on the following legal bases under the KVKK and, where applicable, GDPR:
- Performance or preparation of a contract
- Compliance with legal obligations
- Establishment, exercise or defence of legal claims
- Legitimate interests of the data controller, provided fundamental rights are not harmed
- Your explicit consent for analytics cookies and marketing measurement
6. Data Sharing
Your personal data may be transferred to the following recipients where necessary and in compliance with applicable law:
- Hosting and infrastructure providers: Website hosting and email delivery
- Analytics providers: Google LLC (Google Analytics 4), only after your cookie consent
- Competent public authorities: Where required by law
Your personal data is not sold or transferred to third parties for commercial purposes without your explicit consent.
7. Retention Periods
- Contact and request records: Up to 2 years after the request is closed (or longer if required by law)
- Contract-related data: Contract term plus statutory retention periods
- Cookie consent record: Up to 12 months
- Log and security records: Between 6 months and 2 years depending on legal and security requirements
Data whose retention period has expired is deleted, destroyed or anonymised.
8. Data Security
We implement appropriate technical and organisational measures against unauthorised access, loss, disclosure, alteration or destruction of your personal data, including SSL/TLS encryption, access controls, firewall configuration and regular backups.
No method of transmission over the Internet or electronic storage is 100% secure; absolute security cannot be guaranteed.
9. Cookies
We use essential, preference and analytics cookies on our website. Analytics cookies (Google Analytics) are enabled only if you select “Accept” in the cookie notice. For details, see our Cookie Policy.
10. Your Rights
Under Article 11 of the KVKK and, where applicable, GDPR, you have the right to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know third parties to whom data is transferred domestically or abroad
- Request correction if data is incomplete or inaccurate
- Request deletion or destruction under the conditions set out in law
- Request notification of correction, deletion or destruction to third parties
- Object to results arising solely from automated processing to your detriment
- Claim compensation for damage arising from unlawful processing
You may submit requests regarding your rights to info@hzmturizm.com or via our contact form. Requests are answered within 30 days at the latest under Article 13 of the KVKK.
11. Children’s Privacy
Our website is not directed at individuals under 18. We do not knowingly collect personal data from minors. If such data is identified, it will be deleted promptly.
12. Policy Changes
This Privacy Policy may be updated from time to time. Updates are published on this page; significant changes may be announced on our website. We recommend checking the “last updated” date below.
Last updated: 7 July 2026
13. Contact
- Email: info@hzmturizm.com
- Web: Contact form