Legal
Privacy Policy and Data Protection Notice
Under Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK), we explain below how we process your personal data.
Last updated: 13 October 2026
1. Controller
- Company name: NEB TURİZM TİCARET LİMİTED ŞİRKETİ
- Brand: Silkmaster Tour
- Address: İsali-Gaferli-Avcılar Mahallesi, Fatih Sokak No: 36/3, Göreme Beldesi, Merkez, Nevşehir, Türkiye
- Tax: Nevşehir Vergi Dairesi, 6301301890
- TÜRSAB licence no.: 15910
- Email: silkmasterturkey@gmail.com
- Phone / WhatsApp: +90 5415750050
2. Data we process
- Identity and contact: name, email, phone/WhatsApp.
- Booking: selected tour and options, date, number of people, hotel name/room number, your notes and any information you write in your requests.
- Payment: payment reference, amount and result status (never card details).
- Reviews: name, email and review text.
- Correspondence: your email and WhatsApp messages.
- Security: a one-way digest (hash) of your IP address (the raw IP address is not stored for this purpose) and a session to prevent form abuse.
- Site usage (only if you consent): anonymous visitor and session IDs, page address viewed (including query parameters in the link), click events (Book Now, Availability, WhatsApp), referring site domain, campaign (UTM) tag, device type. These data contain no name or IP address.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK art. 5/2) |
|---|---|
| Answering requests, creating and performing bookings, payments and refunds | Conclusion or performance of a contract (c) |
| Tax, accounting and tourism legislation obligations | Legal obligation (ç) |
| Security, abuse prevention, service quality and complaint handling | Legitimate interest (f) |
| Site usage statistics (analytics) | Explicit consent (your cookie choice); not collected without consent |
| Publishing your reviews | Consent / contract (you submit the review) |
4. Online payment
Online card payment is not currently taken on this site; payment arrangements are made by email or WhatsApp. When online payment opens, your card details will not reach Silkmaster; you will enter them on İş Bankası's secure page.
5. Recipients
We do not sell your data. As needed for the service, it may be shared with:
- Tour operation partners: balloon company, transfer, restaurant and guide (only what the service needs: name, number of guests, hotel, phone).
- Hosting: TürkTicaret.Net.
- Email: emails from our forms are sent through the site's email server and arrive in the company's Google (Gmail) mailbox; your correspondence therefore also passes through Google's infrastructure. The automatic confirmation email that tells you we received your request is sent to you from the same server.
- Sales channels: GetYourGuide and Viator, if you booked through them.
- Payment: İş Bankası (if online payment is open).
- WhatsApp (Meta): if you message us on WhatsApp, your message passes through Meta's infrastructure.
- Public authorities where legally required.
International transfers: because of Google (email) and Meta (WhatsApp) infrastructure, your correspondence may pass through servers outside Turkey. Our page fonts are loaded from our own server; viewing a page does not send your IP address to a third party.
6. Collection methods
Web forms (contact, booking, review), email, WhatsApp, phone, and automatically from your browser (analytics; consent-based).
7. Retention
- Enquiries and correspondence that do not become bookings: 2 years.
- Booking, payment and invoice/accounting records: as long as the law requires (at most 10 years).
- Site usage (analytics) records: 13 months.
- Reviews: until you ask for removal.
- When the period ends, your data is deleted, destroyed or anonymised.
8. Your rights (KVKK art. 11)
You have the right to learn whether your data is processed; request information; learn the purpose and whether it is used accordingly; know the recipients in Turkey or abroad; request correction of incomplete or wrong data; request deletion or destruction under the legal conditions and notification to recipients; object to adverse results from automated analysis; and claim damages for unlawful processing.
To apply, send a written request stating your identity to silkmasterturkey@gmail.com. We reply within 30 days at the latest. If you find the reply insufficient, you may complain to the Turkish Personal Data Protection Board.
9. Visitors from the European Economic Area and the UK
If you live in the EEA or the UK, you can write to the same address for your rights under GDPR/UK GDPR (access, rectification, erasure, objection, portability and withdrawal of consent).
10. Security and changes
Your data is protected by reasonable technical and organisational measures (HTTPS, access control, hashed passwords). We may update this notice; the date of the current version is at the top. For cookies, see our Cookie Policy page.