Privacy Policy Document

Welcome to ''ephesusancientcity.com'', operated by Creaos Travel !

1.Information We Collect :We collect information that you provide directly to us, as well as data automatically gathered when you interact with our website:

Personal Details: Name, surname, email address, phone number, nationality, and passport details (when required for official tour or booking logistics).

Booking & Travel Information:'' Tour preferences, hotel details, cruise ship name and port schedule (e.g., Kuşadası Port), transfer routes, special requests, and dietary restrictions.

Payment Information: Payment details processed securely through third-party payment gateways. We do not store complete credit card or payment credentials on our servers.

Technical Data: IP address, browser type, device information, operating system, pages visited, referring URLs, and website interactions collected via cookies and analytics.

2. How We Use Your Information We use your personal data for the following operational and legitimate business purposes:

To process and confirm tour bookings, excursion packages, and local transfer services. To communicate with you regarding your itinerary, meeting locations, pickup updates, or schedule changes.

To handle customer support inquiries, feedback, and special requests.

To process secure transactions and issue booking confirmations or invoices.

To analyze website traffic, optimize SEO, improve site accessibility, and enhance user experience on `ephesusancientcity.com`.

To comply with Turkish legal obligations (including local tourism regulations and tax documentation) and safeguard against fraudulent activities.

3. Legal Basis for Processing (GDPR & KVKK Compliance) We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK) based on: Performance of a Contract: Fulfilling tour bookings, transfers, and customer service agreements. Legitimate Interests: Improving website functionality, securing our network, and marketing our services effectively. Legal Compliance: Meeting statutory tourism, tax, and reporting obligations under Turkish law. Consent: Where explicitly requested (e.g., subscribing to newsletters or accepting non-essential cookies).

4. Sharing and Disclosure of Information We do not sell, rent, or trade your personal information. We may share your data with trusted third parties strictly necessary to deliver our services:

Service Providers & Logistics Partners:

Licensed local guides, transport drivers, boat operators, and venue providers directly involved in executing your itinerary.

Payment Processors:

Secure third-party payment platforms handling transaction authorization.

Technical & Analytics Providers:

Web hosting, maintenance, and analytics platforms (such as Wix or Google Analytics).

Legal & Regulatory Authorities:

Official law enforcement, tax authorities, or government bodies if legally required by applicable legislation.

5. Cookies and Tracking Technologies `ephesusancientcity.com` uses cookies and similar tracking technologies to ensure optimal functionality, analyze traffic patterns, and personalize content. Essential Cookies: Necessary for basic website navigation and booking workflows. Analytics Cookies: Help us understand how visitors interact with our site so we can improve content and accessibility. You can manage or disable non-essential cookies at any time through your browser settings.

6. Data Security and Retention We implement robust administrative, technical, and physical security measures to protect your personal data from unauthorized access, alteration, loss, or disclosure. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and reporting requirements under local tourism regulations.

7. Your Data Protection Rights Depending on your location, you may hold the following rights regarding your personal information: Right to Access: Request a copy of the personal data we hold about you. Right to Rectification: Request correction of inaccurate or incomplete personal data. Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer required for processing. Right to Restrict or Object: Object to or restrict certain processing activities. Data Portability: Request transfer of your data to another service provider in a structured format. To exercise any of these rights, please contact us using the information provided below.

8. Third-Party Links Our website may contain links to external sites (such as tourism boards or partner venues). We are not responsible for the content, privacy policies, or practices of third-party websites.

9. Updates to This Policy We may update this Privacy Policy periodically to reflect changes in our legal obligations or operational practices. Revised versions will be published on this page with an updated "Last Updated" date.

10. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: Operating Entity: Creaos Travel ''Website: [https://ephesusancientcity.com](https://ephesusancientcity.com) '' Email: info@creaostravel.com Address: Kuşadası, Aydın, Türkiye