Privacy Policy

Bank / credit card information: www.basefiks.com.tr uses an SSL certificate, which ensures information security with a 256-bit encryption algorithm in data transmission, together with a HOME SSL certificate (green bar), which provides corporate security. Users’ bank / credit card information is used only by the bank or payment institution during the purchase transaction and is in no way kept recorded in the database. www.basefiks.com.tr offers an infrastructure in which card information can be stored through PCI DSS certified institutions so that Users can carry out their next purchase transactions more easily. As a result of Card Storage Services that hold the PCI DSS standard and are licensed by the BDDK (Banking Regulation and Supervision Agency), the information on bank / credit cards facilitates the Authentication and Authorization (Authoziation) steps, enabling bank / credit card holders to use a secure and easy means of payment.

Data saved on mobile devices: For ease of use, the billing information and saved passenger information that Users add after becoming Members within the Website / application may also be saved locally within the application on users’ mobile devices. Even if the User does not open a Membership session in the application and/or leaves the Membership, the User can access the billing information and saved passenger information within the application on their mobile device.

Circumstances in which user data may be disclosed: Personal data belonging to the User include name-surname, address, telephone number, e-mail address and all kinds of information intended to identify the user. Unless otherwise stated in this privacy policy, www.basefiks.com.tr will not disclose any of the personal data to third parties other than those with whom www.basefiks.com.tr cooperates and its affiliated companies. In the circumstances set out below, www.basefiks.com.tr may, departing from the provisions of this privacy policy, disclose information belonging to users to third parties. These circumstances are;

Compliance with the obligations imposed by legal rules issued by a competent legal authority and in force, such as Laws, Decrees having the Force of Law, Regulations etc.;

Fulfilment of the requirements of the contracts that www.basefiks.com.tr has concluded with users and their implementation;

Cases where information about users is requested for the purpose of conducting an inquiry or investigation duly carried out by a competent administrative or judicial authority, and where it is necessary to provide information in order to protect Users’ rights or security. www.basefiks.com.tr undertakes to keep confidential information strictly private and confidential, to regard this as an obligation of secrecy, and to take all necessary measures and exercise due care to ensure and maintain confidentiality and to prevent all or any part of the confidential information from entering the public domain, from unauthorised use or from disclosure to a third party.

Status of cookies: www.basefiks.com.tr may obtain information about users and users’ use of the Website by using a technical communication file (Cookie) prepared by itself or by 3rd parties. The technical communication files in question are small text files that a website sends to the user’s browser to be stored in the main memory. The technical communication file keeps the session open by storing the user’s session information, password and preferences, and facilitates use by recognising the user on their next visit. The technical communication file helps to obtain statistical information on how many people use the Website, for what purpose and how many times a person visits the Website and how long they stay, and to generate advertising and content dynamically from user pages specially designed for users. The technical communication file is not designed to retrieve data or any other personal information from the main memory or from e-mail. Most browsers are initially designed to accept the technical communication file, but users may, if they wish, change the settings so that the technical communication file is not received or so that a warning is given when the technical communication file is sent.

Data collected in surveys, competitions and similar cases: The information requested by www.basefiks.com.tr from users who respond to periodic surveys and competitions organised within the Website is used by www.basefiks.com.tr and the persons it cooperates with for the purposes of direct marketing to these users, statistical analysis and creating a database.

E-newsletter mailings and announcements: www.basefiks.com.tr sends a weekly e-newsletter to inform its users about economic developments, the current agenda and their own fields. Where it deems necessary, or if it has an agreement with 3rd party partners, it may send Campaign / Offer / Package announcements with promotional and informative content. Users may block these e-mails from reaching them by clicking the specified link, as explained at the bottom of the e-mail. If at any time you wish to be removed from our daily e.mail mailing list, you can easily leave the e-newsletter membership with a single click by clicking the “Please click to unsubscribe from our e-newsletter list” link at the bottom of the e.mails we send.

General information about the Personal Data Law

Law No. 6698 on the Protection of Personal Data (KVKK) (hereinafter referred to as KVKK) was adopted on 24 March 2016 and published in the Official Gazette dated 7 April 2016 and numbered 29677. Part of the KVKK entered into force on the date of publication and the other part on 7 October 2016. Within the scope of Law No. 6698 on the Protection of Personal Data (KVKK), as data controller we will record, classify, process, store and update the personal data of you, our valued customers, and may disclose it to 3rd Parties where the rules of the legislation and the consent you give permit, and we hereby inform you of our mutual rights and obligations within the scope of the legal regulation in question.

Information in the capacity of data controller

As www.basefiks.com.tr, whose detailed corporate information is published below, pursuant to KVKK No. 6698 and in the capacity of Data Controller, your personal data will, within the framework explained below, be recorded, stored, updated, disclosed / transferred to 3rd parties where permitted by legislation, classified and processed in the ways listed in the KVKK.

Definition of Personal Data under the Law

It means any information that makes you identified or identifiable, such as your identity (name, surname, Turkish ID number etc.), contact details, and information on the methods used while accessing the products (IP, mobile phone brand-model, browser type, version, social media information, actions performed on screens etc.).

How your personal data may be processed

Pursuant to KVKK No. 6698, your personal data that you share with our company may be processed by us by being obtained, wholly or partly, by automatic means, or by non-automatic means provided that they form part of a data recording system, and by being recorded, stored, altered, reorganised; and, provided that their security and confidentiality are ensured within the scope of the legislation: by being disclosed, transferred, taken over, made available, classified or prevented from being used, in short by being subject to any kind of operation performed on data. Under the KVKK, any operation performed on data is deemed “processing of personal data”.

Purposes and legal grounds for processing your personal data

The personal data you share,

In order to be able to carry out the requirements of the services we provide to our customers in accordance with the requirements of the contract and of technology, and to develop the products and services offered;

In order to record identity, address and other necessary information to establish the details of the transaction owner within the scope of Law No. 1618 on Travel Agencies and the Association of Travel Agencies, Law No. 2920 on Turkish Civil Aviation, the Policies of IATA, the International Air Transport Association, the 1999 Montreal International Convention, Law No. 6502 on the Protection of the Consumer, the regulations / directives prepared on the basis of these regulations and other legislation;

In order to prepare all records and documents that will form the basis of transactions by electronic payment, electronic contract or on paper, which are mandatory in the fields of Banking, Insurance, Civil Aviation and Tourism; and to comply with the information retention, reporting and notification obligations required by legislation and stipulated by other authorities;

In order to be able to provide information to public prosecutors, courts and the relevant public officials, upon request and as required by legislation, in matters relating to public security and in legal disputes;

will be processed in accordance with KVKK No. 6698 and the related secondary regulations.

They will be processed for the purposes of recording your identity, address, tax number and other information in order to identify the transaction owner and counterparty in all business and transactions to be carried out in connection with all products and services we will offer you, preparing the information and documents that will form the basis of business and transactions to be carried out electronically, complying with the information retention, reporting and notification obligations stipulated by all competent judicial and administrative authorities (such as courts, TBB, BDDK, SPK, TCMB, MASAK, BTK) under the relevant legislation, being able to offer other products and services offered and requested as www.basefiks.com.tr, and fulfilling the requirements of the contracts between us.

Information about the third persons or organisations to which your personal data may be transferred

The persons / organisations to which your personal data that you share with our company may be transferred for the purposes stated above are; our main shareholders, our direct or indirect domestic / foreign subsidiaries; persons and organisations related to the service provided, in particular but not limited to accommodation companies, airline companies, GDS (Global Distribution System) service intermediaries, companies providing transport services including land and sea, car rental companies, insurance companies and transfer staff; and the program partner organisations, domestic / foreign organisations and other 3rd parties from which we receive services, with which we cooperate in order to carry out our activities and/or in the capacity of Data Processor.

In addition, your Personal data may be transferred, within the framework of our related cooperation arrangements, to the program partner institutions, organisations, banks, financial institutions, providers or companies from which we receive services and with which we cooperate in matters of product/service comparison and making applications, to the persons and institutions from which we receive cloud data storage services, to the institutions with which we have agreements for sending the messages we send to our customers, and to other third parties.

How your personal data are collected

Your personal data,

By means of the forms on our Company’s website and applications, in the form of name, surname, Turkish ID number, passport number, address, telephone, business or private e-mail address, age, gender, occupation, meal preferences, preferences on pages logged into using a user name and password, IP records of transactions performed, cookie data collected by the browser and data containing browsing duration and details, and location data;

Verbally, in writing or electronically through our channels such as our sales and marketing department employees, our agencies, our dealers, paper forms, business cards, digital marketing and the call centre;

Physically or virtually, face to face or remotely, verbally, in writing or electronically, from persons who share their personal data by business card, curriculum vitae (cv), submitting an offer and other means for purposes such as establishing a commercial relationship with our Company, applying for a job or submitting an offer;

In addition, may be processed and collected from data obtained indirectly through different channels, data obtained from websites, blogs and (micro) websites used for competitions, surveys, games, campaigns and similar purposes and from social media, e-newsletter reading or click actions, data provided by publicly available databases, and profiles and data open to sharing on social sharing sites such as social media platforms (Facebook, Twitter, Google, Instagram, Snapchat etc).

Your personal data obtained before the KVKK entered into force

Your personal data lawfully obtained before 7 April 2016, the date on which the KVKK entered into force, through membership, consent to electronic communications, ticket purchases, making reservations, purchasing insurance products and in other ways, are also processed and retained in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, to be processed in Türkiye or to be processed and retained outside Türkiye, may also be transferred, provided that they remain within the scope of the KVKK and in accordance with the purposes of the contract, to accommodation companies, airline companies and GDS (Global Distribution System) service intermediaries located abroad. However, your personal data may be transferred abroad to countries accredited by the Personal Data Board in which adequate protection exists regarding the protection of personal data and/or, even where adequate protection does not exist, within the conditions specified in the KVKK and with the permission of the Personal Data Protection Board.

Storage and protection of personal data

Your personal data will be stored confidentially in the database and systems held by our company pursuant to Article 12 of the KVKK; apart from legal obligations and the arrangements specified in this document, they will in no way be shared with third parties. Pursuant to Article 12 of the KVKK, our Company is obliged to prevent the unlawful processing of personal data in the systems and databases in which your personal data are held, to prevent access by unauthorised persons, and, in order to ensure their safekeeping, to take software measures such as hashing, encryption, transaction logging and access management, as well as physical security measures. If it becomes known that personal data have been obtained by others through unlawful means, the situation will be notified immediately, in accordance with the legal regulation and in writing, to the Personal Data Protection Board.

Personal data will be stored for as long as the purpose for which this information was given remains valid. In order to determine your needs, to provide you with faster service and to meet your subsequent service requests, your data will continue to be processed by us after the service you receive from us. Where the data must be kept subject to legal time limits and for the purposes of reporting and providing information to legal authorities and the relevant public authorities, or must be stored for longer periods under legislation, these limits will be complied with. We will take the necessary security measures to ensure that stored and recorded data are not lost, do not fall into the hands of unauthorised persons and to prevent unlawful use.

Keeping personal data up to date and accurate

Pursuant to Article 4 of the KVKK, our Company has an obligation to keep your personal data accurate and up to date. In this context, in order for our Company to fulfil its obligations arising from the legislation in force, our Customers need to share their accurate and up-to-date data or update them via the website / application.

Rights of the personal data subject under KVKK No. 6698

Article 11 of KVKK No. 6698 entered into force on 07 October 2016 and, pursuant to that article, the rights of the Personal Data Subject after that date are as follows:

The Personal Data Subject, by applying to our Company (the data controller), has the right, with regard to themselves, to;

Learn whether personal data are processed,

Request information about it if personal data have been processed,

Learn the purpose of processing of personal data and whether they are used in accordance with their purpose,

Know the third parties in Türkiye or abroad to whom personal data are transferred,

Request the correction of personal data if they have been processed incompletely or incorrectly,

Request the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

Request that, if personal data are corrected, erased or destroyed, these operations also be notified to the third parties to whom the personal data have been transferred,

Object to the emergence of a result against the person themselves by means of the analysis of the processed data exclusively through automated systems,

Request compensation for the damage if they suffer damage due to the unlawful processing of personal data.

The Data Controller Representative to be appointed by www.basefiks.com.tr will be announced in the Data Controllers Registry and at the internet address where this document is located once the legal infrastructure is in place.

Personal Data Subjects may direct their questions, opinions or requests to any of the contact channels below:

E.mail: info@basefiks.com.tr

Our Company may give its positive/negative response to the requests submitted, in writing or digitally, provided that it is reasoned and given within 30 days. As a rule, the necessary procedures relating to requests are free of charge. However, if the procedures require a cost, our Company reserves the right to request a fee. These fees are determined on the basis of the tariff set by the Personal Data Protection Board pursuant to Article 13 of the Personal Data Protection Law.