Last updated: 30 October 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how we process the personal data of people who visit villacatalog.com (the “Site”), contact us or make a booking through the Site. The Turkish version of this notice prevails in case of any difference.
1. Data controller
Your personal data is processed by Tourmice Turizm (TÜRSAB licence No. 14235), the travel agency that operates the Site and a member of the Association of Turkish Travel Agencies (TÜRSAB), as data controller.
- Address: Orta Mah. Pehlivanlar Cad. No:1/10, Serik / Antalya – Türkiye
- E-mail: info@villacatalog.com
- Phone: +90 242 722 22 77
We provide our services together with our partner agency RTI Turizm (TÜRSAB licence No. 7296).
2. Personal data we process
- Identity: title, first name, last name, nationality; the ages of children included in a booking.
- Contact: e-mail address, phone number and, if you enter it, your address.
- Booking: villa or hotel, check-in and check-out dates, number of guests, board, price and currency, your special requests, booking and reference numbers, booking status.
- Payment: the card details you enter to guarantee or pay for a booking (cardholder, card number, expiry date, security code). Card details are not stored in our systems; they are only passed on over an encrypted connection (HTTPS) to the booking platform and the property while the booking is made.
- Requests and complaints: the subject and content of messages you send through the contact form or by e-mail.
- Security: IP address, browser and device information, date and time of visits, system and error logs.
- Site usage: page views, clicks and scrolling collected through cookies (only if you accept analytics cookies).
The Site does not ask for health data or other special categories of personal data. Please do not enter such information in the special requests field; if you do, it is used only to pass your request on to the property.
3. Purposes
- To show villa and hotel availability and prices, and to create, send to the property, confirm, change or cancel your booking,
- To send booking confirmations and information e-mails and to answer your questions and requests,
- To meet our obligations as a travel agency (Consumer Protection Law No. 6502, Travel Agencies Law No. 1618, tax and commercial law) and to respond to requests from competent authorities,
- To carry out accounting and invoicing,
- To keep the Site and our systems secure and to find and fix errors,
- If you allow it, to analyse how the Site is used in order to improve our services.
Your personal data is not used for marketing or advertising without your explicit consent, and we do not send commercial electronic messages.
4. How we collect data and legal grounds
We collect personal data through the booking and contact forms on the Site, by e-mail, by phone and through cookies, by automated and partly automated means, on the following legal grounds under Article 5 KVKK:
- it is necessary for the conclusion or performance of a contract (making and handling your booking) – Art. 5/2-c,
- it is necessary for compliance with our legal obligations – Art. 5/2-ç,
- it is necessary for the establishment, exercise or protection of a right – Art. 5/2-e,
- it is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed (answering requests and complaints, Site security) – Art. 5/2-f,
- your explicit consent, for analytics cookies – Art. 5/1.
5. Who we share data with
Limited to the purposes above and as far as necessary, your personal data may be shared with:
- Properties: the hotel or villa operator you book with,
- Booking platform: HyperGuest, the hotel distribution platform that connects us with the properties,
- Our partner agency RTI Turizm,
- Service providers: companies providing our servers and hosting, e-mail delivery and IT services,
- competent public authorities and courts, on request and as permitted by law.
Transfers abroad: the servers of the booking platform and of some properties may be located outside Türkiye. These transfers, which are necessary to carry out your booking, are made occasionally for the performance of a contract under Article 9(6)(b) KVKK. Data is transferred to the analytics cookie provider (Microsoft Clarity, USA) only on the basis of your explicit consent.
6. How long we keep data
- Booking, invoice and accounting records: for the period required by law (up to 10 years under the Turkish Commercial Code and Tax Procedure Law),
- Contact form messages and e-mail correspondence: 2 years after the request is closed,
- Security and system logs: up to 2 years,
- Cookies: as shown in the table below.
When the period ends or the grounds for processing no longer apply, your personal data is deleted, destroyed or anonymised.
7. Cookies
The Site uses cookies and browser storage that it needs to work. Analytics cookies are used only if you accept them; you can delete or block cookies at any time in your browser settings.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| vc_consent | Remembers your cookie choice | Necessary | 1 year |
| .AspNetCore.Culture | Remembers the Site language you chose | Necessary | 1 year |
| .AspNetCore.Antiforgery.* | Protects forms against forged requests | Necessary | Session |
| .AspNetCore.Mvc.CookieTempDataProvider | Carries the rate you chose through the booking steps | Necessary | Session |
| vr_nationality, st_currency (browser storage) | Remembers your nationality and currency | Functional | Until you delete it |
| _clck, _clsk, CLID, MUID (Microsoft Clarity) | Analyses how the Site is used (page views, clicks, scrolling) | Analytics | 1 day – 1 year |
The map on the contact page is provided by Google Maps, and Google may use its own cookies.
8. Your rights
Under Article 11 KVKK you may apply to the data controller to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of the processing and whether the data is used accordingly,
- know the third parties in Türkiye or abroad to whom the data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction of the data under the conditions of Article 7 KVKK,
- request that third parties who received the data be notified of corrections, deletions or destruction,
- object to a result against you arising solely from automated analysis of the data,
- claim compensation if you suffer damage because the data was processed unlawfully.
9. How to apply
You can send your request in writing, with information that verifies your identity, to the address above, or by e-mail from the address you gave us to info@villacatalog.com, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We will answer as soon as possible and within 30 days at the latest, free of charge; if the action has an additional cost, the fee set by the Personal Data Protection Board may apply.
10. Changes
We may update this notice when the law or our services change. The current version is always published on this page.