Privacy policy

Who is responsible

The operator of the site named above is responsible for your data. Write to us by email or in the chat with any question about it.

What we collect

When you book: your name, phone number and where to pick you up (hotel or address, room number), the tours, the dates, the number of adults, children and infants, the language of the guide, a promo code if you use one and your email address if you give it. Anything you write in the comment, for example about allergies or pregnancy, we use only to arrange your trip.

In the chat: your messages and the photos you send, and your email address if you leave it for our replies. Your browser redraws photos before sending them, so they reach us without their metadata, such as the place where they were taken.

With a chat message or a request we also keep details of your visit: the IP address and the approximate location it points to (country, region and city, looked up in a database on our own server without asking anyone else), the network provider, the browser, the operating system and the device, your languages and the page the message was sent from. If you accept analytics, also your time zone, the size of your screen, the first page of your visit and where you came from (UTM tags).

When you tap a WhatsApp button: the language, the page and the prepared message, without your name, phone number or IP address. The conversation itself takes place in WhatsApp, under WhatsApp's own privacy policy.

When you sign in: your email address. The one-time code we send is valid for 10 minutes; we keep only a hash of it and of your session.

In reviews: your rating, your text, the name you sign with and your photos.

Our server keeps technical logs: the IP address, the time and the address requested. They serve to keep the site running and secure and are overwritten after a short time.

If you accept analytics, Google Analytics and Yandex Metrica record the pages you open and what you do on them (clicks, scrolling, downloads), the type of device and browser, the approximate location and where your visit came from. Google Analytics does not store your IP address, and Google signals and ad personalisation are off. Yandex Metrica stores your IP address only shortened, with its last part set to zero, and its Session Replay (Webvisor), which records what is done on a page, is off. Without your consent the site loads neither Google Analytics nor Yandex Metrica.

Why we use it

To carry out your booking: to pass it to the organiser and the driver, to send you the ticket, a reminder on the evening before and a request for a review after the trip.

To answer your questions in the chat, by WhatsApp and by email.

To answer your messages and requests better and to protect them from abuse: the details of your visit described above.

With your consent, to understand how the site is used and to improve it (Google Analytics and Yandex Metrica).

To plan our work: we count the requests taken to WhatsApp.

To protect the site from abuse and to keep the records that accounting and tax law require.

We send offers by email only if you tick the box next to your email address in the chat. You can opt out at any time: untick the box or remove your email address in the chat, use the “Unsubscribe” link in any such email or write to us. We do not sell your data.

Who receives it

The organiser of your tour and its driver or guide: your name, phone number, the place and time of pickup, the number of travellers and the amount to pay on the day. We send them these lists by WhatsApp.

Our staff, through the site's back office. New bookings and chat messages also reach them as Telegram notifications and as encrypted browser notifications. A notification holds the client's name (in a chat without one, the email or phone left there), the tour, the date, the number of travellers, the pickup village and the start of the message; the phone, email and hotel of a booking never go into it.

Providers who work for us: Hetzner Online GmbH, Germany (the site's server and database); smtp.bz (sending emails); Anthropic, USA (automatic translation of chat messages for our staff, only the text of the message is sent); Google Ireland Limited, Ireland, and Google LLC, USA (Google Analytics, only if you accept it).

Yandex Metrica, only if you accept it, is provided by Yandex companies under its terms: Air Smart Advertising Solutions FZ-LLC, United Arab Emirates, for the data of visitors covered by the GDPR, and otherwise Büyük Reklam Çözümleri Limited Şirketi, Türkiye, or YANDEX LLC, Russia.

We find the approximate location of an IP address ourselves, with the DB-IP database on our server: no one receives your IP address for this. IP Geolocation by DB-IP (db-ip.com), licensed under CC BY 4.0.

Authorities, where the law requires it.

Transfers abroad

Some of these providers process data outside Türkiye and the European Union, for example Anthropic and Google in the USA, Yandex in Russia and the United Arab Emirates, Telegram and WhatsApp. We give them only what their task needs.

How long we keep it

Bookings: as long as needed to carry them out and to answer questions about them, and then as long as accounting and tax law requires.

Chats: until they are no longer needed or until you ask us to delete them.

Details of a visit: together with the chat or the request they came with, and they are deleted with it. Google Analytics keeps the data of single visits for 2 months; its reports keep only totals. Yandex Metrica keeps its data while the site uses it; once the site's counter is deleted, Yandex deletes the data under its terms.

Sign-in: codes for 10 minutes, sessions for up to 90 days. Records of WhatsApp requests: as long as we need them for our statistics.

Cookies and browser storage

The site sets cookies of its own that it needs to work: ab_session keeps you signed in (90 days), ab_chat links you to your chat (180 days), locale remembers your language (1 year), ab_consent remembers your choice about analytics (180 days) and ab_cookie_check checks that cookies work and is deleted at once.

Only if you accept analytics does Google Analytics set its cookies _ga and _ga_M3YKNCWJE6 (2 years), and Yandex Metrica the cookies _ym_uid and _ym_d (1 year), _ym_isad (20 hours) and other technical cookies whose names begin with _ym, with _ym entries in your browser's storage; on its own domains (yandex.ru, yandex.com) Yandex may set cookies of its own if your browser allows it. We use no advertising cookies. You can change your choice at any time under “Cookies” at the bottom of every page; if you withdraw your consent, the cookies and entries of Google Analytics and Yandex Metrica on our site are deleted.

Your browser also keeps your cart, your bookings and tickets (so that they open without internet), your favourites, the chosen currency and the state of the chat. This data stays on your device; you can delete it in your browser's settings.

Your rights

You can ask us what data we hold about you, have it corrected or deleted, restrict or object to its use and receive it in a portable form. Write to us by email or in the chat: we reply within 30 days.

You can withdraw your consent to analytics and to offers by email at any time, as described above; this does not affect what was done before. You can also stop Yandex Metrica from collecting data about you on any site with the Yandex Metrica opt-out add-on for your browser, found in Yandex Metrica's help.

You may also complain to the data protection authority of your country or, in Türkiye, to the Personal Data Protection Authority (KVKK).

Children

Bookings are made by adults. About children we only ask how many there are and their age group.

Security

The site works only over an encrypted connection. Only the staff who need it have access to bookings and chats, and they sign in with a second factor.

Changes to this policy

We may update this policy. The date of the last change is shown at the top of this page.