Data Protection & Transparency • 2026 Compliance

Privacy & Data Protection Policy

At Burgazada.Tours, we consider user privacy to be an inviolable ethical principle. This comprehensive Privacy Policy explains how personal data is collected, utilized, processed, and safeguarded in strict alignment with the European Union General Data Protection Regulation (EU GDPR), United Kingdom GDPR, and the Turkish Personal Data Protection Law No. 6698 (KVKK - Kişisel Verilerin Korunması Kanunu).

1. Data Controller Identification

The data controller responsible for the processing of personal data collected through this publication is:

2. Categories of Information Collected

We collect and process personal information strictly within two bounded categories:

A. Technical Connection & Server Log Data

Whenever you access Burgazada.Tours, our edge hosting infrastructure (Cloudflare Pages) automatically logs routine transmission information required to deliver static web assets securely:

• Truncated and anonymized Internet Protocol (IP) address
• Browser user-agent string, version, and operating system
• Referring uniform resource locator (URL) and timestamp of request
• Specific pages visited, HTTP response codes, and data byte volume transferred

This telemetry data is processed exclusively on the basis of legitimate interest (Article 6(1)(f) GDPR and Article 5(2)(f) KVKK) to defend our servers against distributed denial-of-service (DDoS) attacks, detect cyber vulnerabilities, and optimize page load performance across global edge nodes. Server access logs are routinely purged after 30 days.

B. Voluntary Communications Data

If you transmit electronic mail or feedback to our editorial team, we collect your name, email address, and correspondence content solely to respond to your research query or correction. We do not enroll your address in promotional marketing lists or distribute your correspondence to third-party brokers.

3. Cookies & Affiliate Tracking Technologies

Burgazada.Tours prioritizes clean web standards. We do not deploy invasive third-party cross-site advertising trackers, demographic profiling scripts, or social media fingerprinting beacons.

Affiliate Referral Architecture: Our monographs provide curated links to verified booking partners including GetYourGuide, Viator, and Booking.com. When you click an outbound link (for example, to inspect ferry ticket availability), tracking parameters such as `partner_id=FY0PT2P` and `campaign=burgazadatours` are appended to the destination URL. If you subsequently complete a reservation on the partner platform, our publication may receive a modest commission. This referral process is governed by the destination partner’s respective privacy and cookie policies; no sensitive financial data or booking credentials are ever transmitted to or stored by Burgazada.Tours.

4. International Data Transfers & Edge Infrastructure

Because Burgazada.Tours is hosted across globally distributed Content Delivery Network (CDN) edge nodes operated by Cloudflare, Inc., technical request metadata may temporarily transit servers located outside the Republic of Turkey or the European Economic Area. Such transfers are executed strictly under European Commission Standard Contractual Clauses (SCCs) and appropriate adequacy safeguards ensuring an equivalent level of personal data security.

5. Your Rights Under GDPR and Turkish KVKK

Under both European and Turkish data protection statutes, you are endowed with comprehensive data subject rights:

• Right of Access (KVKK Art. 11 / GDPR Art. 15): You have the right to request confirmation of whether personal data concerning you is processed, and receive a clear copy thereof.
• Right to Rectification (GDPR Art. 16): You may request the immediate correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten", GDPR Art. 17): You may demand the permanent deletion of your communications data from our mail servers.
• Right to Restriction & Objection (GDPR Arts. 18 & 21): You may object to data processing grounded in legitimate interest.
• Formal Application Procedure (KVKK Communiqué): To exercise your rights under Turkish Law No. 6698, submit a written petition containing your national identification number, passport number, and signature to privacy@burgazada.tours. We resolve all inquiries within thirty (30) business days free of charge.
• Right to Lodge a Supervisory Complaint: You maintain the legal right to file a formal grievance with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu - KVKK, Ankara) or your national European Data Protection Authority.

6. Security Safeguards & Data Retention

All network communication with Burgazada.Tours is strictly encrypted via Modern Transport Layer Security (TLS 1.3 / HTTPS) with automated HSTS headers. Our edge delivery infrastructure implements enterprise-grade Web Application Firewalls (WAF), rate-limiting algorithms, and strict content security policies.

7. Modifications to this Privacy Monograph

We review and update this policy periodically to reflect evolving legal standards, technical infrastructure modifications, and regulatory guidance. Material revisions will be accompanied by an updated chronological timestamp at the top of this document.