The Law on Protection of Personal Data (KVKK) No. 6698 also covers tourism businesses. Guest identity information, reservation data, payment information and contact information are personal data and compliance with KVKK is mandatory when processing.
Types of Data Processed
Identity information (name, surname, ID number), contact information (phone, email), reservation details, payment information and accommodation records are data frequently processed in tourism businesses.
Illumination Text and Explicit Consent
An illumination text must be provided before data processing activities, and explicit consent must be obtained when necessary. Guests must be informed and their rights (access, correction, deletion) must be exercisable.
Data Retention Periods
Except for legal obligations (tax, commercial books), personal data should not be retained longer than necessary for the purpose. Deletion and anonymization procedures should be applied.
Kep Legal Support
Kep Legal provides support in KVKK compliance consultancy, illumination text preparation and data processing inventory processes for tourism businesses.
