Website Confidentiality Agreement

During your visit to this website and your use of the service through this Site, how the information that we receive regarding you and the services you request will be used and protected are subject to this ‘’ Confidentiality Agreement’’. You hereby accept the conditions stipulated in this ‘’ Confidentiality Agreement’’ when you visit this website and request to use the services we provide through this Site.

I. Purpose of personal data protection and processing policy

Until today, data and information of our customers or potential customers are kept confidential and have never been shared with third parties by virtue of the sensitivity of our business as ETS. Personal data protection is our essential policy. Even before any legal regulation, our company and subsidiaries had attached a great importance to the confidentiality of personal data, adopted as a working principle and gave working instructions to the employees in compliance with this principle. As ETS, we undertake to adhere to all responsibilities of Law on Personal Data Protection. The principle of our company to protect personal data also covers our subsidiaries.

II. Scope and change of personal data protection and implementation policy

This Policy prepared by our Company has been regulated in accordance with “Law on Personal Data Protection” no. 6698 (“KVKK”). The Law has entered into force with all of its provisions as of today. The data received with your consent or pursuant to the other regulations as per to the Law shall be used to make our service more quality and to improve our services and quality policy. Again, some of the data we obtain are removed from the scope of personal data and anonymised. These data are used for statistical purposes and not subject to the enforcement of Law and our Policy. Personal Data Protection and Implementation Policy of ETS aims and regulates the protection of the data which are automatically obtained from our customers, potential customers, employees and the customers and employees of the companies in cooperation with us for solution partnership and the other parties. Our company reserves the right to change our Policy and Regulation – provided to comply with the Law and protect the personal data in a better way.

III. General principles on processing of the personal data

a) Being in compliance with the law and good faith: ETS questions the source of the data it collects or sent by other companies and attaches importance to handling these in compliance with the law and good faith. Within this framework, it warns and notifies the third parties (agencies and other intermediary firms) that sell the services provided by ETS to protect the personal data.

b) Being accurate and up to date, if necessary: ETS attaches importance to the accuracy of all of the data kept within the organization, to the fact that they don’t include any misinformation and that personal data are updated only if the changes are notified.

c) Being processed for specified, explicit, and legitimate purposes: ETS processes the data limited to the services and purposes for which consent of the persons are taken during the services. It shall not process, use and make use of the data out of business purposes. 

d) Being relevant, limited and proportionate to the purposes for which data are processed: ETS uses the data only for processing purposes and to the extent what the service requires.

e) Being stored only for the time designated by relevant legislation or necessitated by the purpose for which data are collected: ETS keeps the contractual data as long as it’s required by the commercial and taxation law as well as the periods of conflicts of law. Nevertheless, it shall delete or anonymise the data in case the reasons necessitating their processing cease to exist.

It’s crucial to state that whether ETS collects or processes the data by one’s will or in compliance with the law, the abovementioned provisions shall apply anyhow. You shall have the following rights pursuant to Article 11 of Law on Personal Data Protection. A separate application shall be prepared by ETS for you to facilitate your related rights. The persons whose personal data have been processed may apply to our official announced on our website by ETS and shall be entitled to; 

a) Learn whether or not your personal data have been processed, 

b) Request information as to processing if your data have been processed,

c) Learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,

ç) Know the third parties in the country or abroad to whom personal data have been transferred,

d) Request rectification in case personal data are processed incompletely or inaccurately,

e) Request deletion or destruction of personal data within the framework of the conditions set forth under the Law, 

f) Request notification of the operations made as per clauses (d) and (e) to third parties to whom personal data have been transferred,

g) Object to occurrence of any result that is to your detriment by means of analysis of personal data exclusively through automated systems, 

ğ) Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data. As ETS, we respect to these rights. 

Maximum Savings Policy/Scrimping Policy

Pursuant to our policy called as maximum savings policy or scrimping policy, the data received by ETS are processed into the system as required. Thus, which data we will collect shall be determined according to the purpose. Unnecessary data shall not be collected. Other data submitted to our company are transferred to the information system of the company in the same way. Redundant information is not stored in the system; they are deleted or anonymised. These data may be used for statistical purposes. Health data among the special quality data are only kept in the system to provide better service to the customers and to protect their health.

In some airline systems, if a reservation is made with more than one passenger information, all passengers traveling with the same PNR number can be displayed.

Deletion of Personal Data 

When the retention period necessitated by the Law expires, judicial procedures are completed or other requirements no longer exists, these data shall be deleted, removed or anonymised automatically, by the company or upon the request of the relevant person. 

Accuracy and Currency of Data 

The data within the body of ETS are processed as declared by the relevant persons as a rule. ETS is not obliged to check up on the accuracy of the data declared by the customers or the persons in touch with ETS and it’s also contrary to the Laws and our working principles. The declared data are regarded as correct and accurate. The principle of accuracy and currency of personal data has also been adopted by ETS. The personal data processed upon the request of the relevant person or from official documents that are submitted to our company are updated. Necessary precautions are taken for this purpose. 

Confidentiality and data security 

Personal data are confidential and ETS obeys the rule of confidentiality. Only authorized persons shall access the personal data. All necessary technical and administrative measures are taken to protect the personal data collected by ETS and to prevent the damage on our customers and potential customers. Within this framework, it shall be ensured that the software complies with the standards, third parties are selected with caution and data protection policy is observed within the company.

IV. Purpose of data processing 

Collection and processing of personal data by ETS shall be executed in line with the purposes stipulated in the letter of clarification. The data are collected and processed to draw up contracts and provide better services to the customers.

V. Data of customer, potential customer and business and solution partners 

Collection and processing of data for contractual relationship 

In case of a contractual relationship with our customers and potential customers, the collected personal data may be used without the approval of the customers. However, this use shall be for the purpose of the contract. The data shall be used for better execution of the contract and as required by the services and updated, if necessary, by contacting the customers. Nevertheless, the data provided to us by our potential customers shall be processed to easier and more quality services later. These data shall be deleted upon requests in case of lack of any contractual relationship.

Data of Business and Solution Partners 

ETS adopts as a principle to act in compliance with the laws when exchanging the data both with business and solution partners. The data are shared with the business and solution partners with the understanding of data confidentiality and as required by the services and it’s definitely ensured that these parties take measures regarding the data security.

Data processing for advertisement purposes 

Electronic messages for advertisement purposes can only be sent to the persons with prior consent in compliance with the Law on the Regulation of E-Commerce and the Regulation on Commercial Communications and Commercial Electronic Messages. An explicit consent of the person is required to send advertisements. ETS complies with the details of ‘’the consent’’ specified in the same legislation. In order to send electronic messages, personal data are transferred to service providers and Message Management System Inc. as per the Regulation on Commercial Electronic Messages.

Data processing due to legal obligations of the company or being stipulated explicitly in the Law 

Personal data may be processed without prior consent when it’s stipulated explicitly in the relevant legislation or to fulfil a legal obligation specified in the legislation. Type and scope of the data processes are required for data processing activity that is permitted by the Laws and they should comply with the relevant legal provisions.

Data processing of the company 

Personal data may be processed pursuant to the legal purposes and the services of the company. However, the data shall not be used for services contrary to the laws under any circumstances.

Processing of personal data of special nature 

According to the relevant laws, the following are considered personal data of a special nature: race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, biometric and genetic data. ETS takes the adequate measures determined by the Commission for the Processing of Personal Data of Special Nature. 

ETS may only process data of special nature for the purpose for which it was collected and with the consent of the individual, in order to provide better services.

Data obtained via membership process

In case you become the member of ETS, the personal data given during sign up transaction are processed on our systems. If you become member via Facebook, Google or other social media channels, your information provided by related social media channel to its partners such as your name, surname, your profile picture and e-mail address are accessed and conveyed to ETS systems.

Data processed with automatic systems 

ETS acts in compliance with the Law for data processed with automatic systems. The information obtained from these data without the explicit consent of the persons shall not be used against the person. However, ETS may take decisions regarding the persons that it will perform process by using the data within the system.

Cookies Policy

As in many websites, Ucuzabilet uses technologies such as cookies etc. to improve the visit experience of website users and to increase the quality of service. Ucuzabilet Cookies Policy has been prepared in order to inform website users about cookies and the types of cookies used and to guide how cookie preferences can be managed. 

If you do not allow the use of cookies, we kindly ask you not to continue to the website or change your cookie preferences as shown in this Policy. We would like to remind you that some features of the website may lose their functionality if cookies are not allowed.

What are Cookies?

Cookies are text files, installed by your web browser when you visit the website, in your computer or mobile phone. In these files, your IP address, session information, the pages you access etc. are stored. Your website preferences can be remembered, your session can be kept open or content for your interest can be shown thanks to the cookies. For detailed information on cookies, you can visit www.aboutcookies.org and www.allaboutcookies.org.

Types of Cookies

Cookies are divided into different types according to criteria such as their storage time on mobile devices and by whom they are placed. The basic distinction within the scope of these criteria is as follows:

Session Cookies: Session cookies are temporary cookies that are deleted from the device after closing the browser. The main function of these cookies is to maintain the website running properly. 

Persistent Cookies: Persistent cookies remain on the device even after the browser is closed, until they are deleted by the user or expired. 

First Party Cookies: First-party cookies are cookies placed on the device by the website operator visited. 

Third Party Cookies: Third-party cookies are cookies placed on the device and controlled by people other than the website operator visited.

User information and internet

In case the personal data are collected, processed and used at the web sites and other systems or applications of ETS, the relevant persons shall be informed of the cookies if necessary with confidentiality notification. The persons shall be notified about our practices on the web pages. The personal data shall be processed in compliance with the Law.

Following are submitted to your information regarding the cookies we use/will use on our website when you visit.

Purpose to Use CookiesCookie Type
Google(analytics, doubleclick)Measuring 
Advertisement 
In-site improvement
Functional and analytical cookies 
Commercial cookies
FacebookAdvertisementCommercial cookies
AdjustMeasuring 
In-site improvement
Functional and analytical cookies 
Commercial cookies
HotjarMeasuring 
In-site improvement
Functional and analytical cookies 
Commercial cookies
3rd party companies (criteo, rtbhouse)AdvertisementFunctional and analytical cookies 
Commercial cookies

Cookies Used on Ucuzabilet

Ucuzabilet uses different types of cookies in compliance with Privacy Policy. 

Strictly Necessary Cookies: These are technical cookies that allow the website to run properly and allow you to use its features. They are in the session cookies category. In case these cookies are blocked, features of the website cannot be used. Your approval isn’t required for the use of strictly necessary cookies. 

Analytical Cookies: Analytical cookies are used to improve your experience on the website. Analytical cookies ensure that we understand how you use the website (for example: which websites you visit, visit duration etc.). Thus, we can develop the contents we provide or change the website design. 

Functionality Cookies: They ensure that your language preferences, region selection etc. are remembered when you visit the website again.

Targeting/Advertising Cookies: Ucuzabilet uses different first-party and third-party cookies for targeting and advertising purposes on the website. You can block these cookies by changing the settings of your browser or changing the cookies preferences as shown in this Policy.

How Can You Change Your Cookies Preferences?

It’s possible to customize or block complete the cookies by changing the settings of your browser. You can access the detailed information regarding the steps to follow for different browsers from the following links: 

Browser

Link

Google Chrome

https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=tr

Internet Explorer

https://support.microsoft.com/tr-tr/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox

https://support.mozilla.org/tr/kb/cerezleri-silme-web-sitelerinin-bilgilerini-kaldirma

Yandex

https://yandex.com.tr/support/browser-classic/personal-data-protection/cookies.xml

Safari

https://support.apple.com/tr-tr/guide/safari/sfri11471/mac

You can check out the help or support page of the relevant browser to manage the cookies preferences on other browsers.
Transferring of the Personal Data Domestically and Internationally 
Ucuzabilet.com shares your personal data with domestic and foreign contracted hotels and airline companies for your accommodation and/or travel purposes. Your personal data may also be shared with other domestic and foreign electronic platforms so that you can search, book and stay in hotels that do not have a contract with ucuzabilet.com.
Your rights regarding your personal data 
By applying to ETS as data owner, you will be entitled to:
Learn whether or not your personal data have been processed,
Request information as to processing if your data have been processed,
Learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
Know the third parties in the country or abroad to whom personal data have been transferred,
Request rectification in case personal data are processed incompletely or inaccurately and request notification of the operations made in this sense to the third parties to whom your personal data have been transferred,
Request deletion or removal of your personal data in case the reasons for processing personal data are no longer valid although the said data have been processed as per provisions of Law no. 6698 and other related laws and request notification of the operations made in this sense to the third parties to whom your personal data have been transferred,
Object to occurrence of any result that is to your detriment by means of analysis of personal data exclusively through automated systems,
Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.
In case you send your requests regarding the above-mentioned rights to our Company in compliance with the principles stipulated in Communiqué on Application Procedures and Principles to Data Supervisor, ETS will conclude your request as soon as possible and within 30 (thirty) days at the latest for free according to the type of your request. However, if the process requires an extra charge, ETS may request the fee in the tariff determined by Personal Data Protection Board.
Functionality and Analytical  
Contain data to remember your preferences, use the website efficiently, optimize the website to respond the requests of the user and provides information on how the visitors use the website. Naturally, this kind of cookies would contain your personal information like your username etc. 
Third Party Cookies 
Ucuzabilet websites/mobile applications/mobile websites work with reliable, recognized third party advertisement providers. Third party service providers place their own cookies to present advertisements special to you. Cookies placed by third parties collect, process and analyse visitors’ navigation information on the websites. 
Commercial Cookies 
These are used to offer similar products/contents to your intended ones in line with your fields of interest and preferences and to increase your user experience by offering a more advanced and customized advertisement portfolio. Retention time for the abovementioned session, permanent, functional and analytical and commercial cookies in the background is about 2 (two) months and this could be adjusted from web browser settings. This process to remove from the settings may vary according to the web browsers.
How to Delete Cookies?
Most of the web browsers are set to accept and use automatically the cookies since the first installation in your computer. Using help or setting menu on your web browser, you can block cookies or get warning when cookies are sent to your device. You can refer to screens for instructions or help options of your web browsers to learn different ways of managing the cookies and get detailed information on how to adjust the settings of your browser.
VI. Data of our employees
Processing of the data for business relations
Personal data of the employees may be processed without obtaining consent to the extent of requirements of health insurance and business relations. However, ETS hereby undertakes the protection and confidentiality of the data of the employees.
Processing as per Legal Obligations
ETS may also processes the personal data of the employees without obtaining a separate consent to fulfil a legal obligation stipulated in the legislation or in case it’s explicitly specified in the legislation. This case is limited to the obligations arising from the Law.
Processing in Favour of the Employees 
ETS may process the personal data without obtaining the consent for the procedures in favour of company employees like private health insurances. For the disputes arising from the business relations, ETS may also process the data of the employees.
Processing of special quality data
Pursuant to the Law, race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothes, membership of association, foundation or union, health, sexual choice, juridical sentence and data regarding safety measures and biometric and genetic data are among the special quality data. Besides the consent of the relevant person, ETS also takes adequate measures determined by the Board for the processing of special quality data. Special quality data may be processed limited to and related to the cases permitted by the Law without the consent of the person. The quality data obtained from the employees shall only be used for the corresponding purpose to allow them to benefit from the insurance and health services.
Data processed with automatic systems 
The data processed regarding the employees with automatic systems may be used for in-house promotions and performance assessments. The employees reserve the right to appeal to the results against them and they should perform this process in compliance with the internal procedures. Appeals of the employees shall be evaluated again within the company. 
Telecommunication and internet
The computers, telephone, e-mail and other applications allocated to the employees within the company shall only be used for business purposes. The employee cannot use any of these means allocated to himself/herself by the company for private purposes or communication. The company may control and monitor the data on these means. The employee undertakes not to keep any data or information apart from the business purposes on the computer, telephones or other means allocated to himself/herself as of his/her employment date.
VII. Transferring of the personal data domestically and internationally 
Personal data may be shared with business and solution partners and ETS subsidiaries for the purpose of providing the services by ETS.
ETS will be entitled to transfer the personal data for certain purposes to the following person and institutions; 
» Business partners of ETS limited to the purpose of execution of the aims of the establishment of the business partnership, 
» The suppliers of ETS to the extent of providing the necessary services by our company to fulfil its commercial activities and procured by the supplier as external sources, 
» Solution partners of ETS limited to ensuring the execution of the commercial activities which require the participation of the affiliates of the company, 
» Subsidiaries of ETS. 
ETS is authorized to transfer the personal data domestically and internationally within the conditions determined by the Board and in compliance with the other provisions in the Law and depending on the consent of the person. 
VIII. Rights of the relevant person
ETS hereby agrees that the relevant person must provide his/her consent before processing the data within the scope of the Law and he/she reserves the right to determine the destiny of the data after the data is processed. 
Regarding the personal data, the relevant persons holds the right to do the following by applying to our official announced on the web page by ETS; 
a) To be informed whether his/her personal data are processed or not, 
b) To request information if the personal data are processed, 
c) To learn the purpose of processing the personal data and whether the data are used for the corresponding purposes, 
ç) To get information on the third parties to whom the personal data are transferred in the country and abroad, 
d) In case the personal data are processed incompletely or inaccurately, to request the correction, 
e) To request that personal data are deleted or removed within the framework of the conditions stipulated in article 7, 
f) To request that the processes performed asper clause (d) and (e) are notified to the third parties to whom the personal data are transferred, 
g) To appeal to the negative results against himself/herself arising from the analysis of the data processed exclusively through the automatic systems, 
ğ) In case the personal data are damaged due to the processing of the data contrary to the Law, to request that the damages are indemnified. 
Nevertheless, the persons don’t reserve any right on the anonymized data within the company. ETS may share the personal data as required by a juridical function or governmental authority as per the business and contractual relationship.
The owners of the personal data shall submit their requests regarding the above-mentioned rights to the contact address …… by completely filling out and putting their wet signatures on the application form given at www.etstur.com.tr, the official website of the company, through registered letter with return receipt with the copies of their identity cards (only front page for birth certificate). The applications shall be replied within the shortest time according to the content of the application within 30 days at the latest after the delivery to the company. You need to apply with registered letter with return receipt. Besides, only the questions about you shall be replied and any applications made regarding your spouse, relative or friends shall not be accepted. ETS can only request information and document from the application holders.
 You can also submit your requests using a secure electronic signature.
IX. Confidentiality Principle
The data of the employees and other persons within ETS are confidential. Nobody can use, copy, reproduce, transfer these data for any other purposes, except for business purposes, without compliance with the contract or the law.
X. Process security 
All necessary technical and administrative measures are taken to protect the personal data received by ETS and to prevent the retention of them by unauthorized persons and to prevent the damage on our customers and potential customers. Within this framework, it’s ensured that the software complies with the standards, third parties are selected with care and data protection policy is followed within the company. Security-related measures are constantly updated and improved.
XI. Protection of Credit Card and Payment Information
Payment and credit card information received from you due to the service we provide is transmitted to a third-party service provider serving in line with PCI DSS security standards ((Payment Card Industry Data Security Standards) and they’re encrypted and stored until the date the service fees are collected. Security standards under the name of PCI DSS are created by a council consisting of leading payment card service providers such as American Express, Discover, JCB International, Mastercard and Visa Inc. companies to provide secure payment solutions and ensure that merchants, service providers, financial organizations and institutions secure their own payment systems and implement new security policies and technologies in order to prevent possible breaches and card frauds. Credit card and other payment information you’ve shared with Ucuzabilet are sent to a third party secure service provider with Level 1 security certificate in line with the relevant standards and will be stored until the service fees are collected by the suppliers as mentioned above. After this date, information will continue to be stored for a certain period of time in order to ensure transaction security. In case you receive service through Ucuzabilet.com, you acknowledge that you have explicitly consented to the storage of credit card and other payment information in the systems described above within the specified scope. Your credit card information is safe in Ets Ersoy Turistik Servisleri A.S. or Etsgroup companies. However, you can face some risks if you keep your credit card information and passwords on other websites such as Chrome, password managers apart from our systems. Our company isn’t responsible for these risks.
XII. Inspection 
ETS carries out the internal and external inspections for protection of the personal data.
XIII. Notification of Violations 
ETS shall immediately act to remedy the violations in case a violation of personal data is notified. It shall mitigate or indemnify the damage of the relevant person. In case the personal data are obtained by the unauthorized persons, this case should be immediately notified to the Board of Personal Data Protection. 
Regarding the notification of the violations, you can also make an application as per the procedures provided at http://etstur.com.
Contact 
You can contact us for further questions on the confidentiality agreement by using the following contact information.
Ets Ersoy Turistik Servisleri A.Ş.
Address: Merdivenköy Mh. Nur Sk. 1I/11 C Blok
Kadıköy, İstanbul 
Phone: +90 216 542 99 99
Fax: +90 216 349 86 40
E-mail: misafirimiz@etstur.com
Central Registration System No: 0381004079000024 

Protection of Personal Data Application Form