Data Protection & Your Rights
This page explains how we handle personal data under the EU General Data Protection Regulation (GDPR) and what rights you have. It sits alongside our Privacy Policy and Cookie Policy.
Who is responsible for your data
Medgulets Seyahat Turizm Ticaret Anonim Şirketi (trading as MedGulets). Address: Kadınlar Denizi Mah. 590. Sk. D Blok No: 6 D, İç Kapı No: 9, 09400 Kuşadası / Aydın, Türkiye. Registered with the Kuşadası Chamber of Commerce (KUTO), registry no 12839. For any data protection question or request, write to sales@medgulets.com.
What we collect
- What you send us. When you make an enquiry or request a quote: your title, first name, surname, e-mail address, telephone number and country code, the dates and number of guests you are asking about, the yacht you are interested in, and your message.
- How you use the site. Pages you view, the yacht pages you open, the offer pages you open, the site that referred you, and the date and time of each visit.
- Technical information about your device. IP address, browser and operating system, screen resolution and colour depth, language and time zone, and the country and city your IP address is assigned to. We also derive characteristics of your browser and device in order to recognise the same visitor on a later visit.
Why we use it, and on what legal basis
- To answer your enquiry and arrange your charter — because it is necessary to take steps at your request before entering into a contract, and to perform that contract.
- To connect your enquiry to the yachts and pages you looked at, so our team can give you a relevant quote instead of asking you to repeat yourself — our legitimate interest in responding usefully.
- To keep the site working and secure and to understand how it is used — our legitimate interest in operating and improving the site.
- To send you marketing — only with your consent, which you can withdraw at any time.
Who we share it with
To quote and operate a charter we share the details necessary for your booking with the owner or operator of the yacht you choose. We also use service providers that process data on our behalf — website hosting, database hosting, e-mail and messaging. We do not sell your personal data.
Where your data is processed
We are established in Türkiye, so your data is processed outside the European Economic Area. We also use hosting and infrastructure providers located in the European Union and outside it. Where data leaves the European Economic Area we rely on appropriate safeguards for the transfer; write to us if you would like details of the providers and safeguards that apply.
How long we keep it
We keep enquiry and booking records for as long as we need them to handle your request and to meet our legal, tax and accounting obligations. We keep website usage records for a shorter period, and the visitor identifier described in our Cookie Policy expires 400 days after your last visit.
Your rights
Wherever the GDPR applies to you, you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete your data;
- ask us to restrict how we use it;
- receive your data in a portable format;
- object to processing we carry out on the basis of legitimate interest;
- withdraw your consent at any time, where we relied on consent;
- lodge a complaint with your national data protection authority.
How to exercise them
Write to sales@medgulets.com and tell us what you would like us to do. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose someone else's data.
Changes to this page
If we change how we handle personal data we will update this page.