Privacy Policy

BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC. ("Company") has adopted as a principle to ensure the confidentiality of the information shared by individuals visiting its website. Therefore, this "Privacy Policy" has been created to inform you about which of your data is processed, the ways it is processed, which third parties it is shared with in compliance with the law and within the scope of your consent, and how it is protected by the Company. Additionally, this Privacy Policy describes how you can check the accuracy of this data and how you can request its deletion by contacting the Company’s website if desired. All services offered through various channels by the Company will collectively be referred to as "Service."


Data Controller

Personal data refers to any kind of information related to an identified or identifiable real person, such as name, surname, date of birth, or phone number.

Your personal data is processed in accordance with the Personal Data Protection Law No. 6698 (KVKK), relevant regulatory provisions, and authoritative decisions/announcements, and within the scope of this Privacy Policy, by BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC., registered with the Istanbul Chamber of Commerce under registration number 0178080652800001 and located at Barış Mah. Sakarya Cad. Migros AVM No:1 Beylikdüzü Istanbul, as the data controller.

The Company respects your concerns regarding privacy and personal data protection. Accordingly, the Company processes your personal data in accordance with all relevant legislation, especially the KVKK, ensures secure storage of your data, and takes all necessary security measures to prevent unlawful access.

This Privacy Policy text provides details regarding which categories of your personal data are collected, through which channels, for what purposes, which recipient groups the data is transferred to, your rights regarding the protection of your personal data, and other disclosures that the Company must provide to you within the scope of its obligation to inform as the data controller.


Scope of Privacy Policy and Collected Data

Information that will be used and processed for a specific person is only possible if this person willingly enters data or explicitly consents to it. Entering data or providing explicit consent indicates that the individual agrees with the terms specified below. Certain data is stored on the website's servers when the website is visited.

This data may include:

  • Name
  • Surname
  • Address
  • Email
  • Phone/Fax number
  • ID number
  • Gender
  • Date of birth
  • Marital status
  • Hobbies
  • Preferences

Based on this data, certain results regarding the site user may be derived. However, these personal data can only be used anonymously. If this data is transferred to an external service provider, necessary measures will be taken in line with applicable legal regulations regarding data security.

If you voluntarily provide personal information, the Company commits to using this data within the legal or consented limitations, processing it, or transferring it within this scope.

The purposes of using personal data and cookies are listed below:

  • Customizing user experiences
  • Ensuring communication with users
  • Competition
  • Advertising and marketing
  • Conducting analysis and market research
  • Managing the website and keeping records

As part of the service provided, the Company may obtain and transfer information regarding the service users within the scope of this Privacy Policy. Such information transfers are made in compliance with the conditions set by third parties and in accordance with existing contracts with third parties and applicable legal regulations. This Privacy Policy does not reflect the privacy practices of third parties with whom information is shared, and the Company is not responsible for the privacy policies or practices of those third parties. This Privacy Policy does not apply to information collected through practices beyond the Company's control, information collected through third-party websites or platforms, information collected through links on the Company’s website to third-party websites, or titles, campaigns, and other advertisements or promotions on third-party websites that the Company sponsors or participates in. The Company is not responsible for personal data transactions collected, stored, or used by third parties through their own websites.


Children's Privacy

Our website includes content for children under the age of 18. In this context, any data collected from children is gathered only with the consent of the child’s parent or guardian.


Cookie Use

The Company may obtain some of the mentioned personal data using a technical communication file (Cookie). These technical communication files are small text files that a website sends to the user’s browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing status and preferences regarding the website. The technical communication file helps to obtain statistical information regarding how many people use the website, for what purpose, how often, and how long they visit the site, and enables dynamic advertising and content generation from specially designed user pages. The technical communication file is not designed to retrieve data or other personal information from the main memory or email. Most browsers are set to accept technical communication files initially; however, users can adjust their settings to reject these files or notify them when they are sent. Any malfunction resulting from such setting changes should not be attributed to us.


Links to Other Websites

The Company website may contain links to third-party websites. This Privacy Policy does not apply to these websites, and the Company accepts no responsibility regarding these sites.


Information Update and Changes

The Company reserves the right to update the principles of privacy data protection and to amend the content of this Privacy Policy at any time to ensure compliance with the relevant legislation. The updated Privacy Policy will be published on the Company's website. You can always access the current version of the Privacy Policy at www.tozy.app. By continuing to use the Company's services or applications after the Privacy Policy has been changed, you are deemed to have accepted the changes. The amended Privacy Policy terms come into effect on the date they are published on the website.


Categories of Personal Data Processed and Purposes of Processing Personal Data

The shared personal data will be processed in accordance with the requirements of the services provided to customers, in compliance with the terms of the contract and technology requirements; to improve our products and services; for public security matters and legal disputes, to provide information to public prosecutors, courts, and relevant officials upon request as required by law; to offer a wide range of services to our members or share these opportunities with individuals and institutions that can provide these within a legal framework; to analyze advertising preferences, in compliance with the KVKK and related secondary regulations.


Data Retention Period

Data directly shared on the site is stored for the duration of the interaction period.


How Personal Data Can Be Processed

In accordance with the Personal Data Protection Law No. 6698 (KVKK), the personal data shared with BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC. may be fully or partially processed through automated or non-automated means, stored, modified, or reorganized in any data recording system as deemed necessary. All operations performed on data within the scope of KVKK are considered "personal data processing."


Information on Third Parties or Institutions to Whom Personal Data Can Be Transferred

For the purposes mentioned above, the individuals and institutions to whom the personal data shared with BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC. may be transferred include main shareholders, shareholders, advertisers, direct or indirect domestic/international subsidiaries; companies using the BMD infrastructure, and other service providers and entities with whom we cooperate to carry out our activities or with whom we collaborate as data processors, program partner organizations, and other third parties and institutions in domestic and international locations. Your data may be exceptionally shared with official institutions in response to binding requests from courts in compliance with our legal obligations.

The arrangements regarding cookies for advertising purposes are included in our "BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC. Cookie Policy," which is part of this "Privacy and Personal Data Protection Policy." For information about our Cookie Policy, please click here.


Personal Data Collected Before the Enactment of KVKK

No personal data stored before the effective date of KVKK, April 7, 2016, exists on the BMD TOURISM TRAVEL AGENCIES AND ADVERTISING INC. website.


Rights of the Data Subject

The data subject can exercise their right of access to their data at any time. Additionally, if the relevant conditions are met, the rights regulated in Article 11 of the KVKK and the following rights can be exercised:

  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to lodge a complaint via an authorized data protection supervisory authority
  • Right to data portability
  • When personal data is processed based on the Company's legitimate interest, the data subject has the right to object to the processing of personal data, due to reasons arising from their specific situation. If the Company cannot demonstrate a compelling reason overriding the interests, rights, and freedoms that require the protection of the data or if the processing serves the purpose of establishing, exercising, or defending legal claims, the Company will stop processing the data.

    If consent has been given for the processing of personal data, there is the possibility to withdraw consent.

    Under the law, you may address any requests, complaints, and suggestions regarding your personal data, by sending your petition along with identity-verifying documents to the address below, or by sending it to our Company's registered electronic mail address [email protected] using a secure electronic signature.

    Address: Barış Mah. Sakarya Cad. Migros AVM No:1 Beylikdüzü Istanbul