Privacy Notice

1. Data controller

The data controller responsible for your personal data is:

• Dodo Yachting
• info@dodoyachting.com
• +90 535 264 02 21

2. What we collect

Dietary needs or allergies are health data and receive special protection. We only process them if you choose to share them, with your explicit consent, and only to prepare your meals safely on board.

When you book a charter, we also process the charter agreement and payment records, and in your personal voyage page the guest list you enter for the port and coast guard authorities (full name, nationality, date of birth and passport details), your preferences for the chef and captain, guestbook notes and your voyage evaluation, which is then linked to your booking.

• Charter enquiries: your name, email address, phone number (optional), destination, travel dates, number of guests, your message and the preferences you choose in our charter designer.
• Voyage evaluations: your ratings and comments and the name of the yacht. We do not ask for your name; please do not include personal details in your comments if you prefer to stay anonymous.
• Messages you send us by email, phone or WhatsApp.
• Comments on a shared charter plan: the name and text you enter, visible to everyone who has that plan's link and deleted after six months.
• Technical data: your IP address and browser details, processed by our hosting provider to deliver the site securely and to block abuse.
• How you found us: the campaign tags in the link you followed (UTM), the referring website and the first page you visited, stored with your enquiry so we know which channels bring guests. Ad click IDs (gclid, fbclid) are kept only if you accept advertising cookies.
• Visit totals: our own counter adds up page views and clicks per day without cookies, IP addresses or any visitor ID.
• Preferences saved in your own browser (for example your currency). These never leave your device.

3. Why we use it and our legal basis

• To answer your enquiry and prepare a proposal — steps taken at your request before a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
• To perform your charter agreement — contract performance (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
• To meet legal obligations such as passenger lists and accounting records (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).
• To improve our service using voyage evaluations and to keep the website secure — our legitimate interests (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
• To learn which channels bring enquiries, using cookie-free visit totals and the campaign stored with your enquiry — our legitimate interests (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
• Analytics and advertising measurement with cookies (Google Analytics, Google Ads, Meta) — only with your consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)), which you can withdraw with “Cookie settings”.
• To send marketing messages — only with your consent, which you can withdraw at any time.

4. How we collect it

We collect data electronically through the forms on this website, by email, phone and WhatsApp, and in person when you are on board, partly by automated means.

5. Who we share it with

We never sell your personal data.

• Cloudflare, Inc. — website hosting, security, bot protection and our database.
• Resend (Plus Five Five, Inc.) — delivery of the emails sent from our forms.
• WhatsApp (Meta Platforms) — when you choose to contact us there.
• The captain and crew, transfer companies, licensed dive centres and marinas — only the details they need to deliver your charter.
• Public authorities such as the port authority, coast guard or tax office, when the law requires it.

6. Transfers abroad

Some of our service providers are located outside Turkey and the European Economic Area, mainly in the United States. We transfer data to them only in line with Article 9 of KVKK (for example under standard contracts notified to the Personal Data Protection Authority, or with your explicit consent where required) and, under the GDPR, on the basis of the European Commission's standard contractual clauses.

7. How long we keep it

• Enquiries that do not lead to a booking: up to 2 years after our last contact.
• Booking, contract and accounting records: 10 years, as required by Turkish commercial and tax law.
• Guest list with passport details: deleted automatically 30 days after the end of the charter.
• Voyage evaluations: up to 3 years, after which they are anonymised.
• Security logs: only for the short period kept by our hosting provider.

8. Your rights

Under Article 11 of KVKK you may ask whether we process your data; request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Turkey or abroad to whom it is transferred; ask for incomplete or inaccurate data to be corrected; ask for it to be deleted or destroyed under Article 7 and for those third parties to be notified; object to a result against you arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent at any time.

To exercise your rights, write to info@dodoyachting.com. We reply within 30 days at the latest. You may also complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) or to the data protection authority in your EU country.

9. Security

Our website is served over an encrypted connection, our forms are protected against automated abuse, and access to your data is limited to the people who need it to serve you.

10. Changes

We may update this notice. The date at the top always shows the latest version.