Data controller
Cen Medya Limited Şirketi is the controller under Turkish Law No. 6698 on the Protection of Personal Data. Contact: Adile Naşit Blv. No:1/1 CityCenter Home Office Ofis: 111, Esenyurt / İstanbul. E-posta: [email protected] · Telefon: 0850 532 0052. This notice covers guide, membership and contact operations on both project domains. Updated: 8 October 2026.
Data and collection methods
Registration provides a display name, email and password hash. Account operations generate verification records and a dated copy of the accepted agreement. Account use creates saved places, likes, private lists, personal itineraries and notes. Contact forms collect name, email, subject and message. Technical infrastructure may record IP address, request time, browser/client information and security logs. Data is collected electronically through the website, forms, email and communication channels you choose. We do not request identity documents, payment information or special-category data; do not include them in free-text fields.
Purposes and legal grounds
Registration, verification, password recovery and storage of personal lists and itineraries relate directly to establishing or performing a contract (Article 5/2-c). Responding to enquiries, protecting the service, preventing abuse and evaluating operation rely on legitimate interests without prejudice to fundamental rights (5/2-f); contractual requests may also fall under 5/2-c. Legal obligations fall under 5/2-ç; establishing, exercising or protecting rights under 5/2-e. Optional processing without another legal basis requires separate, specific and revocable consent. Acceptance of the membership agreement does not replace it.
Recipients and providers
Authorized company personnel and hosting, security, storage and email providers may access data as needed for their duties. The infrastructure uses Cloudflare/R2, account email uses Zoho CPaaS and maps use Google Maps. Public authorities and legal advisers receive information only as required for the relevant obligation or request. Opening a map may disclose connection details to its provider. Following a WhatsApp link brings that provider's conditions into play; use of this channel is optional.
International infrastructure
Providers' international infrastructure may involve transfers abroad of technical connection details, email information and files supplied to those services. Such transfers must satisfy an applicable condition under Article 9. This notice does not assert that a specific standard contract has been signed or an adequacy decision applies. Membership acceptance is not unrestricted permission to transfer data abroad. Contact the Company for information about recipients and the safeguards applicable to your data.
Retention and security
Data is processed for the period required by the service, request and applicable legal obligations. Retention grounds are assessed when an account closes, a purpose ends or deletion is requested. Deletion, destruction or anonymization rules apply when processing conditions cease. Passwords are not stored in plain text; access controls, verification links and request-security measures are used. Removal from live systems and backups must take relevant legal obligations into account.
Your rights and requests
Article 11 allows you to learn whether data is processed, request information, learn its purpose and appropriate use, identify domestic or foreign recipients, request correction and lawful deletion or destruction, request notification of these changes to recipients, object to adverse results from exclusively automated analysis and seek compensation for unlawful processing. Write to the company address or email [email protected] from an address previously supplied and registered in our system. Include your name, contact details and a clear request; a secure verification method will be explained if necessary. Requests are answered as soon as possible and within 30 days. Statutory complaint and other remedies remain available.