Privacy & Security

Shadow Transfer applies all necessary administrative and technical measures to maintain the confidentiality of customers' personal information at the highest level. The customer information transmitted to us through our reservation system is never used for commercial purposes under any circumstances; it is not sold or rented to third parties; and may not become the subject of any advertising or marketing material.

Identity and contact details belonging to our customers are never transferred or disclosed to third parties without express consent. Information sharing is carried out only when a request is made by official authorities (police, court, prosecutor's office, etc.) in legally proper form, to the extent required by legislation, or with the explicit consent of the user themselves.

Visitor behaviour on our website is regularly analysed for the purpose of continuously improving our services and content. These analyses use anonymous and aggregated data; no personally identifiable information is accessed and no individual visitor profiling is carried out.

IP addresses, which are unique to each device, are used to enable users to be recognised by the system on the internet. Shadow Transfer uses IP addresses for reporting reservation activity, detecting and preventing fraud attempts and ensuring secure payment processing. The personal information of our customers cannot be updated outside our reservation system or modified through third-party channels.

Our website operates with industry-standard 256-bit SSL/TLS encryption to protect credit card details and personal data. Our certificates are kept up to date at all times and comply with modern security standards (TLS 1.2 and above). All data traffic between your browser and our servers is therefore transmitted in encrypted form and cannot be viewed by third parties.

Shadow Transfer operates in full compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK) in force in Turkey and with the European Union General Data Protection Regulation (GDPR). All personal data collected is processed solely on the basis of explicit consent and only for the stated purposes — completion of the reservation, communication, performance of the service and fulfilment of legal obligations.

Our website uses cookie technology to improve user experience, remember your language and currency preferences and analyse site performance. You may manage, delete or completely block cookies through your browser settings. However, if you disable cookies, certain functions of the site (language preference, reservation reminders, etc.) may operate in a limited way. We use only functional and analytical cookies; advertising or tracking cookies are not used.

Pursuant to Article 11 of KVKK and the GDPR, you have the following rights over your personal data:
• To learn whether your personal data is being processed,
• To request information about the processing if it is being processed,
• To learn the purpose of the processing and whether the data is used for that purpose,
• To learn the third parties — domestic or international — to whom your data is transferred,
• To request correction of any information you believe to be incomplete or processed incorrectly,
• To request deletion or destruction of your data ("right to be forgotten"),
• To request that correction or deletion be notified to the third parties to whom your data has been transferred,
• To object to outcomes that arise to your detriment from analysis carried out solely by automated systems,
• To claim compensation in case of damage suffered due to unlawful processing.

Data Controller: SEVEN GLOBAL SEYAHAT ACENTASI TURİZM TİCARET LİMİTED ŞİRKETİ (TÜRSAB License No: 16605)
Address: KAHVECIOĞLU PLAZA, Yukarı Hisar, Şelale Cd. NO: 53 İÇ KAPI: 7, 07600 Manavgat/Antalya
E-mail: info@shadowtransfer.com
Phone: +90 541 181 80 52

You may direct any questions regarding our privacy policy and any requests for inquiry, correction or deletion of your personal data through the contact channels above. Your requests will be evaluated and responded to within 30 days at the latest.