Effective date: 20.08.2026 · Version: 2.0
This Privacy Policy explains how your personal data is handled when you
visit TexHoliday (https://texholiday.com/). It is written to meet both Turkish
Personal Data Protection Law no. 6698 (“KVKK”) and the EU General Data
Protection Regulation (“GDPR”), because this site publishes in several
languages and receives visitors from the European Union. If you are in the
EU, your additional GDPR rights are set out in sections 10 and 12.
This is an English translation. In case of any conflict, the Turkish text
prevails.
1. Who we are — the data controller
TRAVEL EXPERIENCE WORLD TOURISM AGENCY
TÜRSAB licence no.: 18566
Address: Etiler, 829. Sk. A Plaza No:3 Kat:3 D:25, Muratpaşa / Antalya / Türkiye
Phone: +90 242 606 25 39
E-mail: ota@texgroup.com.tr
TRAVEL EXPERIENCE WORLD TOURISM AGENCY is a travel agency registered with the Association of Turkish
Travel Agencies (TÜRSAB) and acts as the data controller for the processing
described here.
Data protection contact: ota@texgroup.com.tr
2. Scope
This policy covers this website only.
Booking and payment do not happen here. When you follow a
“Find hotels” or “Search hotels” link you move to the booking engine at
booking.texholiday.com. Search, room selection, guest details and
payment are completed there. Card details are never entered on, processed by,
or stored on this website.
The booking engine runs on infrastructure provided by LiteAPI / Nuitee.
Data that hotels themselves process, and anything asked of you during your
stay, is the responsibility of the property concerned.
3. What we collect and how
| Category | Content | How collected |
|---|---|---|
| Technical / security data | IP address, browser and device information, operating system, pages viewed, time of visit, referring address, server logs | Automatically as you browse |
| Preference data | Your chosen language and currency, your cookie choice | Through cookies, from your own selection |
| Identity and contact data | Full name, e-mail address, phone number | If you complete the partnership form |
| Professional / promotional data | Instagram, TikTok, YouTube accounts, your website, total follower count, where your audience is based, your message | If you complete the partnership form |
| Correspondence | Requests and messages you send us by e-mail or phone | Directly from you |
We do not collect special category data. We do not ask for
health, religion, ethnicity, biometric or similar information through this
website; please do not enter such details into our forms.
4. Purposes and legal bases
| Purpose | KVKK basis (Art. 5) | GDPR basis (Art. 6) |
|---|---|---|
| Operating and securing the site, preventing abuse, error logs | Legitimate interest — 5/2-f | Legitimate interest — 6(1)(f) |
| Remembering your language and currency | Legitimate interest — 5/2-f | Legitimate interest — 6(1)(f) |
| Usage measurement and analytics | Explicit consent — 5/1 (cookie notice) | Consent — 6(1)(a) |
| Assessing partnership applications and replying to you | Directly related to a contract — 5/2-c | Pre-contractual steps — 6(1)(b) |
| Handling requests and complaints | Legitimate interest — 5/2-f | Legitimate interest — 6(1)(f) |
| Meeting legal obligations, answering official requests | Legal obligation — 5/2-ç | Legal obligation — 6(1)(c) |
| Establishing, exercising or defending legal claims | Establishment/protection of a right — 5/2-e | Legitimate interest — 6(1)(f) |
5. Cookies and similar technologies
No non-essential cookie runs before you consent in the cookie notice. You
can change your choice at any time by reopening the notice or through your
browser settings.
| Cookie | Set by | Type | Purpose |
|---|---|---|---|
| texholiday_lang | This site | Essential / functional | Remembers your language; without it the language resets on every visit |
| texholiday_currency | This site | Essential / functional | Remembers your currency |
| pll_language | Polylang | Essential / functional | Determines which language the page is served in |
| wpconsent_* | WPConsent | Essential | Stores your cookie choice; it is the record of consent itself |
| _ga, _ga_* | Google Analytics | Statistics — consent based | Usage statistics; written only if you consent |
| wordpress_*, wp-settings-* | WordPress | Essential | Session handling for signed-in administrators only |
An up-to-date, automatically scanned cookie list is on the
Cookie Policy page. This site uses no advertising or retargeting
pixels.
6. Who we share data with
We do not sell your personal data. We share it only with the following,
and only for the purposes above:
- Hostinger — hosting provider (processor).
- LiteAPI / Nuitee — provider of the search and hotel list
components and of the booking engine. - Google Ireland Limited — measurement (Google Analytics),
only if you have given cookie consent. - Competent public authorities — where the law requires it,
limited to what is requested. - Our legal and financial advisers — where a dispute or
legal obligation arises.
7. International transfers
Some of the providers above run servers outside Türkiye, so your data may
be transferred abroad under Article 9 of the KVKK and Chapter V of the
GDPR.
Transfers are made on the safeguards set out in Article 9 of the KVKK: an adequacy decision where the Board has issued one for the destination country, and otherwise a standard contract, an undertaking or Board authorisation. You may ask which safeguard applies to a given recipient at ota@texgroup.com.tr.
For transfers outside the European Economic Area, where no adequacy
decision applies, the European Commission’s Standard Contractual Clauses
(SCCs) are used. You may request a copy at ota@texgroup.com.tr.
8. Retention
| Data | Retention period |
|---|---|
| Server and security logs | 12 months |
| Cookie consent record | For the life of the cookie (max. 12 months) |
| Partnership applications — not accepted | 6 months |
| Partnership applications — leading to a partnership | For the duration of the relationship plus 10 years |
| Correspondence | 2 years |
| Records subject to a statutory retention duty | The period required by law |
Once the period expires, data is deleted, destroyed or irreversibly
anonymised.
9. Security
The site is served entirely over HTTPS, so traffic between your browser and
our server is encrypted. Access to the administration area is limited to
authorised people. Because payment data is never processed on this website,
there is no payment-data exposure here. Even so, no transmission over the
internet is 100% secure; we apply reasonable technical and organisational
measures to protect your data.
10. Your rights
Under Article 11 of the KVKK (everyone)
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose and whether the data is used accordingly,
- Know the third parties to whom it is transferred, in Türkiye or abroad,
- Request correction if it is incomplete or inaccurate,
- Request erasure or destruction under Article 7,
- Request that correction, erasure or destruction be notified to third
parties, - Object to an adverse outcome produced solely by automated analysis,
- Claim compensation for damage caused by unlawful processing.
Additional GDPR rights (if you are in the EU)
- Access (Art. 15) — obtain a copy of your data,
- Rectification (Art. 16),
- Erasure / right to be forgotten (Art. 17),
- Restriction of processing (Art. 18),
- Data portability (Art. 20) — receive your data in a
structured, commonly used, machine-readable format, - Objection (Art. 21) — object to processing based on
legitimate interest, - Withdrawal of consent (Art. 7(3)) — withdrawal does not
affect the lawfulness of processing before it.
11. How to exercise your rights
You may send your request in line with the Turkish Communiqué on
Application Procedures to a Data Controller by:
- A signed written request, in person or via a notary: Etiler, 829. Sk. A Plaza No:3 Kat:3 D:25, Muratpaşa / Antalya / Türkiye
- The e-mail address registered in our system: ota@texgroup.com.tr
We answer within thirty days at the latest (for GDPR
requests, within one month, extendable by two months for
complex requests, in which case we tell you). We may ask for further
information to verify your identity. Where a request incurs a cost, the fee
set by the Turkish Personal Data Protection Board’s tariff may apply.
12. Right to complain
If your request is refused, our answer is inadequate, or we do not reply in
time, you may complain to the Turkish Personal Data Protection
Board (KVKK Art. 14).
If you are in the EU, you also have the right to lodge a complaint with the
data protection supervisory authority of your country
(GDPR Art. 77).
13. Children
This website is not directed at children and we do not knowingly collect
personal data from them. If we learn that we hold a child’s data without
proper consent, we delete it. You can report such a case to ota@texgroup.com.tr.
14. Automated decision-making and profiling
This website does not carry out automated decision-making or profiling that
produces legal effects concerning you or similarly significantly affects
you.
15. Changes to this policy
We may update this policy as the law or our services change. The current
version is always published on this page, with the effective date and version
number at the top updated. We will give notice of significant changes.
16. Contact
TRAVEL EXPERIENCE WORLD TOURISM AGENCY
Etiler, 829. Sk. A Plaza No:3 Kat:3 D:25, Muratpaşa / Antalya / Türkiye
+90 242 606 25 39 · ota@texgroup.com.tr