Data Protection Notice (KVKK)

Under Law No. 6698 on the Protection of Personal Data (KVKK) · Last updated: 04.06.2026

1. Data Controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by our company, whose details are given below, in its capacity as data controller.

Title:

VİBECORE TURİZM SEYAHAT ACENTASI VE DİJİTAL HİZMETLER TİCARET LİMİTED ŞİRKETİ

Address:

Beldibi Mah. Belmar Sk. No:9/1 İç Kapı No:4, Marmaris / Muğla / Türkiye

Tax Office: Marmaris Tax Office

Tax Number: 9251328389

Email: support@vibeguideapp.com

Phone: +90 530 828 76 96

2. Personal Data Processed

Depending on how you use our platform, the following personal data may be processed.

Identity Information

First name
Surname

Contact Information

Email address
Phone number

Account and Profile Information

User ID
Profile preferences
Language selection
Profile photo (if any)

Guide and Service-Provider Verification Information

If you apply as a guide or service provider:

Tourist guide badge (kokart)
Guide license
TÜREB or relevant professional registration details
TÜRSAB membership or partnership details (if any)
Tax details
Invoice details
IBAN details
Application and verification documents

may be processed solely for the purposes of carrying out verification processes, ensuring regulatory compliance, executing payment transactions, and protecting platform security.

Booking and Transaction Information

Booking records
Tour history
Participation information
Tour preferences
Reviews and ratings
Cancellation and refund records
Support requests
Service-usage records

Location Information

Where the user has given explicit consent, location data may be processed for:

Showing nearby guides
Matching guides and travellers
Determining meeting points
Providing live-location-based services
Carrying out booking processes

Location sharing can always be managed by the user via device settings or app permissions.

Technical and Usage Data

IP address
Device information
Operating system information
Browser information
Cookie data
App-usage records
Error logs
Performance logs
Security logs

Notification Data

Device notification identifiers may be processed to provide push-notification services.

Notifications may be sent for:

Booking updates
Match notifications
Security alerts
Service announcements

Important Note: Your payment card details are not stored by VibeGuide. All payment transactions are carried out by licensed payment institutions in accordance with the relevant legislation.

3. Method of Collecting Personal Data

Your personal data may be collected electronically or physically through the following methods:

Mobile app
Website
User registration forms
Guide application forms
Booking transactions
Cookies and similar technologies
Customer support requests
Email and communication channels
Push-notification systems
Records created under legal obligations

4. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

Carrying out membership and account management
Performing identity verification
Providing tourism, guiding, and booking services
Matching guides and travellers
Operating VibeNow, VibeSquad, and Private Tour services
Managing booking processes
Carrying out payment and accounting transactions
Performing invoicing processes
Providing customer support services
Improving service quality
Ensuring platform security
Preventing fraud and abuse
Fulfilling legal obligations
Performing statistical analyses
Carrying out marketing and information activities where explicit consent exists

5. Legal Grounds for Processing Personal Data

Your personal data is processed under Article 5 of the KVKK based on the following legal grounds:

Being directly related to the establishment or performance of a contract,
The data controller fulfilling a legal obligation,
The establishment, exercise, or protection of a right,
The legitimate interests of the data controller,
Being expressly provided for by law,
The existence of your explicit consent.

6. Transfer of Personal Data

Your personal data may be shared with the following parties only to the extent necessary to provide the service:

The guide or service provider you are matched with
Licensed payment institutions
Accounting and finance service providers
Technical infrastructure providers
Cloud service providers
Authorized public institutions and bodies
Courts and legal authorities

Transfers are carried out in accordance with the relevant legislation and only to the extent necessary.

7. Transfer of Data Abroad

The technical infrastructures, authentication services, notification systems, data-storage services, and cloud service providers' servers used to operate our platform may be located abroad.

In this context, your personal data may be processed or stored on servers located abroad through:

Google Firebase
Google Cloud Platform
Apple services
Notification and analytics services
Similar technical infrastructure providers

These operations are carried out in accordance with Article 9 of the KVKK and the relevant legislation.

8. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to:

Learn whether your data is processed,
Request information if it has been processed,
Learn the purpose of processing,
Learn whether the data is used in accordance with its purpose,
Learn the third parties to whom the data has been transferred,
Request correction of incomplete or inaccurate data,
Request deletion or destruction of the data,
Request that these operations be notified to third parties,
Object to results arising from automated systems,
Claim compensation if you suffer damage due to unlawful processing.

9. Right of Application

You may submit your requests under the KVKK through the following contact address:

Email: support@vibeguideapp.com

Your applications are assessed and concluded within at most 30 days in accordance with the provisions of the relevant legislation.

10. Data Security and Retention Periods

Our company applies appropriate technical and administrative measures to protect personal data.

In this context, measures such as the following are used:

SSL/TLS encryption technologies
Authorization systems
Access-control mechanisms
Security-monitoring processes
Regular software updates
Security tests and audits

Your personal data is retained for the period required by the purpose of processing and for the statutory retention periods stipulated in the relevant legislation.

Tax, accounting, and commercial records may be retained for the periods stipulated in the relevant legislation.

When the retention period expires, personal data is deleted, destroyed, or anonymized.