1. Scope

This policy explains how TEX GROUP TURİZM LİMİTED ŞİRKETİ (“TEX Group”, “we”) processes the personal data of people who visit this website, contact us, use our services, apply for a job or do business with us.

As TEX Group is established in Türkiye, the Turkish Personal Data Protection Law No. 6698 (“KVKK”) applies to all of our processing. Where we offer services to individuals in the European Economic Area (EEA) or monitor their behaviour on our website, the General Data Protection Regulation (“GDPR”) also applies. Detailed information by data subject group is provided in our KVKK Information Notice, and information about job applications in our Candidate Privacy Notice.

2. Controller

• Company name: TEX GROUP TURİZM LİMİTED ŞİRKETİ

• Address: Etiler Mahallesi 829 Sokak A Plaza No: 3 İç Kapı No: 204, Muratpaşa / Antalya, Türkiye

• MERSİS number: 0840087573800001

• Registered e-mail (KEP): texgroup@hs01.kep.tr

• Data protection requests: info@texgroup.com.tr

We have not appointed a data protection officer, as this is not required by law. You can send any questions about personal data to the addresses above.

3. What we process, why, and on what legal basis

When you contact us through the form, by e-mail or by telephone

• Data: name, work e-mail, company or property name, the business line you are interested in, your message; if you contact us by telephone or e-mail, your telephone number and the content of the correspondence.

• Purpose: responding to your request, preparing proposals, conducting pre-contractual discussions, directing the request to the relevant business line and specialist.

• Legal basis: if you write on your own behalf, steps directly related to entering into a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)); if you write on behalf of a company or property, our legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

When you use our services or do business with us

• Data: identity, contact, contract, invoicing and payment details; for travel and event services, passport, visa, transport and accommodation details to the extent the service requires.

• Purpose: entering into and performing the contract, providing the service, invoicing, accounting and legal obligations.

• Legal basis: performance of a contract if you are a party to it; our legitimate interests if you act on behalf of your company; and legal obligation (KVKK Art. 5/2-c, 5/2-f, 5/2-ç; GDPR Art. 6(1)(b), 6(1)(f), 6(1)(c)). Special categories of data such as health information are processed only with your explicit consent or under the other conditions in KVKK Art. 6 (GDPR Art. 9(2)(a)).

When you apply for a job

• Data: your CV and application details.

• Purpose: assessing your application.

• Legal basis: steps directly related to entering into a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)). Details: Candidate Privacy Notice.

When you visit the website

• Data: IP address, browser and device information, pages visited, date and time.

• Purpose: keeping the website secure and working correctly, preventing misuse.

• Legal basis: our legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

When you consent to analytics cookies

• Data: usage statistics and online identifiers.

• Purpose: improving the website and our content.

• Legal basis: your consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can withdraw your consent at any time.

In official correspondence, requests or disputes

• Data: the content of the correspondence, your identity and contact details.

• Purpose: complying with our legal obligations, concluding your request, protecting our rights.

• Legal basis: legal obligation and the establishment, exercise or defence of a right (KVKK Art. 5/2-ç and 5/2-e; GDPR Art. 6(1)(c) and 6(1)(f)).

Where we rely on legitimate interests, our interests are responding to requests quickly, managing our business relationships and keeping our website secure. You may object to this processing at any time on grounds relating to your particular situation.

4. Where we get your data

We collect most data directly from you, through the contact form, e-mail, telephone, KEP, meetings and contracts. In some cases we may obtain your business contact details from your employer, our business partners, people who refer you to us, or public sources such as company websites and professional networks. Website usage data is collected through cookies and similar technologies.

5. Do you have to give us your data

Giving us data is, as a rule, voluntary. However, if you do not complete the required fields of the contact form, we cannot respond to your request; if you do not share the information needed for a contract or service, we may not be able to enter into the contract or provide the service. Information required by law (such as invoicing details) must be provided as a legal requirement.

6. Who we share data with

• TEX Professionals specialists: to handle your request and carry out the project, where necessary, under a duty of confidentiality and a data processing agreement,

• Our service providers (processors): Framer B.V. (website hosting and form infrastructure), Google (corporate e-mail, document and spreadsheet infrastructure, Google Tag Manager, fonts and, with your consent, Google Analytics), Asana, Inc. (request and task tracking), and our accounting and legal advisers,

• Business partners needed to provide the service: for travel and event services, hotels, airlines and transfer companies, event venues, insurers and, for visa procedures, the relevant consulates; only with the information the service requires,

• Banks and payment institutions: for payments and collections,

• Authorised public authorities: courts, enforcement offices, tax offices, the Ministry of Culture and Tourism, the Personal Data Protection Authority and law enforcement; where required by law.

The fonts on this website are loaded from Google Fonts servers, which technically transmits your IP address to Google. We do not sell your personal data or share it with third parties for advertising.

7. International transfers

Some of our service providers use servers in the European Union and the United States; for travel services, data may be transferred to business partners in the country where the service takes place.

• Transfers from Türkiye: under KVKK Art. 9, to countries with an adequacy decision on that basis, and to other countries with appropriate safeguards such as the standard contracts established by the Turkish Personal Data Protection Board. Where appropriate safeguards cannot be provided, only occasional (non-regular, one-off) transfers may be made, under the conditions in KVKK Art. 9/6.

• Transfers from the EEA: rely on the European Commission’s adequacy decisions (including the EU–U.S. Data Privacy Framework) or standard contractual clauses.

You can request a copy of the safeguards we use by writing to us.

8. Retention

We keep your personal data only for as long as the purpose of processing requires and the law prescribes. Main periods: requests that do not lead to a business relationship, 2 years; contracts, invoices, proposals and business correspondence, 10 years; job applications, 1 year; analytics data, at most 14 months. When the period ends, data is deleted, destroyed or anonymised. All periods are set out in our Data Retention Policy.

9. Security

We protect your data against unauthorised access, loss and misuse with the following measures:

• Role-based access on a need-to-know basis,

• Encrypted connections (HTTPS) and strong, two-step authentication,

• Data processing and confidentiality agreements with service providers,

• Confidentiality undertakings and awareness training for staff and specialists,

• Additional restricted access and encrypted storage for special categories of data.

If a data breach occurs, we notify the Turkish Personal Data Protection Board as soon as possible and within 72 hours at the latest, and inform the affected individuals without undue delay.

10. Your rights

Under the KVKK: to learn whether your data is processed, to request information, to learn the purpose of processing and whether it is used accordingly, to know the recipients, to request correction, deletion or destruction, to have these actions notified to recipients, to object to results of automated analysis and to claim compensation.

Under the GDPR, additionally: the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

See the Data Subject Requests page for how to apply. We conclude your request within 30 days at the latest and, as a rule, free of charge. If you are not satisfied with our reply, you may complain to the Turkish Personal Data Protection Board in Türkiye or to the data protection authority of your country in the EEA.

11. Automated decisions, children and commercial messages

• We do not make decisions about you based solely on automated processing, and we do not profile you.

• This website is not directed at anyone under 18, and we do not knowingly collect data from children. For travel and event services, children’s data is processed only with the knowledge and at the request of a parent or guardian.

• We do not send promotional e-mails, text messages or similar commercial electronic messages to consumers without their consent. We may send business messages to merchants and tradespeople to the extent permitted by Law No. 6563. You can opt out at any time through the link in each message or by writing to us.

12. Data we process on behalf of other businesses

In the channel management and digital distribution services we provide to hotels and other businesses, and in other services where our contract defines us as a processor, we process their guest and employee data on behalf of and under the instructions of that business. The business is the controller of that data. You can exercise your rights regarding such data against the business concerned; if you send your request to us, we forward it to the business without delay.

13. Cookies

We explain how we use cookies and how you can manage your preferences in our Cookie Policy.

14. Changes

We may update this policy when necessary. The current version is always published on this page, and we announce significant changes on the website.

Last updated: 22 September 2026