Legal

Privacy policy

7 Wonders Travel respects your right to privacy, and we will do everything we can to ensure you have a trustworthy experience on 7wonderstravel.com. Here is exactly what we collect, who we pass it to, and how to ask us what we hold.

Last updated 25 October 2026 7 Wonders Travel · Paris Tur Turizm San. Tic. Ltd. Şti. · TURSAB 3876

The short version

  • A booking needs real details — name, contact details, passport number, payment card, and any health, dietary, mobility or religious requirements you tell us about.
  • We pass those details to the hotels, guides, transfer and tour operators running your trip, and to authorities such as customs and immigration. Without that we cannot process your booking.
  • You can browse the site without telling us who you are. Analytics and advertising cookies run only if you allow them.
  • We never sell your details, and we send offers only if you ask for them.
  • Ask us what we hold, or have it corrected or deleted, free of charge, at info@7wonderstravel.com.

This summary is here to orient you. It is not the policy — the fourteen clauses below are.

01

Who we are

#

This website is owned, managed and operated by 7 Wonders Travel — Paris Tur Turizm San. Tic. Ltd. Şti.

Address
Şimşek Sokak No: 28/A, Balcova, Izmir, 35330, Turkey
Email
info@7wonderstravel.com
Telephone
+90 232 279 2876

We are the data controller for the personal information described in this policy: we decide why and how it is used. This policy is our privacy notice under the Turkish Personal Data Protection Law No. 6698 (KVKK, Article 10) and, for travellers in the EU, EEA and UK, under Articles 13 and 14 of the General Data Protection Regulation (GDPR).

You are not required to register on 7wonderstravel.com in order to use it. Reading this policy does not mean you consent to anything. Where we need your consent, we ask for it separately, and you can refuse or withdraw it without losing access to the site.

02

What we collect when you book

#

When you make a tour booking with us, 7 Wonders Travel will need to use personal information for you and for the other passengers included in your booking. That information may include:

Identity
each customer's name and address
Contact
phone number and email address
Travel
passport number, which we ask for by email once your trip is confirmed
Payment
credit or debit card details, processed through the secure payment systems of Türkiye Garanti Bankası A.Ş. and Yapı ve Kredi Bankası A.Ş.
Sensitive
health, medical, dietary, mobility, religious or other special requirements

This personal information may be passed on to other suppliers of your travel arrangements, in addition to public authorities (such as customs and immigration), and otherwise as required by law.

Health, disability and religious information

Information about your health, a disability, or religious requirements (dietary needs, for example) is a special category of personal data under KVKK Article 6 and GDPR Article 9. We ask for it only when you tell us a trip needs to accommodate something. We use it only to make those arrangements: accessible rooms and transport, meals, medication or medical needs on the road. We process it only with your explicit consent, which we ask for separately and in writing at the moment you give us the information, unless the law allows it without consent (to protect your life in an emergency, for example).

You do not have to give us this information, and you can withdraw your consent at any time. If you do, we may not be able to arrange the requirement, but it will not otherwise affect your booking.

03

Who we share your booking with

#

We may provide personal information to contractors who provide services to or for us — for example hotel owners, transfer operators and tour operators. If we cannot pass this information to the relevant suppliers, we cannot process your booking. We pass it on because doing so is necessary to perform your booking contract, and each supplier gets only the details it needs for its part of the trip.

Each supplier is responsible for how it handles your information once it has it, under the law that applies to it. The information may also be provided to public authorities such as customs or immigration, where the law requires it.

We will only pass your information on to persons responsible for your travel arrangements. This applies equally to any sensitive information that you give us, such as details of any disabilities or dietary and religious requirements. We share that information only with your explicit consent (see clause 02), and only with the suppliers who have to act on it. A hotel may need to know about a wheelchair, for example, but a guide does not need to know about a medical condition.

04

Cookies

#

You can access our home page and browse our site without disclosing your personal data, save for information collected by the cookies that we use.

Cookies are pieces of information that a website can transfer to an individual's computer hard drive for tracking site usage and user navigation, and for customising site information to further improve and enhance the user experience. Some cookies hold an identifier for your browser: Google Analytics (_ga), Google Ads (_gcl_aw) and the Meta Pixel (_fbp) do this. If you send us an enquiry while a Google Analytics or Google Ads identifier is present, we store it with the enquiry, so that we can tell which pages and adverts lead to enquiries. If the enquiry later becomes a booking, we send that identifier back to Google Analytics or Google Ads with the trip's estimated value, so the booking is counted against the visit or advert it came from — never your name, e-mail address or phone number. Clause 05 describes the other information that is recorded automatically.

Only the cookies this site cannot be served without are set on arrival. Everything else — analytics, and anything used to measure advertising — waits until you allow it, and you are asked the first time you visit. Change your answer whenever you like: , or use the Cookie settings link at the foot of any page.

The cookies we use

7wt_consent
Strictly necessary · this site · remembers your cookie choices · 6 months
_ga, _ga_*
Analytics · Google Analytics · counts visits and pages read, and tells one browser from another · 13 months
_gcl_au, _gcl_aw
Marketing · Google Ads · records that you arrived from one of our Google adverts, and whether an enquiry followed · 90 days
IDE, GCL_AW_P
Marketing · Google Ads, set on Google's own domains (doubleclick.net, google.com) · measures our adverts and lets us show them to people who have visited the site · up to 13 months
_fbp
Marketing · Meta Pixel · measures our Facebook and Instagram adverts and lets us show them to people who have visited the site · 90 days

Google Ads and the Meta Pixel also keep small notes in your browser's local storage (_gcl_ls, lastExternalReferrer) for the same purposes. They are covered by the same Marketing choice.

Most internet browsers are preset to accept cookies. If you prefer not to receive cookies, you can also adjust your browser to refuse them or to warn you when they are being used — though this may preclude your use of certain parts of this website, and you may not be able to enjoy all the functionality the site has to offer.

For more about how cookies work and how to disable them, see allaboutcookies.org/manage-cookies.

05

What you give us through the website

#

What we collect depends on how you interact with the 7 Wonders Travel website. When you submit an enquiry, we will usually collect details such as your name, email address, personal interests and needs. Some of this is essential for us to identify accurately who is using the service so that we can respond to your request, and is therefore marked as mandatory. Mandatory fields are clearly identified and denoted by an asterisk (*); you will also be prompted on submitting a form if mandatory data is missing.

Our three forms ask for the following:

  • Contact form: your name, email address, phone number if you give it, and your message.
  • Trip quote and tailor-made forms: your name, nationality, email address and phone number; the number of adults and the ages of any children travelling; travel dates, arrival and departure points, budget, hotel standard and destinations; anything you write in the notes; and whether you would like offers from us.

Anything you write in a free-text box is up to you. Please do not include passport, card or health details there. We will ask for those separately if your trip goes ahead.

What is recorded automatically

  • With every enquiry: the date and time, the browser and device description your browser sends (its “user agent”), and the Google Analytics or Google Ads identifiers described in clause 04, where they are present.
  • Spam protection: our forms use Google reCAPTCHA, which collects information about your device and how you use the page (such as your IP address and mouse movements) and sends it to Google, to check that a person rather than a bot is sending the form.
  • Server logs: like any website, our server records technical details of each request, including your IP address, the page asked for and your browser, for security and to diagnose faults.
  • Emails from us: the emails we send through Mailjet carry a small tracking image. When it loads, Mailjet records that the email was opened, when, and the IP address, approximate country and email program that opened it. This lets us know whether our replies are reaching you. Most email programs let you block remote images, which stops this.
06

Who processes it, and where

#

Your information is handled by our own team in İzmir. We never sell it, and we never pass it to anyone for their own marketing. Apart from the travel suppliers and authorities in clause 03, the only other companies that handle it are the service providers below. They act only on our instructions and only for the purpose stated:

Hostinger
hosts this website and the database our enquiries are stored in
Google
Google Analytics and Tag Manager (site statistics, only with your cookie consent), Google Ads (measuring our adverts and showing them to past visitors, only with your cookie consent), reCAPTCHA (spam protection), and Google Sheets (only to pass a booking that came from one of our adverts back to Google Ads). Google processes data in the United States and other countries.
Mailjet
sends our emails and records whether they were opened. Mailjet stores data in the European Union.
Meta
the Meta Pixel (measuring Facebook and Instagram adverts, only with your cookie consent). Meta processes data in the United States and other countries.
WhatsApp
if you choose to message us on WhatsApp, your phone number and messages pass through WhatsApp (part of Meta), which handles them under its own privacy policy as well as ours
Banks
Türkiye Garanti Bankası A.Ş. and Yapı ve Kredi Bankası A.Ş. process card payments for bookings

Transfers outside Turkey

Some of these providers, and the hotels and operators running a trip outside Turkey, are in countries without a decision from the Turkish Personal Data Protection Board that they protect data adequately. We transfer information to them only on one of the grounds KVKK Article 9 allows:

  • For service providers: the standard contract issued by the Turkish Personal Data Protection Board (and, for information covered by the GDPR, the European Commission's standard contractual clauses).
  • For suppliers of your trip abroad: because the transfer is necessary to perform your booking. A hotel in Greece cannot hold a room for you without your name.

You can ask us for a copy of the safeguards that apply to your information, using the contact details in clause 11.

07

Why we process it

#

We use personal information only for the purposes below. Each purpose relies on one of the legal grounds in KVKK Articles 5 and 6 and GDPR Articles 6 and 9:

Answering an enquiry
replying to you and preparing a quote or itinerary. Ground: steps you ask us to take before entering a contract (KVKK 5(2)(c); GDPR 6(1)(b)).
Running your booking
reserving services with suppliers, taking payment, and looking after you during the trip. Ground: performing our contract with you (KVKK 5(2)(c); GDPR 6(1)(b)).
Legal duties
invoices, accounting and tax records, and records and passenger information that tourism, customs or immigration rules require. Ground: legal obligation (KVKK 5(2)(ç); GDPR 6(1)(c)).
Security & claims
keeping the site and our forms free of spam and abuse, checking whether our emails reach you, and establishing or defending legal claims. Ground: our legitimate interests, and establishing or defending a right (KVKK 5(2)(e), 5(2)(f); GDPR 6(1)(f)).
Analytics & adverts
understanding which pages and adverts bring enquiries, and showing our adverts to past visitors (Google Analytics, Google Ads, Meta Pixel). Ground: your consent, given through the cookie settings (KVKK 5(1); GDPR 6(1)(a)).
Offers & inspiration
sending you travel ideas and offers by email. Ground: your consent, given by ticking the box on our forms (KVKK 5(1); GDPR 6(1)(a)). We send nothing promotional if you have not ticked it.
Health, disability, religion
arranging the requirements you tell us about. Ground: your explicit consent (KVKK 6; GDPR 9(2)(a)). See clause 02.

Where we rely on consent, you can withdraw it at any time: through the cookie settings, the unsubscribe link in any email, or by writing to us. Where we rely on legitimate interests, you can object (see clause 11).

We will only record your email address if you send us a message or otherwise disclose it to us.

08

How long we keep it

#

We keep personal information only for as long as we need it for the purpose we collected it for, or for as long as the law requires. After that, we delete, destroy or anonymise it, as our personal data retention and destruction policy requires.

Enquiries
an enquiry that does not become a booking: 2 years from our last contact with you
Bookings
booking, payment and invoice records: 10 years from the end of the year of travel, as Turkish commercial and tax law requires
Sensitive
health, disability and religious information: deleted 6 months after your trip ends, unless we need it for a complaint or legal claim about the trip
Offers
your email address for offers: until you unsubscribe. After that, we keep only a record that you opted out, so that we do not email you again.
Email opens
Mailjet open records: 2 years
Cookies
for the durations in the table in clause 04

We may keep information for longer if it is needed to establish, exercise or defend a legal claim, but only until that matter is resolved.

09

If the business is sold, and legal requests

#

If all or part of our business is sold, merged or transferred, including in an insolvency, your information may pass to the new owner. They may use it only for the purposes in this policy, and we, or they, will tell you about the change.

We give personal information to courts, the police, tax offices and other public authorities only when the law requires us to, and we check that each request has a legal basis before we answer it.

10

How we keep it secure

#

We have implemented security policies, rules and technical measures to protect the personal data under our control from unauthorised access, improper use and disclosure, unauthorised destruction and accidental loss. The website is served only over an encrypted (HTTPS) connection, and only staff who need your information to arrange your trip can see it.

The service providers in clause 06 handle your information under written contracts that oblige them to keep it secure and use it only on our instructions.

If a breach of security puts your personal information at risk, we will notify the Turkish Personal Data Protection Board within 72 hours of finding out, and tell you as soon as reasonably possible, as KVKK Article 12 and the GDPR require.

11

Your rights over your information

#

Under the Turkish Personal Data Protection Law No. 6698 (KVKK, Article 11) and, where it applies to you, the EU or UK General Data Protection Regulation, you have the right to:

Know
learn whether we process personal data about you, why, and whether it is being used for that purpose
Access
receive a copy of the personal data we hold about you
Recipients
know the third parties, in Turkey or abroad, to whom it has been transferred
Correct
have incomplete or inaccurate data corrected
Erase
have it deleted or anonymised once the reason for keeping it has gone, unless the law requires us to keep it (booking and invoice records, for example)
Notify
have any correction or deletion passed on to the third parties we shared the data with
Restrict & object
limit how we use it, or object to processing based on our legitimate interests, including all direct marketing
Portability
receive the data you gave us in a machine-readable format, or have it sent to another company
Automated decisions
object to a result that goes against you and comes solely from automated analysis. We make no such decisions today.
Withdraw consent
withdraw any consent you have given, at any time. This does not affect processing that took place before you withdrew it.
Compensation
claim compensation if unlawful processing causes you damage

How to make a request

Email info@7wonderstravel.com from the address you used with us, or write to us at the postal address in clause 01. Tell us which right you are exercising and include enough detail for us to find your records (your name and, if you have one, your booking or enquiry reference).

Making a request is free of charge. We will reply as soon as possible and within 30 days of receiving it. If we need to confirm your identity, we will ask only for what is necessary, and we will use it for nothing else.

If you are not satisfied

You can complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr). Under KVKK, you need to have applied to us first and either been refused, received an answer you find inadequate, or had no answer within 30 days. If you live in the EU, EEA or UK, you can also complain to the data protection authority where you live or work, at any time.

12

Children

#

Our enquiry forms and bookings are for adults. If you are under 18, please ask a parent or guardian to contact us for you.

Many of our trips include children. When they do, the adult making the enquiry or booking gives us the children's details: their ages on our forms and, once a trip is booked, the passport and any special-requirement details the suppliers need. By giving them to us, that adult confirms they are the child's parent or guardian, or are acting with the parent's or guardian's agreement. We use children's details only to arrange the trip, and never for marketing.

13

Offers, and how to unsubscribe

#

We send travel ideas and offers only if you have asked for them, by ticking the box on one of our forms. Replying to your enquiry, and sending you what your booking needs, are not offers. You will receive those messages whichever box you tick.

You can stop receiving offers at any time, free of charge. Use the unsubscribe link at the foot of any offer email, or email info@7wonderstravel.com with “unsubscribe” in the subject line.

Unsubscribing stops offers only. It does not delete your enquiry or booking. To have your information deleted, or to object to how we use it, use your rights in clause 11.