Privacy Notice

Last updated: 4 November 2026

1. Who we are

Megis Concierge is based in Istanbul, Türkiye. For the purposes of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and, where it applies, the EU General Data Protection Regulation ("GDPR"), we are the data controller (veri sorumlusu) for the personal data described here.

2. What we collect

What you send us: your name, email address, country of residence, the services you are interested in, dates, number of guests, places, and anything you write in your message or emails.
What we need to deliver a request: depending on the service, passport details, flight details, dietary needs, accessibility needs and the names of the people travelling with you. We ask for these only when they are needed, and only for that request.
Technical data: when you visit the website, your browser sends your IP address and basic device information to the servers that deliver the site, its fonts and its scripts (see section 8).

We do not ask for special categories of personal data unless a request requires it (for example, a health condition relevant to travel). In that case we ask for your explicit consent first.

3. Why we use it, and on what basis

PurposeLegal basis

Replying to your request and preparing a quoteSteps prior to a contract (KVKK art. 5/2(c); GDPR art. 6(1)(b))

Booking and delivering the services you confirmPerformance of a contract (KVKK art. 5/2(c); GDPR art. 6(1)(b))

Invoicing, accounting and legal obligationsLegal obligation (KVKK art. 5/2(ç); GDPR art. 6(1)(c))

Keeping the website secure and workingLegitimate interest (KVKK art. 5/2(f); GDPR art. 6(1)(f))

Health or other special-category data needed for a requestYour explicit consent (KVKK art. 6; GDPR art. 9(2)(a))

We do not sell personal data and we do not use it for advertising profiles.

5. Transfers outside Türkiye

Some requests are delivered outside Türkiye, for example a hotel in Dubai or a car in London, and some of our service providers store data abroad. Such transfers are made under KVKK article 9 and, where the GDPR applies, under its Chapter V, using the safeguards those rules provide (such as standard contractual clauses) or, where required, your explicit consent.

6. How long we keep it

Requests that do not lead to a booking: only for as long as needed to answer them and follow up. Booking and invoicing records: as long as Turkish commercial and tax law requires. Private client preferences: for as long as you remain a private client, and deleted on request. After these periods, data is deleted, destroyed or anonymised.

7. Your rights

Under KVKK article 11 and, where it applies, GDPR articles 15 to 22, you may ask us:

whether we process your personal data, and for what purpose;
for a copy of it, and to whom it has been disclosed in Türkiye or abroad;
to correct it if it is incomplete or wrong;
to delete or destroy it, and to tell those we shared it with;
to restrict or object to its use, and, under the GDPR, to receive it in a portable format;
to withdraw consent at any time, without affecting earlier use;
for compensation if you suffer damage from unlawful processing.

Write to info@megisconcierge.com. We reply within 30 days. You may also complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) in Türkiye or, if you are in the EU, to your local data protection authority.

8. Cookies and similar technologies

This website does not use advertising cookies. When you first visit, a banner asks whether you accept analytics cookies; nothing that identifies your browser is stored for analytics until you accept. You can change your choice at any time with Cookie settings at the bottom of every page.

Always on (needed for the site to work)

NameWhat it does

megis-perde (session storage)Remembers that the opening animation has played, so it does not repeat during the same visit. Cleared when you close the tab.

megis-dil (local storage)Remembers your language, if you choose one.

blakfy_consent (cookie)Remembers whether you accepted or declined analytics, so the banner does not ask again on every page. Kept for up to 12 months.

blakfy_a11y_prefs (local storage)Remembers accessibility settings you choose, such as larger text or reduced motion. Only set if you use them.

Only with your consent (analytics)

ToolWhat it does

Google Analytics 4 (Google)Counts visits and shows which pages are used. Before you accept, Google receives only a cookieless signal without analytics cookies (Google Consent Mode); after you accept, it sets its _ga cookies.

Microsoft Clarity (Microsoft)Shows how pages are used (clicks, scrolling, anonymised session replays) so we can improve them. Form contents are masked.

Ahrefs Web Analytics (Ahrefs)Privacy-focused visit statistics.

Yandex Metrica (Yandex)Visit statistics, click maps and session replays.

These providers may process data outside Türkiye (see section 5), under their own privacy policies.

The Grand Prix page can show an official film hosted on YouTube. It uses YouTube's privacy-enhanced mode (youtube-nocookie.com), and nothing is loaded from YouTube until you press play. Once you do, YouTube (Google) receives your IP address and may set its own cookies under its own privacy policy.

To display the site, your browser also loads fonts from Google Fonts and scripts from the jsDelivr network (including the cookie banner and accessibility tools). Those providers receive your IP address as part of that request; they do not set cookies.

9. KVKK disclosure (Aydınlatma Metni)

This notice is also our disclosure under KVKK article 10. The data controller, the purposes, the recipients, the method and legal basis of collection, and your rights are set out in sections 1 to 7 above. Personal data is collected electronically through this website and by email, and in person or by other channels when a request is delivered.

10. Contact

Questions about this notice or your data: info@megisconcierge.com.