Privacy
Who is responsible
Kaan Ugan, trading as TWELVEBAYS CREW, Altıntaş Mah. Manolya Sk. No: 21, 48770 Dalaman / Muğla, Türkiye. Tax office Dalaman, tax number 8850576633. Contact: info@twelvebays.com, +90 536 287 55 41. Under the Turkish Personal Data Protection Law (KVKK No. 6698) this is the data controller (veri sorumlusu).
What we collect
We only collect what you send us through the request form or on WhatsApp:
- Your name and your role onboard
- Yacht name, marina and berth number
- Phone or WhatsApp number
- The service you selected and the details of your request
- Any file you upload (list, photo, PDF or spreadsheet)
Why we use it
Only to handle your request: to confirm availability, timing and estimated cost, and to deliver or arrange what you asked for. We do not use your details for advertising and we do not sell them.
How we obtain and process data
We obtain data directly from you when you submit a form, contact us by phone, email or WhatsApp, send a file, approve a quotation or receive a service. Data may be collected automatically through essential server security records when you access the website. We use automated and non-automated methods only to manage requests, communication, payment coordination, delivery, records and legal compliance.
Legal basis
We process your data because it is necessary to enter into and perform the service you asked for (KVKK Art. 5/2-c), to meet legal obligations such as bookkeeping (Art. 5/2-a and 5/2-ç) and otherwise on the basis of our legitimate interest in running the service (Art. 5/2-f). We do not ask for special categories of personal data — please do not send them.
Uploads
Please do not upload passports, payment cards or other sensitive documents. Uploaded files are used solely to process your request. [PLACEHOLDER — storage provider and retention period once file storage is connected.]
Who else sees it
Service providers we need in order to complete your request, for example a laundry service, a shop or a restaurant, receive only the information required for that task. [PLACEHOLDER — hosting provider, email provider and any other processors.]
International transfers
Some technology providers may operate infrastructure outside Türkiye. Any transfer abroad must rely on a lawful mechanism under Article 9 KVKK, such as an adequacy decision, an approved appropriate safeguard or a permitted exceptional situation. [PLACEHOLDER — confirm the countries, Vercel/hosting, Resend/email, WhatsApp/Meta, payment provider and the transfer mechanism used before launch.]
Payment information
Payments are processed through the payment provider's secure page. We do not ask you to send full card details through this website, email or WhatsApp and do not intend to store full card data. [PLACEHOLDER — confirm iyzico legal entity, data flow and its privacy notice.]
Security
We apply proportionate administrative and technical safeguards intended to prevent unlawful processing or access and to protect stored data, including access limitation, secure transmission, service-provider review and deletion controls. No internet transmission is completely risk-free. If a personal-data breach requires notice, we will notify affected persons and the Turkish Personal Data Protection Authority as required by KVKK.
How long we keep it
We keep request and communication data only as long as necessary for the service, disputes and applicable tax, accounting or other statutory duties, then delete, destroy or anonymise it under KVKK Article 7. [PLACEHOLDER — insert the retention schedule for enquiries, completed requests, invoices, email, WhatsApp records and uploads.]
Your rights
Under Article 11 of the KVKK you may ask whether your data is processed, request information about it, ask for correction, deletion or destruction, learn to whom it was transferred, object to a result produced solely by automated analysis and claim compensation for damage caused by unlawful processing. Send your request in writing to info@twelvebays.com or to the address above. We answer within 30 days, as set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
Cookies
This website does not use tracking or advertising cookies. [PLACEHOLDER — update if analytics are added later.]
Children and third-party information
The service is intended for adult crew members and authorised representatives. Do not send personal data about children or another person unless it is genuinely needed for the request and you are authorised to provide it. Do not include passports, health records or other sensitive details in free-text fields.
Changes and contact
We may update this notice when our processing or providers change. The version displayed when data is collected applies to that processing. Questions and KVKK requests can be sent to info@twelvebays.com; identity may need to be verified before information is disclosed.