Privacy Policy

Last updated: 2026-05-08

1. Data Controller

360TR ("we", "platform") acts as data controller under Turkish KVKK (Personal Data Protection Law) and EU GDPR where applicable. This document informs you about how we collect and process your personal data.

2. Data We Collect

Account info: Name, email, profile picture (via Google sign-in).
Usage data: Tours viewed, browsing history, likes, comments.
Technical data: IP address, browser, device type, visit times.
Payment data: Only transaction reference is stored. Card details are NOT processed by us; iyzico handles them.
Cookies: Necessary (session, security), optional (analytics, ads — subject to your consent).

3. Purposes of Processing

Account creation and management
Providing and improving the service
Legal compliance
Marketing and personalized ads (with consent)
Security and abuse prevention

4. Cookie Policy

We use the following cookie categories:

Necessary cookies: Login, security, preferences. No consent required.
Analytics cookies: Anonymous usage measurement. You may decline.
Advertising cookies: Google AdSense personalization cookies. You may decline.

5. Third-Party Services

Google AdSense: Ad display (only with cookie consent).
iyzico: Credit card payments (PCI-DSS compliant).
GetYourGuide / TripAdvisor: Affiliate widgets (location-based).
Cloudflare Turnstile: Bot and spam protection.

6. Your Rights

You have the right to:

Know whether your data is processed
Request information about processed data
Request correction or deletion
Object to processing
Know third parties to whom data is transferred

For these rights, contact info@360tr.com.

7. Data Retention

Your data is retained until your account is deleted. After deletion, a 30-day grace period applies (for restoration by the user). Payment records are kept for 10 years due to legal obligations.

8. Contact

Questions: info@360tr.com