Skip to Content


Privacy Policy

At Candyland Bodrum we value the privacy of your personal data. This Privacy Policy explains what information we collect when you visit www.candylandbodrum.com and buy tickets online, why we use it and how we protect it.

1. Data Controller

Your personal data is processed by BYT PEYZAJ HAFRİYAT İNŞAAT VE TURİZM as the data controller under the Personal Data Protection Law No. 6698 (“KVKK”). The ways to contact the data controller are set out in the Information Notice on the Terms of Service page.

2. Information We Collect

  • Order and contact details: first name, last name, e-mail address, phone number, visit date, ticket type and quantity.
  • Payment details: Payment is taken through the contracted bank’s virtual POS infrastructure using 3D Secure. Our records keep only the last four digits of your card number and the result of the transaction; the full card number, expiry date and security code are not stored.
  • Technical information: IP address, browser and device information, pages visited and usage data obtained through cookies.
  • Information you send us: details you share through our contact channels and e-mails.

3. How We Use Your Information

  • To process your orders and deliver your tickets
  • To carry out payment and refund processes
  • To provide customer support and answer your questions
  • To meet our legal obligations
  • To keep the site secure and prevent misuse
  • To improve how the site works and the visitor experience

We do not sell your personal data to third parties.

4. Sharing of Information

Your data may be shared with banks and payment institutions for payment processing, with our service providers (such as e-mail, hosting and infrastructure services) to fulfil your order, and with authorised public authorities where legally required. The legal grounds and recipients of transfers are shown in the table in the Information Notice.

5. Cookies

Our site uses cookies so that it works properly and to improve your visit. See the Cookie Policy page for details and your choices.

6. Retention Period

Your personal data is kept for as long as needed for the purpose for which it is processed and for the retention periods set by the relevant legislation (tax, commercial, consumer law, etc.); after that period it is deleted, destroyed or anonymised.

7. Data Security

Reasonable technical and organisational measures are applied to prevent unauthorised access to, loss and misuse of your data. Communication between our site and you takes place over an encrypted (HTTPS) connection.

8. Your Rights

Under Article 11 of KVKK you have the right to learn whether your data is processed, to request information if it has been processed, to request correction or deletion, to learn the third parties to whom it has been transferred, to object to processing and to claim compensation for damage. For the application methods see the Information Notice or write to [email protected].

9. Changes

This policy may be updated; the current version is always published on this page.

Last updated: 1 October 2026