Privacy Policy

Effective date: 1 September 2026  ·  Last updated: 1 September 2026

This policy explains what personal data we collect when you visit fridayacht.com or contact us, why we collect it, how we handle it, and the rights you have. We keep data collection to a minimum and we never sell it.

1. Who is responsible for your data

The data controller is Tuncay Kes, sole proprietor trading as Frida Yachting (“Frida Yachting”, “we”, “us”), at Loçatürk Tersanesi, Port Bozburun, Yeşilova, 48700 Marmaris / Muğla, Turkey, tax no 5450819560.

For any question about this policy or your data, contact us at [email protected].

2. What we collect

Information you give us

• When you contact us (by our contact form or by email): your name, email address, phone number if you provide it, and the content of your message.
• When you apply through the Careers page: your name, email address, phone number and location if you provide them, the content of your application message and, if you upload it, your CV (PDF or Word).
• If you ask to be kept informed about a model or the atelier: your name and email address. (We do not currently run a newsletter; if we start one, we will only add you with your explicit consent and you can unsubscribe at any time.)

Information collected automatically

• Server logs. Our hosting provider records standard technical data for every request: IP address, browser and device type, referring page, pages viewed and timestamps. This is used to run the site securely and diagnose problems.
• Bot check. We use Cloudflare Turnstile to protect the contact and careers forms from unwanted automated submissions. When those pages load, your browser contacts Cloudflare and sends technical data about your browser and connection (including your IP address), which Cloudflare processes only to tell whether you are a person.
• Country. Cloudflare tells us which country your request comes from (a two-letter code derived from your IP address). We use it only to start the country list on the contact form on your own country; we do not store it, and you can always change it.

3. Why we use it, and our legal basis

Under Turkish law (KVKK) the corresponding grounds are Article 5, explicit consent, necessity for the establishment or performance of a contract, compliance with a legal obligation, and our legitimate interests.

4. Who we share it with

We share personal data only with service providers that help us run the business, and only as far as they need it:

• SmarterASP.NET: website hosting and our email service (servers located in the United States).
• Esri: the location map in our footer loads map imagery from Esri’s servers (arcgisonline.com, United States). Your IP address is visible to Esri when the map loads. The map sets no cookies.
• Cloudflare: the bot check (Turnstile) on the contact and careers forms; it processes the technical data described above (United States and other countries).
• Professional advisers and authorities: accountants, lawyers, or public authorities where we are legally required to disclose.

We do not sell or rent your personal data to anyone.

5. International transfers

Because our host, Esri and Cloudflare are based in the United States, your data may be transferred outside Türkiye and the European Economic Area. Where that happens we rely on the safeguards in those providers’ data processing terms (for example the EU Standard Contractual Clauses). You can ask us for a copy of the relevant safeguards.

6. How long we keep it

• Enquiry correspondence: up to 24 months after our last contact, then deleted, unless it becomes part of a contract.
• Job applications and CVs: up to 12 months after you apply. During that time we keep them so we can consider your application, and you for future openings; then they are deleted. If you would like us to delete yours sooner, just ask.
• Contract and accounting records: for the retention period required by Turkish tax and commercial law (generally 10 years).
• Newsletter data: until you unsubscribe.
• Server logs: kept short-term by our host for security and troubleshooting.

7. Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw a consent you gave (this does not affect processing before you withdrew it).

To exercise any of these, email [email protected]. We respond within 30 days. If you are in the EU/EEA or UK you may also complain to your local data protection authority; if you are in Türkiye you may apply to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

8. Security

The site is served over HTTPS. We limit who can access enquiry data, use reputable providers, and keep the amount of data we hold small. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Children

The site is not directed at children and we do not knowingly collect data from anyone under 16.

10. Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes will be highlighted on the site.