Privacy notice.

Last updated: 14 September 2026

1. Data controller and scope

The indoor boat garage, winter storage, maintenance, repair, crane and transport, and boat cleaning services offered under the Boat Garage and Boat Clean brands are operated by Reis Yatçılık Sanayi ve Ticaret Anonim Şirketi, which is the data controller for your personal data:

This notice covers the Get a Quote and Booking forms on this website, contact via WhatsApp, phone and e-mail, the preparation of quotes and organisation of services, and the technical operation of the site.

2. Personal data we process

2.1. Identity and contact data

Name, surname, phone number and — if you choose to provide it — e-mail address.

2.2. Boat and service details

Boat type, length, current marina, requested service, requested period or date, and anything you write in the notes field.

2.3. Request and transaction records

The page and time of submission, quotes sent to you, correspondence history, booking and job records, and notes on acceptance or rejection of a quote.

2.4. Technical data

The site uses our own cookie-free visitor counter. Your IP address is not stored; a one-way identifier that changes daily is derived from the IP address and browser string, and only the page visited, referrer, device class (phone / tablet / desktop) and time are recorded. When you submit a form, your IP address is kept briefly in server logs to prevent abuse.

3. Purposes of processing

• Receiving and evaluating quote and booking requests and getting back to you,
• Preparing, sending, revising and archiving price quotes,
• Planning and carrying out storage, maintenance, repair, crane–transport and cleaning services,
• Communicating with you and managing the customer relationship,
• Meeting legal obligations such as invoicing, commercial records and retention,
• Keeping the website secure and blocking fake or automated submissions,
• Measuring site usage anonymously and improving the service,
• Responding to lawful requests from competent public authorities,
• Managing legal disputes and protecting our rights.

4. Legal bases

Under Article 5 of the KVKK, your personal data is processed on the following bases:

• Conclusion or performance of a contract: the data needed to receive your request, prepare a quote and deliver the service (name, phone, boat and service details) is directly related to pre-contractual steps and performance of the contract.
• Compliance with a legal obligation: invoicing, commercial book-keeping and retention duties, tax law, and requests from competent authorities.
• Legitimate interest: site security, prevention of fake submissions, anonymous usage measurement and service improvement, provided your fundamental rights and freedoms are not harmed.
• Establishment, exercise or protection of a right: in disputes, objections and evidentiary processes.
• Explicit consent: only for commercial electronic messages such as campaigns, promotions and announcements. Data you provide through the forms is not used for that purpose without your explicit consent.

5. Method of collection

Your personal data is collected through the website forms, WhatsApp, phone, e-mail and in-person meetings, by fully or partly automated means or by non-automated means as part of a data filing system.

6. Transfers

6.1. Domestic transfers

• Reis Yachting's operations and office staff, on a need-to-know basis,
• crane, transport, maintenance and cleaning subcontractors involved in delivering the service, only to the extent the job requires,
• accounting, finance, legal and IT service providers,
• Majka Solutions, which develops and maintains the website, acting as data processor,
• competent public authorities, upon a lawful request.

6.2. International transfers

Because of the site's technical infrastructure, your personal data may be processed or stored on the following systems outside Türkiye:

• Database: form submissions are stored on servers located in Frankfurt, Germany.
• Instant notification: each new request, including its content (name, phone, boat and service details), is sent to the office team via Telegram.
• Hosting: the website is served by GitHub Pages; your IP address reaches the hosting provider when a page is requested.
• Fonts and maps: pages load fonts from Google Fonts, and the map on the Contact page comes from Google Maps. Your IP address is sent to Google when these load.
• WhatsApp: if you tap a WhatsApp link, the conversation runs on Meta's infrastructure and is subject to WhatsApp's own privacy policy.

International transfers are carried out under the conditions and safeguards set out in Article 9 of the KVKK.

7. Retention periods

• Requests that lead to a quote or contract: quote, contract, job and invoice records are kept for 10 years from the transaction date, as required by the Turkish Code of Obligations and Turkish Commercial Code.
• Requests that do not proceed: requests with no quote issued or accepted are deleted or anonymised 2 years after the last contact.
• Server logs: security access logs are kept for at most 1 year.
• Site measurement: anonymous count data is not personal data and is kept in aggregate.
• Backups: database backups are deleted automatically after 30 days.

When a retention period ends, the personal data is deleted, destroyed or anonymised.

8. Your rights

Under Article 11 of the KVKK you have the right to apply to the data controller to:

• learn whether your personal data is processed,
• request information about that processing,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties, in Türkiye or abroad, to whom it is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction when the conditions for processing no longer apply,
• request that corrections and deletions be notified to third-party recipients,
• object to a result against you produced solely by automated analysis,
• claim compensation for damage caused by unlawful processing.

9. How to apply

You may submit requests in writing or by the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller:

Requests are answered free of charge as soon as possible and within 30 days at the latest. If the process incurs additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

10. Commercial electronic messages

Campaign, promotional and announcement messages by SMS, e-mail or messaging apps are sent only with your separate explicit consent. The "I'd like to receive campaign and announcement messages" box on the quote and booking forms is optional and is based on the Consent Statement; submitting a form without ticking it does not mean you agree to receive marketing. Any consent you give can be withdrawn at any time via the address above; not giving or withdrawing consent does not affect the services you receive.

11. Data security

The data controller takes appropriate technical and organisational measures against unlawful processing and access: database access is limited to authorised staff with row-level authorisation; the form endpoint has rate limiting and a bot filter; connections are encrypted (HTTPS); backups are deleted automatically after 30 days; and data-processing safeguards are in place with service providers.

12. Changes

This notice may be updated as services or legislation change. The current version is always published on this page; the date at the top shows the last update.