Privacy policy

This page is a translation of the Turkish original, provided for information. In case of any discrepancy, the Turkish version prevails.

Last updated: 18 October 2026

At Rota Korea (“RotaKore”, “we”), we take the protection of your personal data seriously. This policy explains how your personal data is processed when you visit rotakore.com, fill in our tour planning and contact forms, write to us via WhatsApp, email or social media, and purchase our services. It is based on the Personal Information Protection Act of the Republic of Korea (PIPA), Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) and, to the extent applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller

  • Rota Korea (로타코리아), Representative: Hyeyon Seo
  • Address: #161, 7F, 31 Maebongsan-ro, Mapo-gu, Seoul, Republic of Korea
  • Personal data protection officer (개인정보 보호책임자): Hyeyon Seo · info@rotakoretravel.com · +82 10 5832 0372

2. What data do we process?

  • Identity and contact details: first name, last name, phone and WhatsApp number, email address, country and city of residence.
  • Travel details: travel dates, number of travelers and age groups, interests, accommodation and vehicle preferences, flight details, special requests.
  • Booking details: first and last name as shown in the passport, passport number, date of birth and nationality. This information is requested only when needed for hotel, flight, train, activity or insurance bookings.
  • Special categories of data: dietary preferences and allergies, mobility restrictions, and the health information and photos you submit in Rota K-Beauty applications. This data is processed only with your explicit consent and only for the service concerned.
  • Payment details: payment amount, currency and transaction records. Your card details are processed by the payment service provider; Rota Korea does not see or store them.
  • Correspondence: your WhatsApp, email, form and social media messages.
  • Technical data: IP address, browser and device information, language preference, the pages you visit and cookie data.

3. For what purposes and on what legal grounds do we process data?

  • Responding to your request and preparing a personalized program and quote: steps taken at your request before entering into a contract.
  • Making bookings and running your trip: entering into and performing the contract.
  • Collecting payments, invoicing and accounting: performance of the contract and legal obligations.
  • Communication, emergencies and safety during the trip: performance of the contract and, where necessary, your vital interests.
  • Rota K-Beauty clinic applications and appointment coordination: your explicit consent.
  • Measuring service quality, improving the site, and preventing fraud and abuse: our legitimate interest.
  • Sending campaigns and announcements: only with your permission. You can withdraw your permission at any time.
  • Legal obligations and legal disputes: legal obligation and the protection of rights.

We do not collect more of your data than is needed for the service you request, and we do not sell it.

4. Who we share data with

  • Suppliers needed to provide the service: hotels, airlines, transport and transfer companies, guides, restaurants, museums and event organizers, insurance companies and, for Rota K-Beauty applications, clinics chosen with your approval. Each supplier receives only the information needed for that service.
  • Our service providers: Shopify (site infrastructure, orders, payments and analytics), payment institutions, Google (email, form and font services) and Meta (communication via WhatsApp and Instagram). These companies process data on our behalf and in line with our instructions.
  • Competent public authorities: when required by law and only to the extent necessary.

5. International transfers

Rota Korea operates in the Republic of Korea. Data you send from Türkiye or any other country is transferred to and processed in the Republic of Korea so that the travel service you request can be provided. Our service providers’ servers may also be located in other countries. These transfers are necessary for entering into and performing the contract and, where required, are based on your explicit consent or appropriate safeguards.

Recipient Country Purpose Data transferred
Shopify and payment service providers Canada, USA and other countries Site infrastructure, orders and payments Contact, order, payment and technical data
Google USA and other countries Email, form and font services Contact details, correspondence, form responses
Meta (WhatsApp, Instagram) USA, Ireland and other countries Messaging Contact details and correspondence

Transfers take place over the internet while you use the services, and your data is subject to the retention periods in this policy. If you do not want your data to be transferred, you can tell us; in that case, however, we may not be able to provide the service you request.

6. Retention periods

  • Requests that do not become bookings: up to 1 year from the last contact.
  • Contract, payment and service records: 5 years (Korean Act on the Consumer Protection in Electronic Commerce).
  • Consumer complaint and dispute records: 3 years.
  • Site visit logs: 3 months.
  • Rota K-Beauty health information and photos: deleted within 1 year at the latest after coordination is completed or after you withdraw your application; you can ask for earlier deletion.
  • Marketing consent: until you withdraw it.

When the period ends, electronic records are permanently deleted or anonymized, and paper documents are destroyed.

7. Your rights

With regard to your personal data, you have the right to find out whether it is processed and to request information about it; to access your data and obtain a copy; to request its correction or deletion or the suspension of its processing; to find out who your data has been shared with; to withdraw your explicit consent; to object to processing; to unsubscribe from marketing messages; and, if you have suffered damage as a result of unlawful processing, to claim compensation.

You can send your requests to info@rotakoretravel.com. Requests are answered within 10 days at the latest; we may ask for additional information to verify your identity.

If you are not satisfied with our response, you can contact the following authorities:

  • Korea: Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) and Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972)
  • Türkiye: Personal Data Protection Authority (www.kvkk.gov.tr)
  • European Union: the data protection authority of the country you live in

8. Cookies

  • Strictly necessary cookies: used for the operation of the site, security, language preference and payment processing.
  • Analytics and marketing cookies: used by Shopify’s analytics tools and connected measurement tools to measure how the site is used and to improve our promotions. In regions where this is required, these cookies run only with the consent you give through the cookie banner.
  • You can delete or block cookies in your browser settings; blocking strictly necessary cookies may stop some functions from working. For detailed information on the cookies Shopify uses: shopify.com/legal/cookies

9. Security

To protect your data, we apply technical and organizational measures such as encrypted connections (SSL), limiting access to authorized persons only, strong passwords and two-step verification. Payments are processed through payment providers that comply with international card security standards (PCI DSS). However, no data transmission over the internet can be guaranteed to be completely secure.

10. Children

Our services are not directed at children under the age of 14. Information about children traveling with you is processed only at the request and with the permission of a parent or legal guardian.

11. Third-party services

When you use third-party services on the site, such as YouTube videos, Instagram and WhatsApp links or Google Forms, the privacy policy of the company concerned also applies. YouTube videos are embedded in privacy-enhanced mode.

12. Changes

This policy is updated when necessary; the current version is always published on this page and takes effect on the date of publication.

13. Contact

For any questions about your personal data: Hyeyon Seo, personal data protection officer · info@rotakoretravel.com · +82 10 5832 0372