Skip to content
Turasistan

Terms of Service and Subscription Agreement

●  Turasistan

Terms of Service and Subscription Agreement

 

The rights and obligations that apply to the use of Turasistan services.

 
Clear Terms
Data Protection
Fair Liability

At a Glance

 

This agreement sets out the terms of use for Turasistan services provided to travel agencies and tour operators. The key points are summarised below; the full text that follows is the binding one.

✓

14-day free trial

Start a trial without a credit card, then choose your plan.

◎

Your data is yours

All rights in Customer Data belong to you; Turasistan acts only as a data processor on your instructions.

✦

30 days on exit

After the agreement ends you can export your data for 30 days.

Contents

1

Parties

This agreement is made electronically, upon the Customer's acceptance, between Sanalogi Bilişim Sanayi ve Ticaret Anonim Şirketi (İkitelli Tax Office, Tax No: 7430431852; MERSIS No: 0743043185200018), headquartered at Yıldız Teknopark – İOSB Mah. Teknopark Cad. No:1 Floor:2-16, Başakşehir / Istanbul ("Turasistan"), and the natural or legal person, acting in the course of its commercial or professional activity, who registers for, trials or subscribes to Turasistan services ("Customer").

2

Definitions

  • Services: Turasistan App (CRM), Turizm Web, Mobile Passport Reader, T-Robot, API, integrations and all related software, hosting and support services.
  • User: Employees, authorised persons or representatives who access the Services on the Customer's behalf.
  • Customer Data: All data that the Customer and Users enter into, upload to or generate through the Services, including passenger information.
  • Plan: The package, user and feature scope published on Turasistan's pricing page or stated in the offer.
3

Subject of the Agreement

This agreement governs the rights and obligations relating to Turasistan providing cloud-based software services (SaaS) to travel agencies and tour operators, and the Customer using them. The Services are provided for professional and commercial purposes and are not a consumer transaction under Consumer Protection Law No. 6502.

4

Account and Registration

4.1The Customer undertakes to provide accurate, current and complete information at registration.
4.2The Customer is responsible for keeping usernames and passwords confidential and must notify Turasistan immediately of any unauthorised use of the account.
4.3All actions taken through the account are deemed to have been taken by the Customer.
4.4The Customer declares that it acts as a merchant for commercial purposes and that it is authorised and legally competent to use the Services, and is itself responsible for running its business in line with the relevant legislation (TÜRSAB membership, travel agency licence, Hajj and Umrah permits, etc.).
5

Trial Period

Turasistan may offer new Customers a 14-day free trial without requiring a credit card. If no paid Plan is chosen at the end of the trial, the account may be suspended; Customer Data is kept for export for the period in Article 13 and then deleted. Turasistan reserves the right to change or end trial terms.

6

Scope and Level of Service

6.1Turasistan provides the Services with reasonable care and in line with industry standards. The targeted monthly service availability is 99.9%; planned maintenance, force majeure and interruptions caused by the Customer or third parties are excluded. This figure is a target, not a commitment, and failing to meet it does not by itself give rise to any refund, discount or credit.
6.2Planned maintenance is announced in advance where possible and scheduled for low-usage hours.
6.3Support is provided through the channels and within the working hours stated in the Plan.
6.4Turasistan may develop, add features to or change the Services. Changes that would cause a material interruption to the Customer are notified reasonably in advance.
7

Third-Party Integrations and Public Systems

The Services may work integrated with banks, virtual POS, SMS and email providers, public systems such as the Ministry of Foreign Affairs and Diyanet, and other third-party platforms. The terms of use, outages, quotas and policy changes of these systems are outside Turasistan's control. T-Robot and similar automation features work on the Customer's behalf and instructions, within the Customer's authority and account relationship with the relevant institutions; Turasistan is not responsible for acceptance, rejection or delay of applications by those institutions. The Customer is responsible for the accuracy and authorisation of the credentials and account details used in these systems.

8

Fees and Payment

8.1Fees are stated on the pricing page or in the offer made to the Customer. Unless stated otherwise, prices exclude VAT.
8.2Subscription fees are invoiced in advance for each period according to the chosen Plan. Payment can be made by bank transfer or by Visa, Mastercard and Troy cards. Card details are processed by the payment institution; Turasistan does not store them.
8.3If payment is not made when due, Turasistan may suspend the Services after written notice and apply statutory late-payment interest.
8.4Turasistan may change prices and Plan scope only for the next renewal period, by giving the Customer written notice at least 30 days before the renewal date. Fees for the current, already paid period are not affected. If the Customer does not accept the change, it may terminate the agreement before the renewal date without any penalty or compensation.
8.5Except where required by law, fees already paid for a period are not refunded. Refunds are made only where Turasistan materially and continuously fails to perform the Services, or where the Customer terminates under Article 20 because it does not accept a material change, and are calculated pro rata for the unused period.
9

Customer Obligations and Prohibited Use

The Customer is responsible for:

  • Using the Services in line with applicable law, this agreement and Turasistan's reasonable instructions,
  • Ensuring the data it enters was lawfully obtained, having informed passengers under the KVKK, and obtaining the necessary explicit consents and legal grounds,
  • The actions of its Users,
  • Staying within the user, record and usage limits of its Plan.

The following are prohibited: unauthorised copying of the Services, reverse engineering or attempts to access source code; renting accounts or sharing them with third parties outside the Plan; load testing, scanning or intrusion attempts that harm security or performance; uploading malware; use for unlawful purposes, unfair competition or infringement of third-party rights; unauthorised automated data extraction.

10

Intellectual Property

10.1The Services, software, interfaces, designs, trademarks, logos, documentation and all related intellectual and industrial property rights belong to Turasistan or its licensors. This agreement grants the Customer only a limited, non-transferable, non-exclusive right of use for the term of the agreement.
10.2All rights in Customer Data belong to the Customer. The Customer grants Turasistan the right to process Customer Data to the extent necessary to provide, support and improve the Services.
10.3Turasistan may use the Customer's feedback about the Services free of charge and without time limit.
10.4Turasistan may use anonymous, aggregated usage statistics that cannot identify the Customer or any person to improve the Services.
11

Personal Data Protection and Data Processing

11.1For personal data within Customer Data, the Customer is the data controller and Turasistan is the data processor. Turasistan processes this data only to provide the Services, in line with this agreement and the Customer's written or digital instructions.
11.2Turasistan takes the technical and organisational measures required by Article 12 of the KVKK, holds personnel with access to data under confidentiality obligations, and informs the Customer within 24 hours at the latest on learning of a personal data breach, stating the nature of the breach, the data affected and the measures taken or to be taken. Turasistan provides the information and support the Customer needs to notify the Personal Data Protection Board and data subjects.
11.3The Customer is responsible for establishing the legal basis for processing passengers' special categories of personal data (passport, ID, biometric data and, in services such as Hajj and Umrah, data that may indirectly reveal religious belief), for fulfilling information and explicit consent obligations, and for answering data subject requests.
11.4Turasistan may use sub-processors (hosting, infrastructure, SMS, email, payment, etc.). Sub-processors are bound by protection obligations equivalent to those in this agreement. If data is transferred abroad, safeguards in line with Article 9 of the KVKK are provided.
11.5Turasistan forwards requests from data subjects to the Customer and gives reasonable support in responding to them.
11.6For data Turasistan processes as a data controller in its own right, the Privacy Policy and Personal Data Protection Notice applies.
11.7Detailed data processing terms are set out in Article 24 (Annex 1).
12

Confidentiality

The parties agree to keep confidential all commercial, technical and financial information of the other party learned under this agreement, to use it only for the purposes of the agreement and not to share it with third parties without permission. This obligation continues for two (2) years after the agreement ends (indefinitely for personal data and trade secrets). Disclosure required by law or by a competent authority does not breach this obligation.

13

Term, Termination and Fate of Data

13.1The agreement takes effect on the date of acceptance and continues for the term of the chosen Plan. Unless stated otherwise, the subscription renews automatically for the same periods.
13.2The Customer may stop renewal by giving notice at least 15 days before the renewal date.
13.3Either party may terminate immediately if the other materially breaches the agreement and does not remedy the breach after 15 days' written notice. In case of non-payment, prohibited use or unlawful conduct, Turasistan may suspend or terminate without notice.
13.4After termination or expiry, the Customer may export its data for 30 days. At the end of this period Turasistan may delete or anonymise Customer Data, subject to legal retention obligations. Data in backups is deleted in the normal backup cycle.
13.5Termination does not affect rights and obligations accrued up to the end date; fees already paid are not refunded, subject to Article 8.5.
14

Disclaimer of Warranty

The Services are provided "as is" and "as available". Turasistan does not promise that the Services will be uninterrupted or error-free, fit for a particular purpose, or work flawlessly in every case with third-party systems (including public institutions). The accuracy and completion of passenger records, visa and booking processes is the Customer's responsibility; the Customer should separately verify critical transactions at its own responsibility.

15

Limitation of Liability

15.1Turasistan's total liability under this agreement is limited to the total fees paid by the Customer to Turasistan in the 12 months before the damage occurred, without prejudice to intent, gross negligence and liabilities that cannot be limited by law.
15.2Turasistan is not liable for indirect and consequential damages such as loss of profit, loss of reputation, loss of business opportunity, damage arising from visa or travel cancellation, or third-party claims.
15.3Damage arising from the Customer's own error, unauthorised use, incorrect data entry or outages of third-party systems is outside Turasistan's liability.
16

Indemnification

The Customer indemnifies Turasistan against damages and reasonable attorney fees arising from third-party claims caused by the Customer's unlawful use of the Services or use in breach of this agreement, unlawful Customer Data, or breach of its obligations on informing passengers and obtaining their consent.

17

Force Majeure

Events beyond the parties' control, such as natural disasters, war, epidemics, strikes, electricity, internet or infrastructure outages, cyber attacks (despite reasonable precautions), decisions of public authorities and failure of third-party systems, are force majeure. If force majeure lasts more than 60 days, the parties may terminate the agreement without compensation.

18

References and Notices

Turasistan may use the Customer's trade name and logo as a reference only with the Customer's express written or electronic consent, which the Customer may withdraw at any time. Notices between the parties are sent to the email address the Customer gave at registration and to Turasistan at [email protected]; email notices are deemed delivered on the date of sending.

19

Assignment

The Customer may not assign the agreement or its rights without Turasistan's written consent. Turasistan may assign the agreement in case of merger, acquisition or transfer of business.

20

Changes to the Agreement

Turasistan may update this agreement because of changes in law, security requirements or changes to the Services. Updates are notified to the Customer by email or through the panel at least 30 days before they take effect. Changes with a material adverse effect on the Customer do not apply until the end of the current subscription period unless the Customer expressly accepts them. If the Customer does not accept a change, it may terminate the agreement before the effective date without any penalty or compensation, and the fee for the unused part of the paid period is refunded.

21

Evidence Clause

The parties agree that the system, log and electronic records of either party are valid evidence, until proven otherwise, under Article 193 of the Turkish Code of Civil Procedure.

22

Severability and Waiver

If any provision of the agreement is held invalid, the other provisions are not affected. Failure to exercise a right does not mean waiver of that right.

23

Governing Law and Jurisdiction

This agreement is governed by Turkish law. For disputes in which the Customer acts as a merchant, the Istanbul (Çağlayan) Courts and Enforcement Offices have jurisdiction under Article 17 of the Code of Civil Procedure. The general rules of jurisdiction remain reserved for Customers that are not merchants.

24

Data Processing Terms (Annex 1)

This article applies to processing where the Customer is the data controller and Turasistan is the data processor, and forms an integral part of the agreement. In case of conflict between this article and other provisions of the agreement regarding the processing of personal data, this article prevails.

24.1Subject and purpose. Turasistan processes personal data on the Customer's behalf only to provide the Services: hosting, storage and backup; passport/ID reading and management of records in the CRM; booking, accommodation and operations; transmission of visa and similar applications on the Customer's instructions; SMS and email notifications; collection and reporting.
24.2Duration. Processing continues for the term of the agreement and until the end of the export period in Article 13.4. After that period the data is deleted or anonymised, subject to legal retention obligations.
24.3Categories of data. Identity and contact details; passport/ID document details (including MRZ and NFC chip data); photographs in documents; date of birth and nationality; visa application details; accommodation, flight and booking details; payment and collection records. In Hajj and Umrah services, this data may indirectly reveal religious belief (special categories of personal data).
24.4Categories of data subjects. The Customer's passengers and customers, passengers' companions and relatives, the Customer's employees and Users, and contact persons of the Customer's suppliers and business partners.
24.5Instructions. Turasistan processes personal data only on the Customer's documented instructions. This agreement and the Customer's use of the Services through the panel constitute instructions. If Turasistan considers that an instruction breaches the law, it informs the Customer and may decline to carry it out.
24.6Confidentiality. Turasistan personnel with access to personal data are bound by confidentiality obligations and have access only as their duties require.
24.7Security. Under Article 12 of the KVKK and the Personal Data Security Guide, Turasistan applies at least the following measures: access authorisation and authentication, logging, backup, network and application security, vulnerability management and regular penetration testing, and an incident response process.
24.8Breach notification. Turasistan notifies the Customer of a personal data breach as set out in Article 11.2 and within 24 hours at the latest.
24.9Sub-processors. The Customer gives general authorisation for the use of sub-processors such as infrastructure and hosting, SMS, email and payment providers. Turasistan gives the Customer the current list of sub-processors on request and informs the Customer at least 30 days before adding or replacing a sub-processor. The Customer may object on reasonable, documented data protection grounds; if the parties cannot agree on a solution, the Customer may terminate the agreement without any penalty or compensation. Sub-processors are bound by obligations equivalent to this article, and Turasistan remains liable to the Customer for their performance.
24.10Transfers abroad. Transfers made through Turasistan's sub-processors are carried out with safeguards in line with Article 9 of the KVKK. For transfers to institutions and systems abroad (for example visa application systems) made on the Customer's instructions, the Customer, as data controller, is responsible for establishing the legal basis.
24.11Data subject requests. Turasistan forwards requests it receives directly from data subjects to the Customer within 5 business days and does not reply on the Customer's behalf. It gives reasonable technical support for correcting, exporting or deleting data.
24.12Audit. To verify compliance with this article, the Customer may request information and documents once a year, during business hours, with at least 15 days' notice, without disrupting Turasistan's operations and subject to confidentiality obligations. Providing Turasistan's current independent test or audit reports (for example a penetration test summary) may satisfy the audit obligation. An additional audit may be carried out in case of a suspected breach or a request from the Authority. Audit costs are borne by the Customer unless a material non-compliance is found.
24.13Deletion and return. After the agreement ends, Article 13.4 applies. At the Customer's request, Turasistan confirms deletion in writing.
24.14Customer's obligations. The Customer is responsible for the lawful processing of data, informing data subjects, obtaining the necessary explicit consents, the accuracy of the data and its own data controller obligations (including VERBİS).
24.15Liability. Article 15 also applies to liability arising from this article; liabilities that cannot be limited by law remain reserved.
25

Entry into Force

By registering or starting to use the Services, the Customer declares that it has read, understood and accepted all provisions of this agreement.

Sanalogi Bilişim Sanayi ve Ticaret Anonim Şirketi
Yıldız Teknopark – İOSB Mah. Teknopark Cad. No:1 Floor:2-16, Başakşehir / Istanbul
Tel: +90 850 557 76 54 · Email: [email protected]

Questions about these terms?

Get in touch about the terms, plans or your specific needs.

Sanalogi Bilişim Inc.

Yıldız Teknopark – İOSB Mah. Teknopark Cad. No:1 Floor:2-16, Başakşehir / Istanbul
+90 850 557 76 54

[email protected]

Turasistan • Legal • Tourism Technology