This notice is provided before personal data is collected in the Türkiye pre-application and application flows. It is an information notice and is not an explicit-consent request. You do not need to "accept" this notice for the Company to process data on another lawful basis.
This notice is provided for information. It does not require a consent or contractual acceptance checkbox. Evidence that the notice was presented may be retained separately.
1. Data controller
The data controller for the Company's own visa intake, application support, payment coordination, communication, security and record-keeping activities is Mark Sigorta Aracılık Hizmetleri Anonim Şirketi, Istanbul Trade Registry No. 348433-5, MERSIS No. 0612151602000001, at Üçevler Mahallesi 955. Sokak No: 1 D: 38, 34513 Esenyurt, Istanbul, Türkiye. KEP: [email protected].
The Company is a private service provider and is not a government authority. An official authority or official application system may act as a separate data controller for data submitted to it.
2. Data processed
Depending on the stage and the Applicant's profile, the Company may process:
- nationality and the country or region and type of the travel document;
- name, other given names, surname, date and place of birth, gender and, where requested, parent details;
- passport or identity document number, issue and expiry dates and related document details;
- planned arrival date, travel purpose, eligibility declarations and supporting-document information;
- telephone number, email address, confirmation details and postal address;
- selected processing option, application answers, correction history and review confirmation;
- application and transaction references, process status, result category and document-delivery records;
- amount, currency, payment status, payment reference, refund or chargeback information, but not the full card number or card security code;
- IP address, date and time, device and browser characteristics, server logs, security events and fraud-prevention indicators;
- communications, support requests, complaints and documents voluntarily submitted for the application.
Do not upload health, biometric, criminal, religious, political or other special-category information unless it is expressly requested and necessary for the selected process. If such processing requires a separate consent, it will be requested separately after a specific notice.
3. Purposes
Data is processed to:
- create and secure a draft and maintain the multi-step application;
- determine the visa route indicated by the information supplied;
- check completeness, format and apparent consistency;
- contact the Applicant about a missing, incorrect or inconsistent item;
- prepare and support the selected application process;
- calculate and display transaction-specific service, official and payment items;
- create, reconcile and evidence payment and refund transactions;
- communicate the application stage and deliver a result or document;
- provide Company-side status access;
- prevent fraud, duplicate submissions, unauthorized access and technical misuse;
- comply with accounting, tax, consumer, data-protection and other legal obligations;
- establish, exercise or protect rights and resolve complaints or disputes.
4. Legal grounds
Ordinary visa application data is generally processed because it is necessary to take steps at the Applicant's request before a contract, to perform the selected service contract, to comply with legal obligations, to establish or protect rights, or for the Company's legitimate interests in security and transaction integrity after a balancing assessment.
Explicit consent is not used where another lawful ground applies. If a particular optional processing operation or transfer genuinely requires explicit consent, a separate and specific consent is shown. Refusing an optional consent does not prevent an unrelated service.
5. Recipients
To the extent necessary for the selected process, data may be shared with:
- the official evisa.gov.tr system, competent Turkish authorities, diplomatic or consular channels or another official recipient required for the application;
- an application-processing partner or intermediary service provider that operates a platform used to receive, prepare or forward the application on the Company's instructions;
- banks, payment institutions, card networks and fraud-prevention providers;
- hosting, cybersecurity, email, SMS, document-delivery and support providers;
- accountants, auditors and legal advisers;
- courts, regulators, law-enforcement bodies and other authorized institutions where required or permitted by law.
If insurance is separately selected, only the information necessary to start that distinct flow may be transferred to the Company's insurance process and the insurer identified in the quote or policy. The Insurance Privacy Notice then applies.
6. International transfers
A transfer outside Türkiye occurs only where it is necessary and a mechanism permitted by Law No. 6698 is available. If a specific transfer must rely on explicit consent, the recipient, country, data, purpose, transfer method and material risks are explained in a separate transaction-specific notice before consent is requested. Accepting the visa contract is not treated as cross-border consent.
7. Retention
Access to an incomplete encrypted draft expires seven days after the draft was last saved. Short-lived security and payment-intent records expire within their technical periods, generally no more than one hour. Completed application, payment, acceptance, communication and delivery records are retained for the periods required to perform the service, comply with law and establish or defend rights.
8. Automated checks
The system may compare answers with configured rules, validate formats, detect duplicate or suspicious activity and produce a preliminary route or result. This is workflow support, not a visa decision by a public authority. You may request human review of a material Company-side automated result after identity and transaction verification.
9. Data of another person
If you apply for a child or another person, you confirm that you are legally authorized to provide their data and manage the process. The Company may request evidence of authority.
10. Rights and contact
Subject to Article 11 of Law No. 6698, you may request information, correction, deletion or destruction where conditions are met, information about recipients, objection to certain solely automated results and compensation for unlawful processing.
Requests may be submitted through the visas.org.tr data-subject channel, by signed letter to the registered address or from a registered electronic mail account to [email protected]. Proportionate identity or authority verification may be requested.
Further information is available in the general Privacy Policy and Türkiye Visa Privacy Supplement.