What we collect
and why

Who is responsible

The data controller is:

Buse Hilal İnceler · sole proprietorship, trading as Windbase
Tax number 4770254563
Yacht Classic Marina, Fevzi Çakmak Cd. No: 24, Fethiye · Muğla · Türkiye
info@thewindbase.com · +90 532 136 17 35

What we collect

• Booking requests. Your name, email address, phone number if you give one, the size of your group, the camp or dates you pick, and anything you write in the message field.
• The mailing list. Your email address, plus the date and time you ticked the consent box, so we can show that you asked to hear from us.
• Technical records. Our host keeps the usual request data — IP address, browser type, which pages were requested — to serve the site and protect it from abuse.
• Messages and Instagram forms. If you write to us on WhatsApp or Instagram, or fill in a form inside one of our Instagram ads, we receive the name, phone number or email address the app passes on, and whatever you write or answer.

We never ask for payment or card details anywhere on this site.

What we use it for

• To answer your request and plan a camp with you.
• To tell you when camp dates open, if you asked us to.
• To keep the site running and secure.
• If you allow it, to measure how many people visit and whether our ads work.

We do not sell your data, and we do not use it for anything not listed on this page.

Our legal basis

• Booking requests and enquiries — on this site, by WhatsApp or Instagram message, or through an Instagram ad form: steps taken at your own request before a contract is entered into (Law no. 6698 art. 5/2-c; GDPR art. 6(1)(b)).
• The mailing list — your explicit consent, which you can withdraw at any time (Law no. 6698 art. 5/1; GDPR art. 6(1)(a)).
• Technical records — our legitimate interest in running a site that stays up and is not abused (Law no. 6698 art. 5/2-f; GDPR art. 6(1)(f)).

Who else handles it

We use a small number of service providers, and only for the purposes above:

• Cloudflare — hosting and protection for this site.
• Resend — sends the two emails a booking request produces: the one to us and the confirmation to you. Processed in the EU (Ireland).
• Google Workspace — our mailbox at info@thewindbase.com.
• Meta — Instagram and WhatsApp, including the forms in our Instagram ads. Provided by Meta Platforms Ireland Limited and WhatsApp Ireland Limited; what you send there is also covered by their own privacy policies.
• A mailing list provider — not yet in use. We will name it on this page before the first email is sent.

Because these providers operate outside Türkiye, using this site means your data may be transferred abroad. We keep that to what the services above need, and we ask for your consent where the law requires it.

How long we keep it

• Booking requests and enquiries — for 12 months after our last contact with you, unless you ask us to delete them sooner.
• The mailing list — until you unsubscribe. We keep the record of your consent for as long as the law requires us to be able to prove it.
• Technical records — for the short period our host keeps them.

Cookies

Our host may set a strictly necessary cookie to tell real visitors from automated traffic. That one is needed for the site to work and carries no choice.

Our host also counts visits with Cloudflare Web Analytics. It sets no cookie, does not keep your IP address and builds no profile of you; it only gives us totals, such as how many visits a page had and which site sent them. When you send a form, our server also keeps a short record of the request (the date, the page or the camp you chose) without your name or contact details, so we can count requests.

Beyond that we use two cookies, and only with your permission:

• Google Analytics — tells us how many people visit, which pages they read and where they arrived from, so we can tell whether our posts and ads are worth the effort. Provided by Google Ireland Limited. We have switched off the settings that would let Google use this data to personalise advertising.
• The Meta pixel — measures whether our advertising on Facebook and Instagram brings people here, and lets us show our ads to people who have already visited this site. Provided by Meta Platforms Ireland Limited.

Neither runs until you accept. The first time you visit, a bar at the bottom of the page asks you to choose. Neither is loaded and no cookie is set while you are deciding, or if you decline. Your choice is kept in your own browser, so clearing your browser data brings the question back.

The legal basis for these cookies is your consent, which you can withdraw at any time by clearing this site's data in your browser. Declining changes nothing about the site itself — every page and the booking form work exactly the same.

Your rights

Under Law no. 6698 art. 11 you can ask us whether we hold data about you, what we use it for, and whether it has been passed on; ask for it to be corrected, deleted or destroyed; ask us to tell anyone we passed it to about that correction or deletion; object to a result produced purely by automated analysis; and claim compensation if you have suffered loss because your data was handled unlawfully. If you are in the EU, the GDPR gives you equivalent rights.

You can withdraw consent for the mailing list at any time — every email carries an unsubscribe link, and writing to us works just as well.

How to reach us

Write to info@thewindbase.com or to the postal address above. We answer as soon as we can, and within the periods the law sets. If you are not satisfied, you can complain to the Turkish Personal Data Protection Authority (KVKK) or, in the EU, to your local supervisory authority.

Changes to this page

When something here changes we update the date at the top. If the change affects how we use data you have already given us, we will tell you before it takes effect.