Updated: October 19, 2026 ·
1. Booking and travel information
Where necessary for booking and travel services, we may process names, date of birth, nationality, identity and passport details; contact information; sailing, date, cabin, passenger, flight, transfer and accommodation preferences; and payment, invoice, refund and enquiry records. Only necessary information should be shared when booking for other passengers.
Booking and information requests may be received through the website, sales office, telephone, email, WhatsApp, authorised agents and relevant travel service providers. Necessary information for booking, payment, changes, cancellation and refunds is used to provide the relevant service and meet applicable obligations.
2. Marketing and operational communications
Consent to commercial messages is not a condition of booking or using our services. You may withdraw it at any time and manage preferences through the Message Management System (İYS) where applicable. Withdrawal of marketing permission does not prevent operational messages needed to fulfil your booking.
The homepage booking search component loads from booking.aroya.com.tr. Loading it connects to that service and may transmit technical information such as your IP address, device and browser details to its provider. Also review the booking service’s own notices for its data processing and payment steps.
Updating the privacy policy does not itself create consent or permission for commercial messages. Changes to processing activities are reflected in the relevant notices; further information and permission processes are provided where required.
3. Who provides the service?
SUNORAMA CRUISES GEMİCİLİK HİZMETLERİ A.Ş. is the controller for the website processing it operates. Our Personal Data Protection Notice explains data categories, legal grounds, recipients and your rights.
4. Information you provide
The newsletter stores your email, language, registration/consent times and notice version in Cloudflare D1. It currently records registrations and does not automatically send email. Contact Sunorama to withdraw consent or request removal.
Cruise and booking selections help you prepare an enquiry. Information sent by telephone, email or WhatsApp is used to respond. Use the channels provided by the relevant booking service or sales team for travel documents and payment.
5. Technical data and providers
Cloudflare may process connection information to deliver and secure the site. Loading images can connect to AROYA/CDN and other image providers. Fonts are served by this website.
Google Tag Manager loads Google Analytics visit measurement after your analytics permission. Google may process page URLs, interactions and device/browser information; cookies such as _ga may connect visits. The existing container also includes Google Ads tags; advertising storage, advertising user data and personalization consent are sent as denied. Google services may process data abroad. You can withdraw permission in Cookie preferences.
YouTube players load only when you start a video and may then process IP, device and playback data under the provider’s own terms. External links are also subject to the destination provider’s privacy terms.
6. Use, sharing and retention
Information is used to answer enquiries, provide services, manage registrations, maintain security and meet legal duties. Marketing requires separate, optional consent/approval. Browsing does not give marketing permission.
Sharing must be limited to the necessary recipients and purposes. Overseas providers also require compliance with Article 9. Records are retained for their purpose and applicable legal duties. Your browser preference is valid for up to 180 days; other periods depend on the record and legal requirement. Ask Sunorama for category-specific retention details or erasure.
7. Choices and updates
Use the channels in the Personal Data Protection Notice to exercise your rights. Reopen cookie preferences from the footer; manage communication permissions through Sunorama and İYS where applicable. A policy update alone does not create consent; changed optional processing may require a new choice.
8. Microsoft Clarity
Microsoft Clarity loads only after you allow analytics. Microsoft may process page views, clicks, scrolling, device/browser information and IP addresses to provide heatmaps and session recordings. Clarity may use cookies such as _clck and _clsk to connect visits. Advertising storage consent is not granted. Withdraw permission by choosing Necessary only in Cookie preferences in the footer; Clarity is stopped. Microsoft services may process data abroad; the international-transfer information also applies.
Contact Sunorama
SUNORAMA CRUISES GEMİCİLİK HİZMETLERİ A.Ş.
Caddebostan Mah. Bağdat Cad. No:311 Mengüç Apt. K.1 D:1-2, Kadıköy / İstanbul
KEP: sunoramacruises@hs01.kep.tr
Email: rezervasyon@aroya.com.tr
Related notices: