Privacy Policy

This policy explains what personal data we collect when you visit our sites, ask us about an expedition or travel with us, why we collect it, who sees it and what you can ask us to do with it. It is written in plain English on purpose. If anything is unclear, write to us at sledext@gmail.com.

01Who we are

The controller of your personal data is SLEDEXT Turizm Organizasyon ve Kiralama Hizmetleri Sanayi Ticaret Limited Şirketi (“SLEDEXT”, “we”), a company registered in Türkiye. Our address, tax number and email are at the end of this page.

SLEDEXT designs and runs jet ski and buggy expeditions. This policy covers sledext.com and our expedition sites chile.sledext.com and indonesia.sledext.com (together, “the sites”), including their mobile versions and the request forms on them, our conversations with you on Telegram, WhatsApp, phone, email and social media, and the personal data we handle if you join an expedition. The same policy applies on every site.

We process personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK). Where they apply to you, we also follow the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), Chilean data protection law (Law No. 19.628 as amended by Law No. 21.719) and Indonesia’s Personal Data Protection Law No. 27 of 2022.

02What data we collect

When you send a request. Your name, the channel you choose (WhatsApp, Telegram or phone), your phone number or Telegram username, the expedition country or route you are interested in, the size of your group and whether you want an individual expedition (where the form asks), the time of the request and which site and device it came from.

When we talk. Whatever you tell us in messages, calls and emails – travel dates, who you are coming with, riding experience, questions.

If you book an expedition.

• Passport details: full name, date of birth, nationality, passport number and validity – needed for permits, charters, hotel registration and insurance
• An emergency contact: name and phone number
• Dietary requirements
• A fitness and medical declaration, including anything that matters on the water, on a volcano, in a helicopter or in the cold
• Jet ski licence or experience details where local rules ask for them
• On routes with helicopter logistics, the details the helicopter operator needs for its passenger manifest
• Billing details needed for the invoice. The sites have no payment form, so we never see your card number through them

During the expedition. Photos and video. A cameraman rides with you, and the footage is part of what you take home.

When you visit the sites. IP address, browser and device type, pages viewed, how you got here, and the cookies described in our Cookie Policy.

Health data is special-category data. We ask only for what our guide and mechanic need to keep you safe, and only with your explicit consent. You can refuse; we may then be unable to take you on the expedition.

03Why we use it, and on what legal basis

We make no automated decisions about you and we do not profile you.

04Who we share it with

We share personal data only with people who need it to deliver the expedition or to run the company:

• Our local operating partners in Chile and Indonesia and their crews – logistics, support boats, the camp, fuel, permits and local registrations, and in Chile the helicopter operator. Each receives what is needed for your itinerary, permits and safety
• Hotels, transfer and charter companies and other service providers on the route – each gets only the data it needs to host or move you
• Insurance and evacuation providers, where cover is arranged through us or a claim arises
• Authorities, where the law or local rules require it: immigration, maritime and port authorities (in Chile, DIRECTEMAR and the port captaincies), national park and marine reserve administrations
• Service providers that run our systems on our behalf: our CRM (amoCRM), where enquiries and bookings are kept; a Telegram bot that notifies our team of new requests; Cloudflare, which hosts the sites and relays the request forms; Google, which provides our email; and a web-analytics provider – only if you switch statistics on in the cookie banner
• Professional advisers – accountants, lawyers – when needed, and a buyer if the company is ever sold, under the same protection

We do not sell personal data, we do not share it for targeted advertising and we do not pass it to advertisers.

05Where your data goes

SLEDEXT is based in Türkiye. Because of how the expeditions and our systems work, your data can be processed in these countries:

• Chile – our local partner, the helicopter operator and the service providers on the route
• Indonesia – our local partner and the service providers on the route
• Russia – our CRM (amoCRM), where enquiries and bookings are stored
• United States – Cloudflare (hosting of the sites and form relay) and Google (email)
• United Arab Emirates – Telegram notifications to our team

If you are in the EEA, the UK or Switzerland: the transfers needed to answer your request and to organise the expedition you asked for rely on the necessity exemption in GDPR Art. 49(1)(b) and (c) – we cannot prepare a briefing or run the expedition without them. Where a transfer is not strictly needed for that, we rely on the European Commission’s standard contractual clauses with the recipient (with the UK addendum where needed) or on your explicit consent, which we ask for at the point of collection.

Under KVKK, transfers abroad are made on the grounds set out in Article 9 as amended in 2024: to countries the Personal Data Protection Board has recognised as adequate, or under appropriate safeguards such as the Board’s standard contract; where neither is available, on the exceptional grounds in Article 9(6) – the necessity of the transfer for the expedition you have asked for, or your explicit consent given for that occasion.

You can ask us for details of the safeguards in place for any transfer.

06How long we keep it

• An enquiry that does not lead to a booking – 24 months from our last contact, then deleted
• Booking and expedition records – 10 years after the expedition, as Turkish commercial and tax law requires for accounting records
• Passport copies and permit files – deleted within 12 months after the expedition, unless a claim or a legal requirement means we must keep them longer
• Fitness and medical declarations – deleted within 12 months after the expedition
• Expedition footage – kept as part of our archive; footage used in marketing stays only for as long as your consent stands
• Marketing contact details – until you unsubscribe, or 3 years after our last contact, whichever comes first
• Your cookie choice – 12 months, see the Cookie Policy

07How we protect it

The sites run over HTTPS. A request goes straight from your browser to our relay and CRM; nothing is stored on the websites themselves. Access to our CRM and messaging is limited to the team members who handle expeditions, each with their own login. We ask our partners to protect your data in the same way. No system is perfectly secure; if a breach ever affects your data, we will tell you and the supervisory authority as the law requires.

08Your rights

Wherever you live, you can ask us to:

• tell you whether we hold data about you, and give you a copy of it
• correct data that is wrong or incomplete
• delete your data where we no longer have a reason to keep it
• restrict or stop a particular use, including for marketing
• hand your data over in a portable form
• withdraw a consent you gave us – this does not affect what was done before

These rights come from Article 11 of KVKK and, if you are in the EEA or the UK, Articles 15–22 of the GDPR; the laws of Switzerland, Chile and Indonesia give you equivalent rights. Write to sledext@gmail.com; we may ask you to confirm your identity. We answer within 30 days (one month under the GDPR) and tell you if we need longer.

If you think we have handled your data badly, you can complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr); in the EEA and the UK, to the supervisory authority where you live; in Switzerland, to the Federal Data Protection and Information Commissioner; in Chile, once it is operating, to the Agencia de Protección de Datos Personales; in Indonesia, to the data protection authority established under Law No. 27 of 2022. We would rather hear from you first.

09Children

Our expeditions and the sites are for adults. We do not knowingly collect data from anyone under 18 through the sites. If a minor joins an expedition with a parent or guardian, we collect the minor’s data from the parent or guardian only.

10Cookies

Which cookies the sites set and how to change your choice is set out in the Cookie Policy. Statistics cookies stay off until you switch them on.

11Links to other services

The sites link to each other and to Telegram, WhatsApp, Instagram, YouTube and Facebook. Those services have their own privacy policies, which apply once you leave our sites. Some photos and videos on sledext.com are delivered from a third-party content network: your browser fetches them directly, so that network sees your IP address and browser type for the request.

12Changes to this policy

When we change this policy, we publish the new version on all our sites with a new date. If a change affects how we use data you have already given us, we tell you directly where we can.