Privacy policy

The office of the Special Envoy of the President for Tourism processes personal data under Law Number 27 of 2022 on Personal Data Protection. Form data is processed only because you sent it yourself, for the purpose you asked for.

The site collects personal data only through three forms, and only the fields you fill in yourself:

• Contact form: name, email, subject, and message.
• Collaboration proposal: organisation name, contact person, email, phone number (optional), partnership type, and a summary of the proposal.
• Submit your story: the name you want shown, email, location, title, the story, a link (optional), and up to three photos.

With every submission we store the page language, your browser type (user agent), and a salted hash of your IP address. The IP address itself is not stored with the submission. The hash is used only to recognise repeated abuse, never to identify who you are.

Your IP address is also used briefly to limit how many submissions can be sent per minute and to block automated requests.

Form data is used to answer your message, process service requests, consider collaboration proposals, and curate stories. Collaboration proposals and stories may be forwarded to the office team as a notification email.

A story you send is not published straight away. Our team reads it first, and only the stories chosen are published, as a story the team prepares for the site. Your email is not shown on the site.

Photos you attach are re-encoded to WebP before they are stored, which removes metadata such as GPS location. They are kept in private storage the public cannot open; only our team can view them through the dashboard.

The story form uses a bot check: Cloudflare Turnstile, or a computing puzzle (proof of work) that your own browser solves without any third party service. The Turnstile script loads only when that check opens, and Cloudflare's processing falls under Cloudflare's privacy policy.

The site sets no advertising cookies. It uses only:

• ukp_consent: stores your choice on the cookie card, accept or reject, for 180 days.
• ukp_consent_dismissed in sessionStorage: if you close the card without choosing, this is noted for that browsing session only and counts as no consent.
• Google Analytics: loaded only after you accept cookies, with advertising storage and Google signals turned off. If you reject later, collection stops and the analytics cookies are removed.
• YouTube videos and OpenStreetMap maps: loaded only after you accept cookies, or when you choose to play that video or show that map yourself, because those services may set cookies.
• ukp_admin: a session cookie for staff signed in to the admin dashboard. Public visitors never receive it.

Under Law Number 27 of 2022 you have the right to access your personal data, correct data that is wrong, ask for data to be deleted, and withdraw consent you have given. Send your request through the form on the Contact page and mention which form you used.

You can change your cookie consent at any time through Cookie settings at the bottom of every page.

We update this page whenever the way the site handles data changes. The date of the last update is shown at the top of the page.