Privacy Notice

1. Who is responsible for your data

The data controller is:

CareTrip Antalya, Antalya, Türkiye · WhatsApp: +90 542 742 64 38

2. What data we collect

We only collect the data we need to prepare and organise your treatment trip:

• Identity and contact details: name, country, phone or WhatsApp number, e-mail address.
• Health data you choose to share: photos, X-rays, medical history, medication, height and weight. This is special category data and we only process it with your explicit consent.
• Travel details: arrival and departure dates, hotel and transfer preferences, and passport details only if needed for a booking you ask us to make.
• Communication records: messages you send us by form, WhatsApp or e-mail.
• Technical data: basic data your browser sends when you visit the website, such as IP address and device type.

3. Why we use your data and on what legal basis

• To assess your request and prepare your treatment plan and offer: steps taken at your request before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To share your health data with a partner clinic for assessment and treatment: your explicit consent (GDPR Art. 9(2)(a); KVKK Art. 6).
• To organise your hotel, transfers and coordinator: performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To meet legal duties, such as tax and health tourism rules: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• To keep our website and systems secure and improve our service: our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

4. Who we share your data with

We never sell your data. We share only what is necessary with:

• Licensed partner clinics and hospitals in Türkiye and their doctors, to assess and carry out your treatment.
• Hotels, transfer companies and, if you ask us, travel providers, to organise your stay.
• Service providers who help us run our business, such as messaging (WhatsApp), e-mail and website hosting.
• Public authorities, only when the law requires it.

5. International transfers

If you live in the EU or EEA, your data is transferred to Türkiye, which does not have an EU adequacy decision. We transfer it because it is necessary to provide the service you request and, for health data, on the basis of your explicit consent (GDPR Art. 49(1)(a) and (b)). Some of our service providers may process data outside Türkiye; where required, we use appropriate safeguards such as standard contractual clauses in line with KVKK Article 9.

6. How long we keep your data

• If you do not go ahead with treatment: we delete your data 12 months after our last contact, unless you ask us to delete it sooner.
• If you travel with us: we keep your data for as long as the law requires, for example for tax and health tourism records.
• Medical records created by the clinic are kept by the clinic under Turkish health regulations.

7. Your rights

Under the GDPR and Article 11 of the KVKK you have the right to:

• know whether we process your data and get a copy of it;
• have incorrect data corrected and, in certain cases, deleted;
• restrict or object to certain processing and receive your data in a portable format;
• withdraw your consent at any time, without affecting processing done before;
• know who we have shared your data with, inside and outside Türkiye;
• complain to a data protection authority: in the EU, the authority of your country; in Türkiye, the Personal Data Protection Authority (KVKK).

8. How to contact us

Send your request to us on WhatsApp at +90 542 742 64 38. We will reply within 30 days at the latest.

9. Security

We use appropriate technical and organisational measures to protect your data, and we ask our partners and service providers to do the same.

10. Cookies

Our website currently uses only the technical storage needed for it to work, such as remembering your language. If we add analytics or marketing cookies, we will ask for your consent first and update this notice.

11. Changes to this notice

We may update this notice. The date at the top shows when it was last changed.