Last updated: 12 November 2026
1. Data Controller
The controller of your personal data is [Company Name] (“Terziler Health Tourism”, the “Company”), Akat Mah. Ebulula Mardin Cad. No: 20, Beşiktaş / Istanbul, Türkiye. We provide health tourism consultancy and coordination services; the partner clinic that treats you is a separate controller for the medical care it provides. For GDPR-related requests: info@terzilerhealthtourism.com.
EU representative (GDPR Article 27): [EU Representative Name and Address]
2. Legal Basis for Processing
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Providing consultancy, coordinating treatment with partner clinics, arranging travel and accommodation | Performance of a contract – Art. 6(1)(b) |
| Keeping invoices and statutory records | Legal obligation – Art. 6(1)(c) |
| Improving service quality, website security | Legitimate interest – Art. 6(1)(f) |
| Marketing communications, analytics cookies | Consent – Art. 6(1)(a) |
3. Special Category Data (Health Data)
Your health data (photos, medical history, assessment findings) is processed on the basis of your explicit consent under GDPR Article 9(2)(a) and shared only with partner physicians bound by professional secrecy, for the purpose of assessment and treatment planning. Your before/after photos may be used for promotional purposes only with your separate, explicit written consent.
4. International Data Transfers
As the Company and its partner clinics are based in Türkiye, data you send from the EEA is transferred to Türkiye. This transfer is necessary to provide the service and relies on GDPR Article 49(1)(b) and, where required, on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).
5. Retention Period
Your data is kept only for as long as necessary for the purpose for which it was collected and for statutory retention obligations; it is then securely deleted or anonymised.
6. Your Rights under the GDPR
You can request a copy of the data we process about you.
You can ask us to correct inaccurate or incomplete data.
Subject to statutory retention obligations, you can request the deletion of your data.
In certain cases you can ask us to restrict the processing of your data.
You can receive your data in a structured, commonly used format or ask for it to be transferred to another controller.
You can object at any time to processing based on legitimate interest and to direct marketing.
You can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.
You can send your requests to info@terzilerhealthtourism.com. Requests are answered within one month at the latest.
7. Right to Lodge a Complaint
If you believe your data has been processed in breach of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your EU/EEA country of residence.