Updated: 31 October 2026

Privacy Notice (KVKK)

Scope and responsibility

The data controller is the Medtori company identified in this notice. Medtori facilitates communication, interpreting and organisation in health tourism. This notice covers your website visit, initial enquiry and related communications.

Enquiry form and response

The online form collects your name and phone number so Medtori can contact you about your request. The submission date and form language are also recorded. Your enquiry is accessed by the responsible Medtori employee; at this stage it is not shared with doctors, clinics, hotels or transfer companies.

Full name

To match your enquiry to the correct person.

Phone number

To contact you about your request.

An assigned Medtori employee reviews your enquiry and contacts you only about your request. No campaign or promotional messages are sent. Initial enquiry details are not shared with doctors, clinics, hotels or transfer companies.

Submitting the form is a request for contact; it is not recorded as a declaration that you have read or accepted the notice, or as explicit consent. The enquiry date, language, status and notice version presented are recorded. If you give consent for a separate activity, you can withdraw it via [email protected]; the responsible company representative handles your request.

Collection and legal basis

Information is collected electronically or orally through the web form, your interactions with the site and your chosen communication channel. Identity and contact details necessary to respond to your service request are processed for steps directly related to entering into a contract under Article 5(2)(c) of Turkish Law No. 6698 (KVKK). Necessary security records rely on legitimate interests that do not prejudice your rights under Article 5(2)(f). The applicable condition for processing health data under Article 6 of the KVKK is assessed separately; where processing relies on explicit consent, that consent is obtained separately. Optional analytics requires consent under Article 5(1).

Communication and later stages

If you choose WhatsApp, Telegram or email, the relevant service’s data processing terms also apply. Initial correspondence remains in the channel used; no separate manual archive is created. If you request a doctor consultation or document sharing, you will be informed before that separate processing takes place. This stage may begin before a contract is signed.

Retention

Admin records of website enquiries that do not lead to a contract are retained for no more than 12 months from the date of submission, to maintain continuity if you contact us again, and are then deleted. Further contact or status changes do not extend this period. This is not a general retention period for contracted customers, medical documents or copies held by external communication services. Admin-panel sign-in and activity logs are retained for one calendar year from the date they are recorded. Server-side records of cookie acceptance or rejection are retained for 14 days from their recording date and then deleted during the daily check. This is separate from the 180-day validity of your browser preference.

Your rights and requests

Under Article 11 of the KVKK, you may ask whether your data is processed, for what purpose and to whom it is disclosed; request correction and, where the conditions are met, deletion or destruction, and notification of these actions to recipients. You may object to an adverse outcome based solely on automated analysis and seek compensation for harm caused by unlawful processing. Requests sent to [email protected] are handled by the responsible Medtori company officer. Applicable identity-verification and submission rules apply; you may also write to the stated address.

Google Analytics

With your permission, Google Analytics measures pages and interactions. Google processes browser/device information and cookie identifiers; the service may involve processing abroad. Your name, phone number and enquiry contents from the form are not sent. You can withdraw permission through Cookie preferences.