Personal Data Protection Notice (KVKK)

This notice, provided under Article 10 of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), explains why and how Rebirthian processes the personal data you share with us.

Data controller

Your personal data is processed by Rebirthian Sağlık Hizmetleri A.Ş. (Abdi İpekçi Caddesi No: 00, Nişantaşı, Şişli, 34367 İstanbul, Türkiye) as data controller.

Categories of personal data

• Identity: name, surname, date of birth, nationality and passport details for travel arrangements
• Contact: phone number, email address, country of residence and preferred contact channel
• Requests and transactions: treatments of interest, form messages, appointments, transfer and accommodation preferences
• Visual data: photos you share for your assessment and clinical photographs, protected with the same care as health data
• Special categories of data: medical history, medication, test results, diagnosis and treatment information
• Financial data: invoices and payment records
• Transaction security: IP address, cookie and system logs

Purposes of processing

• Preparing your preliminary assessment and personal treatment plan
• Arranging appointments, transfers, accommodation and interpreter services
• Managing registration and treatment at partner hospitals, and follow-up care
• Responding to your requests, questions and complaints
• Meeting health-tourism, tax and other legal obligations
• Ensuring information security
• Sending informative commercial electronic messages, if you have opted in

Collection methods and legal bases

We collect personal data through website forms, email, phone, WhatsApp and in-person meetings, by automated and non-automated means. General personal data is processed under Article 5(2) KVKK where necessary for a contract with you, our legal obligations, establishing, exercising or protecting a right, or our legitimate interests without harming your fundamental rights. Otherwise, for example for marketing, we ask for your explicit consent under Article 5(1).

Health data and clinical photographs are processed under Article 6 KVKK with your explicit consent or, where the law allows, for medical diagnosis and treatment by physicians bound by confidentiality. You may withdraw your consent at any time, without affecting earlier processing.

Transfers of personal data

Limited to these purposes, your data may be shared with our contracted partner hospitals and physicians, transfer and accommodation providers, IT infrastructure providers, legal and financial advisers and, upon request, authorised public bodies. Transfers abroad take place only under Article 9 KVKK; for health data, we obtain your explicit consent.

Retention

We keep personal data only for as long as the purpose of processing requires and applicable legislation prescribes. It is then erased, destroyed or anonymised in line with our Personal Data Retention and Destruction Policy.

Your rights under Article 11 KVKK

• To learn whether your personal data is processed and to request information about it
• To learn the purpose of processing and whether your data is used accordingly
• To know the third parties in Türkiye or abroad to whom your data is transferred
• To request correction of incomplete or inaccurate data, or its erasure or destruction under Article 7, and notification of these actions to recipients
• To object to an adverse outcome arising solely from automated analysis
• To claim compensation for damage caused by unlawful processing

How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests with information verifying your identity in writing to the address above, or by email to care@rebirthian.com from the address registered in our system. We respond free of charge within 30 days at the latest; any additional cost may be charged at the tariff set by the Personal Data Protection Board.