Your personal data is processed by the data controller below:

As part of our health tourism and healthcare services, we may collect and process the following categories of personal data:

Your personal data may be processed for the following purposes:

• To evaluate your health tourism request.
• To provide preliminary medical assessment.
• To verify your identity and prevent unauthorized use of your personal data.
• To plan and provide healthcare, medical consultation, diagnosis, treatment, and care services.
• To arrange doctor evaluations and medical consultations.
• To organize appointments, treatment planning, accommodation, transfer, and translation services.
• To communicate with you via phone, WhatsApp, e-mail, SMS, social media, or other communication channels.
• To provide appointment reminders and service information.
• To plan and manage daily operations, internal processes, and clinic services.
• To supply special medication, medical equipment, or medical devices where necessary.
• To issue invoices and carry out financial transactions.
• To manage private insurance, payer institution, and contracted institution processes.
• To fulfill legal, administrative, and regulatory obligations.
• To share required information with the Ministry of Health, authorized public institutions, and official authorities where required by law.
• To respond to requests, audits, and inspections from regulatory and supervisory authorities.
• To carry out risk management, quality improvement, patient satisfaction, and service development activities.
• To analyze and improve the healthcare and health tourism services we provide.
• To respond to your questions, requests, complaints, and feedback.
• To ensure the legal, technical, and commercial security of our website, systems, applications, patients, employees, and business partners.
• To carry out advertising, promotional, informational, and marketing activities where your consent is obtained.
• To conduct internal reporting, auditing, compliance, and archive processes.

Health data is considered sensitive personal data. Therefore, your health-related information is processed only when necessary and in accordance with applicable legislation.

Your health data may be processed for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services, health tourism processes, and financing of healthcare services.

Your health data will not be shared with unauthorized third parties.

Where required by applicable law, your explicit consent may be obtained for the processing and transfer of your health data.

Your personal data may be processed based on one or more of the following legal grounds:

• Your explicit consent.
• Processing being clearly provided for by law.
• Necessity for the protection of life or physical integrity where the data subject is unable to express consent.
• Necessity for the establishment or performance of a contract.
• Necessity for compliance with legal obligations.
• Personal data being made public by the data subject.
• Necessity for the establishment, exercise, or protection of a legal right.
• Legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed.
• Processing by authorized persons or institutions under confidentiality obligations for the purposes of public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of healthcare services and their financing.

Your personal data may be collected verbally, in writing, visually, electronically, physically, or digitally through the following channels:

• Website contact forms.
• WhatsApp, phone, SMS, MMS, and e-mail communications.
• Social media messages.
• Online advertising and application forms.
• Appointment and patient registration systems.
• Face-to-face meetings.
• Call center records.
• Patient service records.
• Healthcare institution records.
• Private insurance or payer institution records.
• Laboratory, test, diagnosis, and examination processes.
• Cookies and similar digital technologies.
• Camera systems in common areas where applicable.
• Written forms, printed documents, and digital forms.
• Job application forms and CV submissions where applicable.

Your personal data may be transferred, only where necessary and in accordance with applicable legislation, to the following persons, institutions, and organizations:

• Doctors and healthcare professionals.
• Partner hospitals, clinics, medical centers, and healthcare institutions.
• Laboratories and medical service providers.
• Private insurance companies and payer institutions.
• Banks, payment service providers, and financial institutions.
• Transfer, accommodation, translation, travel, and organization service providers.
• Software, hosting, CRM, call center, IT, cyber security, and digital communication service providers.
• Business partners, suppliers, consultants, auditors, and legal advisors.
• Domestic or international shareholders, subsidiaries, affiliates, or group companies where applicable.
• Authorized public institutions and official authorities.
• Ministry of Health and other regulatory or supervisory institutions where required by law.
• Real or legal third parties from whom services are received or with whom cooperation is carried out for business operations.

Your personal data is shared only to the extent necessary for the relevant purpose and subject to appropriate technical and administrative measures.

As Green Village Medical provides health tourism services to patients and prospective patients from different countries, service and communication processes may involve international data transfers.

In addition, digital service providers such as WhatsApp, e-mail providers, social media platforms, cloud-based software, CRM systems, advertising platforms, analytics tools, and hosting providers may process or store data on servers located outside Türkiye.

Your personal data may be transferred abroad where your explicit consent is obtained or where the conditions required by applicable data protection legislation are met.

Your personal data is retained only for the period necessary for the purposes for which it was collected and for the duration required by applicable legal retention periods.

Personal data may be stored physically or digitally in company archives, information systems, CRM systems, patient records, accounting records, and other secure systems.

Green Village Medical takes appropriate technical and administrative measures to protect your personal data against unauthorized access, unlawful processing, loss, misuse, disclosure, alteration, or destruction.

These measures may include:

• Access authorization and restriction.
• Confidentiality obligations.
• Secure communication channels.
• Digital security measures.
• Data minimization.
• Internal policies and procedures.
• Staff awareness and authorization controls.
• Secure storage and archive processes.
• Technical measures for website, system, and application security.

As a data subject, you may have the following rights regarding your personal data:

• To learn whether your personal data is being processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing and whether your data is used in accordance with that purpose.
• To know the third parties to whom your personal data has been transferred domestically or abroad.
• To request correction of incomplete or inaccurate personal data.
• To request deletion or destruction of your personal data under applicable conditions.
• To request notification of correction, deletion, or destruction operations to third parties to whom your personal data has been transferred.
• To object to any unfavorable result arising from automated analysis of your personal data.
• To claim compensation if you suffer damage due to unlawful processing of your personal data.

You may submit your requests regarding your personal data through the following communication channels:

Your requests will be evaluated and responded to within the period required by applicable law.

By filling out contact forms on our website, making an appointment, contacting us through WhatsApp, phone, e-mail, social media, or other communication channels, or by sharing documents, photographs, videos, or medical information with us, you may provide consent for the processing of your personal data and, where necessary, your sensitive personal data including health data.

Your personal and sensitive personal data may be processed and transferred domestically or internationally for the purposes of preliminary medical evaluation, treatment planning, appointment organization, doctor consultation, accommodation, transfer, translation, health tourism consultancy, healthcare services, and related operational processes.

Where you provide separate consent, your personal data may also be processed for advertising, promotional, informational, and marketing communication purposes.

Please note that in some cases, if the necessary personal data or required consent is not provided, certain services may not be provided partially or completely.

Protecting the privacy of visitors to our website is one of our main principles.

Personal data obtained during your visit to our website may be processed in accordance with applicable data protection legislation and this Privacy Policy.

Website data may be processed for the following purposes:

• To ensure the proper functioning of the website.
• To improve website performance and user experience.
• To conduct website analytics.
• To ensure legal, technical, and commercial security.
• To carry out necessary business processes.
• To provide, recommend, and promote our services where legally permitted.
• To manage communication and request processes.
• To support operational, commercial, and service strategies.

We use cookies to help you benefit from our website efficiently and to improve your user experience.

Cookies are small text files stored on your device or network server through browsers by the websites you visit.

The main purposes of using cookies on our website are:

• To ensure the proper functioning of the website.
• To improve the functionality and performance of the website.
• To improve our services.
• To personalize website features according to your preferences.
• To analyze website usage.
• To support advertising and marketing activities where consent is obtained.
• To ensure the legal and technical security of the website, users, and Green Village Medical.

Our website may use third-party tools and services such as:

• Google Analytics.
• Google Ads.
• Meta/Facebook Pixel.
• Instagram advertising tools.
• Browser-based analytics tools.
• CRM and digital communication tools.
• Similar advertising, analytics, and performance measurement technologies.

These third-party tools may process data through cookies or similar technologies in accordance with their own privacy policies.

You can manage, delete, or block cookies through your browser settings.

If you choose to block or delete cookies, some parts of our website may not function properly or your user experience may be affected.

Cookie settings can generally be managed through browsers such as:

• Google Chrome.
• Safari.
• Mozilla Firefox.
• Microsoft Edge.
• Opera.
• Internet Explorer.

Unless you change your cookie settings through your browser or available cookie preference tools, you may be deemed to have accepted the use of cookies where permitted by applicable law.