KVKK Privacy
Notice.

Data controller

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by GRS Health Tourism acting as the data controller.

Personal data processed

The following categories of data may be processed during your application:

• Identity information: first name, last name and professional title.
• Contact information: e-mail address, telephone number, country and city.
• Professional and institutional information: institution name, position, institution type, role, website and description of health tourism expertise.
• Application information: preferred language, consent records, application date and reference number.
• Transaction security information: one-way hashed IP information, browser and device information collected for security purposes.

Purposes of processing

Your personal data is processed to receive and evaluate your delegation application, determine participant eligibility, communicate with you, plan the event and institutional visits, secure the application process, manage requests and complaints, and comply with legal obligations.

Communications about the programme and future partnerships are sent only if you grant the optional communication permission in the form. Withholding this permission does not affect the evaluation of your application.

Collection method and legal basis

Your data is collected automatically or partly automatically when you complete and submit the electronic application form. Processing is based on the legal grounds under Article 5 of KVKK: necessity for the establishment or performance of a contract, compliance with the data controller’s legal obligations, and legitimate interests provided that your fundamental rights and freedoms are not harmed. Optional communications rely on your explicit consent for that purpose.

Transfer of personal data

To the extent required for the stated purposes and with appropriate security measures, your data may be shared with authorised persons within GRS Health Tourism, the host institution and programme partners involved in the event, suppliers providing hosting, e-mail and information technology services, and legally authorised public bodies.

All transfers are carried out in accordance with Articles 8 and, where applicable, 9 of KVKK.

Retention period

Your personal data is retained for the period required to evaluate the application and complete the event processes, and afterwards only for periods arising from applicable legislation, dispute management and limitation periods. When the retention period ends, the data is deleted, destroyed or anonymised in accordance with the law.

Your rights under KVKK

Under Article 11 of KVKK, you have the right to:

• learn whether your personal data is processed and request information if it is,
• learn the purpose of processing and whether the data is used in accordance with that purpose,
• know the third parties in Türkiye or abroad to whom your data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of data under the conditions set out by law,
• request notification of correction, deletion or destruction to third parties to whom the data was transferred,
• object to an adverse result arising from analysis performed solely by automated systems,
• claim compensation for damage caused by unlawful processing.

You have these rights under KVKK.

Exercising your rights

You may send your request, clearly stating your identity and request, to info@grsmedicaltourism.com or submit it in writing to the postal address above. Applications are concluded as soon as possible and no later than 30 days, depending on the nature of the request.

For detailed information about the transparency obligation under KVKK, visit the official website of the Turkish Personal Data Protection Authority .