Health MersinMersin University Hospital

Legal

Privacy Policy

Information about how we process your personal data (KVKK / GDPR).

Last updated: 2026-11-01

1. Data controller

This website (healthmersin.com) is operated for the international patient services of Mersin University Hospital. Data controller: [legal name and address of the data controller – to be confirmed]. Contact for data protection requests: [data protection contact email – to be confirmed].

2. What we collect

When you use the treatment request form we collect your name, phone number, email address, country, the area of treatment you select, the additional services you request and the information you write about your condition. This may include health data, which is special-category personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU GDPR. We process it only with your explicit consent, given by ticking the consent box.

For security, our server records technical data such as your IP address, browser type and the time of your request, and keeps a pseudonymised (hashed) IP for spam and abuse prevention.

3. Purpose and legal basis

We use your data to answer your request, prepare a treatment plan and organise your visit (KVKK Art. 5–6; GDPR Art. 6(1)(a), 6(1)(b) and 9(2)(a)), and to keep the website secure (legitimate interest).

4. Recipients

Your request is sent by email to the international patient coordination team, including the authorised health tourism intermediary Host TR (AK-1749), and, where needed for your treatment, to the relevant departments of Mersin University Hospital. Our hosting provider processes data on our behalf. Data may be transferred abroad only where necessary for your request and permitted by law.

5. Retention

Request data is kept for as long as needed to handle your request and meet legal obligations, and then deleted. [retention period – to be confirmed]

6. Cookies and analytics

This website does not use analytics, advertising or tracking cookies, and it does not load third-party scripts.

7. Your rights

Under KVKK Art. 11 and the GDPR you may request access to, correction or deletion of your data, object to processing, and withdraw your consent at any time. Please send your request through the contact form. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.