KVKK information notice

Under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), Defem Sağlık Turizm ve Ticaret A.Ş., as data controller, informs you as follows.

Data controller

Defem Sağlık Turizm ve Ticaret A.Ş., 19 Mayıs Mah., 19 Mayıs Cd. Şişli Plaza No:7 A-Blok K.6, 34363 Şişli/İstanbul

Personal data processed

Identity (name), contact (phone, email), customer transaction (enquiries, quotes, appointments, travel details), transaction security (IP, session logs) and, with your explicit consent, health data (photos, intake answers).

Purposes

• Responding to your enquiry and handling quotes and appointments,
• Organising travel, transfers and accommodation,
• Ensuring service quality and information security,
• Complying with legal obligations.

Legal bases

KVKK Art. 5/2 (c) establishment and performance of a contract, (ç) legal obligation, (f) legitimate interest; explicit consent under Art. 6/2 for health data.

Transfers

Your data may be transferred to our hosting, messaging, email and AI service providers (including servers located in the EU) with safeguards under KVKK Art. 9, and to authorised public bodies upon request.

The master key that protects the encryption keys is kept in Google Cloud KMS (the Netherlands), separately from the application servers; KMS does not see personal data.

Your rights (KVKK Art. 11)

You may learn whether your data is processed, request information, learn the purpose and recipients, request rectification or erasure, object to automated decisions against you and claim compensation.

Send requests via the request form. Requests are concluded within 30 days.

Last updated: 23 October 2026