( drline.com.tr )

This Privacy and Personal Data Protection Policy (“Policy”) explains the procedures and principles regarding the processing of personal data of users and visitors within the scope of the services offered through drline.com.tr (“Site”), in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) , relevant legislation and international data protection principles.

Drline Health Tourism Consulting Services (“Drline”) adopts the protection of the privacy and security of personal data as a fundamental principle.

1. Data Controller

In accordance with the Turkish Personal Data Protection Law (KVKK), your personal data is processed by Drline Health Tourism Consulting Services as the data controller .

2. Personal Data Collected

The following personal data may be collected in connection with the services offered through the site:

2.1 Identity and Contact Data

• First name, last name
• Phone number
• Email address
• Country and city information

2.2 Health Data (Special Categories of Personal Data)

• Health information shared by the user in patient application forms
• Medical documents and information submitted as part of the treatment request.

2.3 Technical Data

• IP address
• Browser and device information
• Site usage and access logs

3. Method and Legal Basis for the Collection of Personal Data

Personal data;

• Forms on the website
• Email, telephone, and digital communication channels
• Cookies

Data is collected through this channel based on legal grounds such as the user’s explicit consent , the establishment or performance of a contract , legitimate interests , and the fulfillment of legal obligations .

4. Purposes of Processing Personal Data

The personal data collected is processed for the following purposes:

• Providing health tourism consultancy services.
• Evaluation of patient referral processes
• Responding to user requests
• Information regarding the planning of treatment processes.
• Improving service quality
• Fulfillment of legal and administrative obligations.
• Ensuring site security

Personal data will not be used for purposes other than those intended .

5. Processing of Special Categories of Personal Data

Health data is considered special categories of personal data under the Turkish Personal Data Protection Law (KVKK).

This data:

• For the sole purpose of conducting the health tourism consultancy process.
• Based on the user’s explicit consent
• In accordance with privacy and data security principles

It is processed and stored.

Health data will not be shared with third parties without explicit consent.

6. Transfer of Personal Data

Personal data;

• If explicitly provided for in the relevant legislation
• In accordance with the requests of authorized public institutions and organizations
• To the extent required by the consultancy process, in a limited and controlled manner.

This information may be shared with contracted healthcare institutions and business partners within the country.

This transfer is carried out in accordance with the principle of data minimization .

7. Storage and Security of Personal Data

Personal data;

• It is protected against unauthorized access.
• It is stored with current technical and administrative security measures.
• When the purpose for which it was processed ceases to exist, it is deleted, destroyed, or anonymized.

Drline takes all reasonable measures to ensure data security.

8. Cookie Policy

drline.com.tr may use cookies to improve user experience and analyze site performance.

Users can change their cookie preferences or disable cookies through their browser settings.

9. Third-Party Links

The site may contain links to third-party websites. Drline is not responsible for the privacy practices of these sites . It is recommended to review the privacy policies of the relevant sites.

10. Data Subject’s Rights

According to Article 11 of the KVKK (Law on Protection of Personal Data), users;

• To find out whether your personal data is being processed.
• If it has been processed, request information about it.
• Requesting data correction or deletion.
• Objection to processing activities

They have rights.

Requests regarding these rights can be submitted to Drline via the Site or through communication channels.

11. Policy Changes

Drline reserves the right to update this Privacy Policy as it deems necessary. Updates will be effective from the date they are published on the Site.

12. Communication

For any questions or requests regarding our Privacy Policy, please contact us via drline.com.tr .