INFORMED CONSENT REGARDING

THE PROTECTION AND PROCESSING OF PERSONAL DATA

1. Purpose

ROVENA TURİZM OTELCİLİK SANAYİ VE TİCARET ANONİM ŞİRKETİ (hereinafter referred to as the “Company” or “Data Controller”), in accordance with the Personal Data Protection Law No. 6698 (“KVKK Law”) and other applicable legislation, processes the personal data of individuals who receive services from the Company (hereinafter referred to as the “Guests”).

As the Data Controller, the Company informs you that your personal data which you have provided or may provide to us, as well as personal data obtained through other lawful means, may be processed within the scope of medical tourism intermediary services, medical treatment services provided by contracted hospitals and medical institutions, accommodation, transportation, travel, tourism, and other related services.

Your personal data may be processed:

  • For specific, explicit, and legitimate purposes,

  • In a manner limited to and proportionate with these purposes,

  • By ensuring that the data is accurate and up to date,

  • By being recorded, stored, preserved, updated, reorganized, disclosed to legally authorized institutions, and transferred to domestic or foreign third parties in accordance with the conditions set forth under the KVKK Law,

  • By being classified and processed through other methods stipulated under the KVKK Law.

2. Collection of Personal Data and Methods of Collection

The Company processes the Guests’ personal data for the purposes specified in this Informed Consent. In the event that the purpose of processing changes, the explicit consent of the Guest shall be obtained again.

The categories of personal data collected and processed by the Company include the following:

Identification Data

Identity card, passport, and driver’s license information including name and surname, Turkish Republic ID number, passport number, tax ID number, nationality, mother’s and father’s name, place and date of birth, gender, and signature information.

Contact Information

Telephone number, residential address, e-mail address, and other communication details.

Sensitive Personal Data

  • Biometric data,

  • Medical reports, blood type, medical history, diagnosis and treatment information, laboratory results, physical examination findings,

  • Information regarding congenital or chronic diseases and immunization records,

  • Disability status and degree of disability,

  • Criminal record and security measures where required by law,

  • Religion and blood group information stated on official identity documents.

Audio and Visual Data

Photographs, camera recordings (excluding physical space security recordings), and audio recordings such as call center voice recordings.

Photo and Video Shooting

Photographs and videos recorded before, during, or after the services provided.

3. Retention and Deletion of Personal Data

Personal data may be retained after the purpose of processing ceases if required by applicable legislation or if the Guest has given explicit consent. Otherwise, personal data shall be deleted, destroyed, or anonymized in accordance with the KVKK Law when the processing purpose no longer exists.

4. Purposes and Legal Grounds for Processing Personal Data

Personal data may be processed and transferred in accordance with Articles 5 and 6 of the KVKK Law for the following purposes:

  • Establishment and execution of service agreements,

  • Execution and coordination of medical treatment processes with contracted hospitals and medical institutions,

  • Execution of accommodation, transportation, and tourism services,

  • Transportation arrangements for arrival in and departure from Türkiye,

  • Recording and managing medical history, interview, and consent forms,

  • Sharing pre-treatment and post-treatment photographs, videos, and patient testimonials on the Company’s website and official social media accounts (including but not limited to Instagram, Facebook, LinkedIn, and YouTube) for promotional, informational, and marketing purposes.

Personal data shall be retained for the duration required under applicable legislation or until the purpose of processing ceases, and in any case for the statutory limitation period.

5. Transfer of Personal Data to Third Parties

Personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK Law, to:

  • Contracted hospitals and medical institutions,

  • The Turkish Ministry of Health and its affiliated units,

  • Social Security Institution and private insurance companies,

  • Judicial authorities, law enforcement agencies, and regulatory bodies,

  • Lawyers, consultants, accommodation and travel service providers, business partners, and suppliers,

solely for the purposes of fulfilling legal obligations and providing the services requested by the Guest.

6. Rights of the Guests

Pursuant to Article 11 of the KVKK Law, Guests have the right to:

  1. Learn whether their personal data is processed,
     b. Request information regarding the processing of their personal data,
     c. Learn the purpose of processing and whether it is used accordingly,
     d. Know third parties to whom personal data is transferred domestically or abroad,
     e. Request correction of incomplete or inaccurate personal data,
     f. Request deletion, destruction, or anonymization of personal data when the processing grounds cease to exist,
     g. Object to results arising against them through automated data processing,
     h. Claim compensation for damages arising from unlawful processing of personal data.

Requests may be submitted using the Personal Data Owner Application Form. Applications shall be concluded free of charge within thirty (30) days at the latest, depending on the nature of the request.

Declaration

The Guest declares that the personal data provided is accurate and up to date and undertakes to notify the Company of any changes. The Company shall not be held liable for any damages arising from incomplete or incorrect information provided by the Guest.

The Company reserves the right to amend this Informed Consent text in line with legislative changes.

PATIENT / GUEST

Name Surname:
 Signature:
 Date: