Skip to main content
International Patient Desk · Aydın, Türkiye
Phone: +90 (256) 212 00 12 E-mail: international@medinova.com.tr International patient desk — English spoken.
Ask Us a Question International patient desk — English spoken.

Data Protection (GDPR & KVKK)

Medinova Hospital treats the protection of your personal and health data as part of the care we provide. This page summarises how we meet both the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR) when we deal with patients from abroad.

Data minimisation by design

The enquiry forms on this website ask only for what is needed to answer you. The message itself is never written to the website database — it exists only as an e-mail in our international patient desk mailbox. The website keeps anonymous statistics (which form, which country, whether delivery succeeded) and a salted hash of the sender's IP address for abuse prevention; the plain IP address is not stored.

Explicit consent, and proof of it

Health data is a special category of personal data. We ask you to tick a consent box before sending an enquiry, and the exact wording you agreed to is carried inside the e-mail we receive, so that the record of your consent stays with the message.

Who can see your data

Enquiries are read only by the clinical and international patient desk staff responsible for answering them. All of them are bound by medical confidentiality under Turkish law. Access to hospital information systems is role-based and logged.

International transfer

Medinova Hospital is in Türkiye, and our servers are in Türkiye. If you write to us from the EEA or the United Kingdom, sending your enquiry transfers your data to Türkiye. We rely on your explicit consent for this transfer under Article 49(1)(a) GDPR, and we tell you so on the form before you send it.

Retention

Enquiries that do not lead to treatment are deleted once they have been answered and the statutory record-keeping period has passed. Medical records created during treatment are retained for the periods set by Turkish health legislation.

Security

The site is served over HTTPS, uploaded files are stripped of embedded metadata (including any GPS coordinates in photographs), the administration area is protected by rate-limited authentication, and mail is filtered by our own gateway before delivery.

Exercising your rights

To request access, correction, erasure, restriction or portability of your data, to object to processing, or to withdraw a consent you have given, write to international@medinova.com.tr with enough information for us to identify your enquiry. We answer within 30 days. You may also complain to the Turkish Data Protection Authority (kvkk.gov.tr) or, in the EEA/UK, to your local supervisory authority.