Legal
Data access and deletion
How to exercise your data rights.
What you can ask for
A copy of the personal data we hold about you. Correction of anything inaccurate. Deletion, where there is no legal duty requiring us to keep it. Restriction of processing. Withdrawal of consent. Objection to processing.
These rights come from KVKK Article 11 and, for visitors in the EEA, from GDPR Articles 15 to 22.
How to make a request
Write to the international office stating what you are asking for and giving enough detail for us to identify your records — the email address you used, and the approximate date of contact or admission.
We will verify your identity before releasing anything. That step protects you, and we will ask for it even if it is inconvenient.
How long it takes and what it costs
Requests are answered within 30 days. Where a request is complex we will tell you within that period and explain the delay rather than let it lapse.
There is no charge for a first copy. Repeated or manifestly excessive requests may carry a reasonable administrative fee, which we will state before proceeding.
Where deletion is limited
Medical records are subject to statutory retention periods, and we cannot delete a clinical record before that period expires even at your request. We will tell you which retention rule applies and when it ends.
An enquiry that did not lead to treatment is not a medical record and can be deleted on request.
If you are not satisfied
You may complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu). In the EEA you may complain to the supervisory authority in your own country.
You do not have to raise it with us first, though we would rather have the chance to fix it.
