Your rights over your own data
Access, correction, deletion and withdrawal of consent — how to exercise them and what to expect.
Health data carries stronger protection than ordinary personal data, and the rights attached to it apply wherever the treatment happens.
What you can ask for
A copy of the personal data held about you; correction of anything inaccurate; deletion where there is no longer a legal reason to keep it; and withdrawal of a consent you previously gave.
Withdrawing consent stops future processing. It does not undo what was lawfully done beforehand, and some clinical records must be retained for a period set by law rather than by preference.
How to make the request
There is a data request route on this site that sets out where to send it and what to include. Identifying yourself is part of it, because releasing a health record to the wrong person is the failure these rules exist to prevent.
Requests are answered within the statutory period. If the answer is a refusal, it comes with the reason.
Where the rules come from
Patients in the EU are covered by the GDPR; treatment in Türkiye also falls under Turkish data protection law. Where the two differ, the stricter obligation is the one that governs the handling of your file.
The privacy policy and the cookie policy on this site state the detail, including which processors are involved and for how long each category is kept.
Topic
More in Medical records and data
- How your medical records are handledEncrypted transfer, encrypted temporary storage, transfer to the clinical record, then automatic deletion — and never on the website’s servers.
- Why the images matter more than the reportA radiology report answers the question it was asked. Rehabilitation often asks a different one — so send the study, not the summary.
