Privacy Policy & Data Protection
Last updated: 2026 • TurkeySurgeryCost.org
1. Data Controller & General Information
TurkeySurgeryCost.org ("Platform", "we", "us", or "our") operates as an independent price intelligence and medical tourism cost comparison platform. We are committed to safeguarding your personal data and ensuring compliance with the European Union General Data Protection Regulation (EU GDPR 2016/679), the UK Data Protection Act 2018, the Turkish Personal Data Protection Law (KVKK No. 6698), and applicable international privacy frameworks.
2. Categories of Personal & Technical Data Collected
We collect minimal and necessary information required to deliver our calculation engine. This includes: (a) Technical Identifiers: Anonymized IP addresses, browser types, operating system details, device characteristics, and referral URLs. (b) Usage Data: Procedure selections, flight origin inputs, customized hotel length options, and calculation interactions. (c) Direct Communication Data: Name, email address, and subject matter when you submit inquiries through our contact desk.
3. Special Category & Medical Information Disclaimer
TurkeySurgeryCost.org does NOT request, process, or store sensitive electronic health records (EHR), medical photography, biometric patient identifiers, or private medical histories on our public web servers. All price calculation tools operate anonymously using mathematical benchmark algorithms based on public hospital tariff ranges.
4. Legal Basis & Purposes for Data Processing
We process your data strictly under the following lawful bases: (a) Legitimate Interest (GDPR Art. 6(1)(f)): To maintain network security, optimize website performance, prevent fraud, and deliver accurate currency conversions. (b) Explicit Consent (GDPR Art. 6(1)(a)): For optional analytical tracking cookies and direct contact form correspondence. (c) Legal Compliance (GDPR Art. 6(1)(c)): To meet legal, accounting, and regulatory obligations.
5. International Transfers & Third-Party Processors
To deliver fast, secure content globally, we utilize trusted third-party infrastructure providers including Cloudflare (CDN and DDoS mitigation) and Google Analytics 4 (anonymized usage telemetry with IP masking). All international data transfers adhere to Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Retention Periods & Security Protocols
We apply industry-standard TLS 1.3 encryption for all data in transit. Server access is restricted to authorized personnel under strict multi-factor authentication. Anonymized web telemetry logs are automatically purged after 13 months, and contact inquiry correspondence is retained only as long as necessary to resolve your request.
7. Your Statutory Rights Under GDPR & KVKK
Under applicable privacy laws, you possess the right to: (a) Request confirmation and access to your personal data, (b) Demand rectification of inaccurate data, (c) Request erasure ("Right to be Forgotten"), (d) Restrict or object to data processing, (e) Request data portability, and (f) Lodge a formal complaint with your national supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany, or KVKK in Turkey).
8. Contact Our Data Protection Officer (DPO)
To exercise any of your statutory data protection rights or request clarifications, please contact our dedicated Data Protection Officer at privacy@turkeysurgerycost.org.