Privacy Policy

Medworld Clinic – Health & Rehabilitation Center

Last Updated: 16 October 2026

1. Introduction

Welcome to Medworld Clinic (https://medworldclinic.com).

At Medworld Clinic, protecting the privacy, confidentiality, and security of personal information is an essential part of our commitment to responsible healthcare services.

This Privacy Policy explains how MEDWORLD SAĞLIK HİZMETLERİ ANONİM ŞİRKETİ, operating under the Medworld Clinic brand, collects, uses, stores, shares, and protects personal data through our website, communications, patient enquiries, and healthcare-related services.

This policy has been prepared with reference to the Turkish Personal Data Protection Law No. 6698 (KVKK), the European Union General Data Protection Regulation (GDPR), where applicable, and relevant Turkish healthcare and patient confidentiality requirements.

We process personal data lawfully, fairly, transparently, and only for specified, legitimate purposes.

2. Data Controller

The data controller responsible for the processing described in this policy is:

MEDWORLD SAĞLIK HİZMETLERİ ANONİM ŞİRKETİ

Operating Brand: Medworld Clinic – Health & Rehabilitation Center

Address: Meltem Mahallesi, Sakıp Sabancı Bulvarı, Rixos Otel Sitesi No:3, Muratpaşa, Antalya, Türkiye

Tax Number (VKN): 6141043770

MERSIS Number: 0614104377000001

Website: https://medworldclinic.com

Email: info@medworldclinic.com

Telephone: +90 536 774 71 07

For services delivered by independent healthcare providers, hotels, agencies, or affiliated companies, the relevant organisation may act as a separate data controller or processor, depending on its role.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

Visits to our website.
Contact and consultation request forms.
Medical and rehabilitation enquiries.
Appointment requests and patient registration.
Healthcare, wellness, and rehabilitation services.
Telephone, email, WhatsApp, and other communications.
International patient coordination.
Accommodation and transportation arrangements associated with treatment, where applicable.
Customer service and feedback.
Digital marketing activities and website analytics, where legally permitted.

Additional privacy notices or consent forms may apply to specific medical procedures, patient records, or other processing activities.

4. Personal Data We Collect

Depending on your interaction with Medworld Clinic, we may collect the following categories of information.

4.1 Identification and Contact Information

Full name.
Date of birth and age, where necessary.
Nationality and country of residence.
Email address.
Telephone number.
Postal or contact address.
Identification or passport details where legally required.

4.2 Medical and Health Information

Where necessary for medical enquiries or healthcare services, we may process:

Medical history and relevant health conditions.
Symptoms and treatment requests.
Diagnoses and clinical assessments.
Medical reports and laboratory results.
Imaging, scans, and diagnostic records.
Medication information and allergies.
Treatment plans and rehabilitation progress.
Information voluntarily submitted through consultation forms or communications.

Health-related information is considered sensitive or special-category personal data and is subject to enhanced legal protection.

4.3 Appointment and Service Information

Requested medical services or programmes.
Appointment dates and preferences.
Consultation history.
Treatment arrangements.
Relevant accommodation and transfer preferences.
Information necessary to coordinate healthcare services.

4.4 Technical and Website Information

When you visit our website, certain technical information may be collected, including:

IP address.
Browser and device information.
Operating system.
Website usage and navigation data.
Referral sources.
Cookie identifiers and consent preferences.
Security and server logs.

Further information is provided in our Cookie Policy.

4.5 Payment and Transaction Information

Where relevant, we may process:

Billing and invoice details.
Payment amounts and transaction references.
Payment status.
Refund and cancellation information.
Information required for accounting and legal compliance.

Payment card information may be processed by authorised payment service providers in accordance with their security and privacy requirements.

5. How We Collect Personal Data

We may collect personal information:

Directly from you through website forms.
Through email, telephone, WhatsApp, or other communication channels.
During medical consultations and patient registration.
Through documents and medical records you voluntarily provide.
From authorised representatives or healthcare professionals, where legally permitted.
Through website cookies and analytics technologies, subject to applicable consent requirements.
From service providers involved in your care or arrangements, where lawful and necessary.

We aim to collect only the information relevant and necessary for the intended purpose.

6. Purposes of Processing Personal Data

We may process personal information to:

Respond to enquiries and consultation requests.
Assess requests for medical and rehabilitation services.
Arrange appointments and coordinate treatment.
Provide healthcare services and maintain necessary medical records.
Communicate with patients before, during, and after treatment.
Coordinate international patient services, including accommodation and transportation where requested.
Prepare quotations, invoices, and payment records.
Respond to complaints and service-related requests.
Maintain website security and functionality.
Improve service quality and operational processes.
Meet legal, regulatory, accounting, and healthcare obligations.
Protect the rights, safety, and legitimate interests of patients and our organisation.
Conduct marketing communications where permitted by law and subject to the required consent or other applicable legal conditions.

We do not use personal health information for unrelated advertising or behavioural profiling without a separate valid legal basis and the necessary safeguards.

7. Legal Bases for Processing

Personal data is processed only where an appropriate legal basis exists under applicable law.

Depending on the processing activity, these bases may include:

Your explicit consent, where required.
The necessity of processing for entering into or performing a contract.
Compliance with legal obligations.
The establishment, exercise, or protection of legal rights.
Legitimate interests, where legally permitted and not overridden by your fundamental rights and freedoms.
Other grounds expressly recognised by applicable data protection legislation.

Health information and other special-category personal data are processed only when the additional conditions established by the KVKK and, where applicable, Article 9 of the GDPR are satisfied.

These conditions may include legally authorised healthcare purposes, medical diagnosis, treatment, care management, or explicit consent, depending on the circumstances.

Consent is not treated as the legal basis for every processing activity. Where consent is required, it must be freely given, specific, informed, and capable of withdrawal.

8. Protection of Medical and Sensitive Information

We recognise that medical information requires a particularly high level of confidentiality.

Medworld Clinic applies appropriate organisational and technical safeguards to protect health-related personal data.

These may include:

Access restrictions based on professional responsibilities.
Confidentiality obligations for authorised personnel.
Secure handling of medical documentation.
Access monitoring and appropriate authentication.
Data minimisation and controlled retention.
Security measures for electronic records.
Procedures for responding to security incidents.

Medical information is accessible only to personnel or service providers with a lawful and legitimate need to process it.

We do not intentionally transmit diagnoses, medical records, treatment details, or other sensitive health information to advertising platforms for behavioural targeting.

9. Sharing Personal Data With Third Parties

Personal data may be shared, where lawful and necessary, with:

Authorised doctors, healthcare professionals, and medical service providers.
Laboratories, diagnostic centres, and other healthcare institutions.
Technology, hosting, and IT security providers.
Appointment management and communication service providers.
Payment processors, accountants, and professional advisers.
Hotels, transportation providers, and travel coordinators when relevant to requested arrangements.
Insurance providers, where necessary and legally permitted.
Public authorities, regulators, and courts where disclosure is legally required.
Affiliated or partner organisations involved in the requested service, subject to an appropriate legal basis.

We do not sell patient medical records or personal health information.

Third-party recipients are expected to handle personal information in accordance with applicable legal obligations and appropriate confidentiality and security requirements.

10. International Transfers of Personal Data

Medworld Clinic provides services to patients from Türkiye and other countries.

Certain activities may involve the transfer of personal data across national borders.

For example, international transfers may arise from:

Communication with patients living abroad.
International patient coordination.
Technology and cloud service providers.
Cross-border healthcare arrangements.
Communication platforms and authorised service partners.

Where international transfers occur, we seek to comply with the applicable requirements of the KVKK and GDPR.

Depending on the circumstances, transfers may require an adequacy decision, appropriate contractual safeguards, another legally recognised transfer mechanism, or a specific statutory exception.

Where required, additional safeguards are applied to special-category personal data.

We do not assume that the use of an international service provider automatically makes a transfer lawful.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods depend on:

The category of personal data.
The nature of the healthcare service.
Applicable medical record retention obligations.
Accounting and tax requirements.
Contractual obligations.
Legal claims and statutory limitation periods.
The purpose of the processing.

Medical records may be subject to specific statutory retention requirements.

When personal data is no longer required, it is deleted, destroyed, or anonymised in accordance with applicable legislation and our data retention procedures.

12. Website Cookies and Tracking Technologies

Our website may use cookies and similar technologies to support functionality, security, user preferences, analytics, and marketing activities.

Non-essential cookies are used only where legally permitted and, when required, after obtaining consent.

You can manage your cookie preferences through the cookie settings available on our website.

For further information, please read our Cookie Policy:

https://medworldclinic.com/cookie-policy/

13. Communication Through WhatsApp, Email and Telephone

Visitors and patients may contact Medworld Clinic through WhatsApp, email, telephone, and other available communication channels.

When using these services, we may process your contact details, correspondence, appointment requests, and information you choose to share.

Please avoid sending highly sensitive medical information through unsecured communication channels unless an appropriate secure method has been provided.

Third-party communication platforms may independently process certain technical or account information in accordance with their own privacy policies.

Where communication involves health-related personal data, we apply the relevant legal conditions and confidentiality requirements.

Marketing messages are sent only where the applicable consent and electronic communications requirements are satisfied.

14. Marketing Communications

Where legally permitted, we may contact individuals about Medworld Clinic services, programmes, events, or relevant updates.

Marketing activities may involve:

Email communications.
SMS messages.
WhatsApp communications.
Digital advertising.
Information about healthcare and wellness programmes.

Where required, we obtain the appropriate marketing consent before sending promotional communications.

You may opt out of marketing communications using the unsubscribe mechanism provided or by contacting us.

Withdrawing marketing consent does not prevent us from sending essential communications relating to requested services, appointments, or legal obligations.

15. Your Data Protection Rights

Depending on the applicable legislation, you may have rights concerning the processing of your personal data.

Under Article 11 of the Turkish Personal Data Protection Law (KVKK), these may include the rights to:

Learn whether your personal data is processed.
Request information about processing activities.
Learn the purposes of processing and whether data is used accordingly.
Know the third parties to whom personal data has been transferred, domestically or internationally.
Request correction of incomplete or inaccurate data.
Request deletion or destruction where the legal conditions are satisfied.
Request notification of relevant corrections or deletions to third parties.
Object to certain adverse outcomes resulting exclusively from automated analysis.
Claim compensation where you suffer damage due to unlawful processing.

Where the GDPR applies, additional or corresponding rights may include:

Access.
Rectification.
Erasure.
Restriction of processing.
Data portability.
Objection to processing.
Withdrawal of consent.
Rights relating to certain automated decisions.
The right to lodge a complaint with a competent supervisory authority.

These rights are subject to applicable legal requirements and exceptions.

You can submit a request by contacting info@medworldclinic.com.

We will assess and respond to requests within the time limits established by the applicable legislation.

16. Children’s Personal Data

We recognise the importance of protecting children’s personal information.

Where healthcare services are provided to minors, personal data is processed in accordance with applicable healthcare, patient rights, parental responsibility, and data protection requirements.

Where parental or guardian authorisation is legally required, appropriate procedures are followed.

We do not knowingly use children’s health information for behavioural advertising.

Parents or legal guardians may contact us regarding concerns about the processing of a child’s personal data.

17. Data Security

We implement appropriate technical and organisational security measures designed to protect personal information against:

Unauthorised access.
Accidental loss or destruction.
Unlawful disclosure.
Unauthorised modification.
Misuse and security incidents.

Measures may include secure connections, access controls, confidentiality arrangements, security updates, backup procedures, and incident management processes.

However, no internet-based transmission or electronic storage system can be guaranteed to be completely secure.

18. Third-Party Websites and Services

Our website may contain links to external websites, social media platforms, payment providers, and other third-party services.

These services may have their own privacy policies and data processing practices.

We encourage users to review the relevant privacy notices before submitting personal information to third-party services.

Medworld Clinic is not responsible for the independent privacy practices of third parties outside our control.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes in legislation or regulatory requirements.
Updates to our healthcare services.
Changes in website functionality.
Changes in data processing activities.
New security or privacy measures.

The most recent version will be published on this page with its updated revision date.

Where required by law, we will provide additional notice or obtain renewed consent for material changes.

20. Contact Information

For questions, concerns, or requests relating to personal data protection, please contact: