Privacy Policy

At Istanbul Medical Center (“Medical Center,” “we,” “us,” or “our”), we understand the importance of privacy and aim to be transparent about how we collect, use, disclose, transfer, and store your information. This Privacy Policy provides a general framework regarding our data practices. It applies to our website, online operations, and any services provided therein (collectively referred to as “our Services”).

We may update this Privacy Policy from time to time for various reasons, including to reflect changes in laws and regulations, industry practices, or technological developments. This policy applies regardless of how you access our Services—via computer, mobile device, tablet, TV, or any other method, including in-person visits.

By using our Services, you agree to the practices described in this Privacy Policy. Therefore, it is important that you read it carefully. We also encourage you to regularly review this policy for any updates. If we make significant changes, we will notify you through a notice on the relevant Services. Continued use after such updates means you accept the revised policy. You can always find the most current version of this Privacy Policy on our website, and check the “Effective Date” at the top of the page.

What Information Do We Collect?

Information You Provide Directly

Some of our Services may require you to provide information directly to us. For example:

• • When applying for a medical examination or other health services, we require personal identification details such as name, surname, and national ID number.

• • When scheduling an appointment through the Online Transactions section of our website.

• • When submitting a job application through the Human Resources section, we may request personal identity, educational background, and employment history.

Information Related to Your Use of Our Services

In addition to the information you provide, we may collect data related to your use of our Services, such as:

• • Identity Information: Name, surname, ID number, etc.

• • Health Information: Medical treatment details.

• • Contact Information: Email address, phone number, etc.

Information from Third-Party Sources

Where permitted by law, we may collect information about you from publicly available or commercially available sources and combine it with other data we have collected. For service purposes, we may also receive your personal information from relatives or third parties acting on your behalf.

Other Information We May Collect

With your consent, we may also collect other data about your health condition or your use of our Services. You may choose not to provide certain information; however, this may limit your ability to benefit from some of our Services.

Information Collected Automatically

When you use our website or Services, we may automatically collect certain information such as:

• • Your Internet Protocol (IP) address;

• • Usernames and related data;

• • Phone number and SIM card ID;

• • Device identifiers such as IMEI or MEID;

• • Geographic location based on GPS/Wi-Fi/network data.

When applicable, we anonymize data to protect your identity, for example by masking portions of your IP address.

How Do We Collect Your Information?

We collect your information through multiple channels, including but not limited to:

• • Our website,

• • Online appointment systems,

• • Job application submissions via our Human Resources section,

• • Our call center,

• • In-person visits to our facilities.

Information may be collected verbally, in writing, or electronically.

How Do We Use Your Information?

We may use the information we collect for purposes such as:

• • Registering you for a service;

• • Providing the requested services;

• • Personalizing services based on your history with us;

• • Sending promotional or sponsored content and communications;

• • Conducting surveys and obtaining feedback for analysis;

• • Understanding and improving our Services and developing new offerings;

• • Organizing contests, sweepstakes, or promotions as permitted by law;

• • Other purposes with your explicit consent.

We may combine data collected from various sources to use in line with this Privacy Policy.

Who Do We Share Your Information With?

We do not share your information with third parties for their independent marketing or business purposes without your consent. However, we may share data with:

• • Affiliates: We may share information with Istanbul Medical Center affiliates for purposes stated in this policy.

• • Service Providers: We may disclose information to companies that provide services on our behalf (e.g., billing, email delivery).

• • Relatives / Caregivers: We may share health-related information with first-degree relatives in accordance with applicable healthcare regulations.

• • Legal or Protective Reasons: We may disclose your information:
    
    • • To comply with legal obligations or court orders;
    • • To enforce our policies;
    • • To protect the rights, safety, or property of Istanbul Medical Center, affiliates, business partners, or patients.

• • Corporate Transactions: In mergers, acquisitions, or bankruptcy, your information may be disclosed to third parties.

• • With Your Consent or Request: We may also share information as per your explicit request or approval.

How Do We Protect Your Information?

To safeguard the confidentiality, integrity, and availability of patient data:

• • Secure software and hardware systems are established and continuously maintained.

• • Resources are allocated for uninterrupted service provision.

• • Staff are trained on data protection responsibilities, reinforced by employment contracts.

• • A data backup system is in place, with designated responsibilities.

• • Access to hospital information systems (read, modify, delete, add) is restricted.

• • Medical records are only shared with patients, authorized relatives, government institutions per healthcare regulations, or judicial authorities when required.

Our information security is based on three core principles: confidentiality, integrity, and authorized access.

Who Controls Your Data?

In accordance with the Turkish Law on the Protection of Personal Data No. 6698, the Data Controller is:

Istanbul Medical Center

As the Data Controller, we collect and process your personal data under the obligations and rights defined by applicable law.

Data Retention

We take reasonable steps to ensure your personal data is retained only as long as necessary for the purpose for which it was collected, or as required by applicable law or contracts.

Your Rights Regarding Your Personal Data

You have the right to:

• • Learn whether your data is being processed,

• • Request information about the processing,

• • Learn the purpose and whether your data is being used in accordance with that purpose,

• • Learn the third parties (domestic or international) to whom your data is disclosed,

• • Request correction if your data is incomplete or inaccurate,

• • Request deletion or destruction of your data if it’s no longer necessary or is outdated,

• • Request notification of corrections or deletions to third parties with whom data was shared.

You may exercise these rights at any time by contacting us.

Principles We Adhere to When Processing Your Data

At Istanbul Medical Center, we process personal data in accordance with the following principles:

• • Lawfulness and fairness;

• • Accuracy and up-to-date processing;

• • Specified, legitimate purposes;

• • Processing that is limited and proportionate to the stated purpose;

• • Retention limited to the required duration.

Third-Party Links and Services

Our Services may contain links to third-party websites or services beyond our control. We are not responsible for the privacy practices of these sites. Please review their privacy notices carefully.

If You Are Underage

At Istanbul Medical Center, we are especially concerned about the privacy and security of minors. Our website is intended for general public use and not for individuals under legal age.