GDPR

This page is extra information for international patients and form users in the EU/EEA and the UK. Our Turkish KVKK duties are described on the KVKK page; read both together.

Pre-appointment contact: Art. 6(1)(b) contract or steps prior to contract. Clinic operations and security: Art. 6(1)(f) legitimate interests. Legal archives: Art. 6(1)(c).

Health data are a special category (Art. 9). We process them with explicit consent (Art. 9(2)(a)) and/or for healthcare (Art. 9(2)(h)), by doctors and authorised staff under professional secrecy.

The clinic and primary servers are in Türkiye. Transfers from the EU are assessed in light of your request (submitting a form), performance of a contract and appropriate safeguards (such as standard contractual clauses where required).

Your own email or messaging provider may process data in its country; that follows the channel you chose.

You have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect processing that was lawful before you withdrew.

Contact info@lumaclinicturkiye.com. We may verify your identity. You may also lodge a complaint with your local supervisory authority (an EU DPA or the ICO).

The clinic is not established in the EU. If an Art. 27 representative or a data-protection officer is appointed, their details will appear here and at the clinic. Until then, write to the controller at ${v.email}.

We keep data for the appointment and treatment relationship and for statutory health-archive periods. We do not build marketing profiles.