Privacy Policy

Privacy Policy and Personal Data Protection Notice
Last updated: 23.10.2026
A. Privacy Policy
At Promed Clinic, we process the personal data of everyone who contacts us with care and only to the extent necessary. This page explains which information we receive when you reach us through our website, our social media and advertising forms, WhatsApp, telephone or e-mail, what we use it for, with whom we share it, and what your rights are.
In short:
·       We receive your information only when you contact us, and only to the extent you provide it.
·       We use your information to inform you, to prepare a preliminary assessment and an offer, to organise your appointment and travel, and for your follow-up after treatment.
·       We send campaign and information e-mails only to those who have separately agreed to receive them; every e-mail contains a one-click unsubscribe link.
·       We do not sell or rent your data, and we do not give it to third parties for marketing purposes.
·       You may ask us to delete your information at any time.
B. Personal Data Protection Notice (KVKK)
This section has been prepared in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu, "the Law") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
1. Data controller
Promed Clinic Sağlık Hizmetleri Ticaret Anonim Şirketi ("Promed Clinic")
Address: Yeşilova Mah. Yeşilova Yan Yolu Cad. Rumeli Üniversitesi No: 44 B, Küçükçekmece / İstanbul, Türkiye
MERSİS No: 0733096148500001 · Trade Registry No: 309803-5 · Tax office / number: Küçükçekmece / 7330961485
E-mail: info@promedclinic.com.tr · Telephone: +90 549 449 93 54
2. Personal data we process
When you contact us, we process the following data to the extent you share it:
·       Identity data: first name, last name, age.
·       Contact data: telephone, e-mail, country/city, preferred language and contact channel.
·       Request data: the treatment you are interested in, your message, your planned dates, budget/package preferences, notes of our conversations.
·       Health data (special category of personal data): photographs you send for a preliminary assessment, descriptions of your hair loss, dental or aesthetic condition, previous treatments and medical history, allergy and medication information. This data is processed only if you share it and only with your explicit consent.
·       Travel and accommodation data: passport details, flight and hotel information when you come for treatment.
·       Marketing preferences: your consent or refusal regarding campaign communications, e-mail open and click information.
·       Transaction security and website usage data: IP address, device/browser information, cookie data (see D).
·       Advertising platform data: your form entries submitted through Meta (Facebook/Instagram) lead forms and information on the advertisement/campaign the form came from.
3. Method of collection and legal grounds
Your personal data is collected through the forms on our website, the live chat assistant, Meta (Facebook/Instagram) lead forms, WhatsApp, telephone, e-mail and face-to-face meetings at the clinic, partly by automated means (forms, CRM) and partly by non-automated means (telephone notes).
Legal grounds (Articles 5 and 6 of the Law):
·       Contacting you at your request, preparing a preliminary assessment and an offer, organising appointments and travel: processing directly related to the conclusion or performance of a contract (Art. 5/2-c).
·       Invoicing, record-keeping and notification obligations: fulfilment of a legal obligation (Art. 5/2-ç).
·       Website security, fraud prevention, measurement of service quality: legitimate interest (Art. 5/2-f).
·       Campaign and information e-mails/SMS/WhatsApp messages: explicit consent (Art. 5/1), obtained separately, see C.
·       Your health data: explicit consent (Art. 6/3-a) and/or processing by physicians and healthcare staff bound by professional secrecy for the purposes of medical diagnosis, treatment and care services (Art. 6/3-e).
·       Transfer abroad: see 5.
4. Purposes of processing
·       Responding to your request, providing information and a price offer, carrying out a preliminary assessment.
·       Organising appointments, treatment plans, accommodation and transfers.
·       Follow-up after treatment and patient communication.
·       If you have consented: informing you about our treatments, seasonal campaigns and offers (e-mail, SMS, WhatsApp).
·       Measuring service quality, handling complaints and requests.
·       Fulfilling our legal obligations and responding to requests from competent authorities.
·       Ensuring the security and operation of our website.
5. To whom and for what purpose we transfer data
·       Clinic physicians and healthcare staff: for assessment and treatment.
·       Our service providers (acting as data processors): customer relationship management software (CRM) Bitrix24, e-mail and messaging infrastructure providers, call centre/telephony infrastructure, web hosting, hotel and transfer companies (patients only), accounting/finance services. These providers process your data only on our instructions and for purposes limited by contract.
·       Advertising and analytics platforms: limited technical data to Meta and Google for advertising measurement, depending on your cookie preferences (see D).
·       Competent public authorities and institutions: in case of a lawful request.
We never sell or rent your data to any third party, nor do we give it away for marketing purposes.
Transfer abroad: Some of the service providers we use (CRM, e-mail sending infrastructure and corporate e-mail service) have their servers outside Türkiye. These transfers are carried out within the framework of Article 9 of the Law, on the basis that they are necessary for contacting you at your request and for applying pre-contractual measures (Art. 9/6-b) and on the basis of the explicit consent we collect on our forms (Art. 9/6-a), with the necessary safeguards in place. Communication with our patients abroad inherently involves a transfer abroad.
6. Retention period
We keep your data for as long as the purpose of processing requires and for the retention periods laid down in the applicable legislation:
·       Persons who contacted us but did not become patients: 3 years from the last contact.
·       Patient records: the periods set out in healthcare legislation.
·       Marketing consent/refusal records: 3 years from the end of the consent (Regulation, Art. 13/2).
When the period expires, the data is deleted, destroyed or anonymised (Art. 7 of the Law).
7. Your rights (Article 11 of the Law)
By applying to the data controller, you have the right to:
a) learn whether your personal data is being processed,
b) request information if it has been processed,
c) learn the purpose of processing and whether the data is used in accordance with that purpose,
d) know the third parties to whom your data has been transferred, in Türkiye or abroad,
e) request correction if the data is incomplete or inaccurate,
f) request deletion or destruction of the data under the conditions set out in Article 7 of the Law,
g) request that the operations under (e) and (f) be notified to the third parties to whom the data has been transferred,
h) object to a result arising against you from the analysis of the processed data exclusively by automated systems,
i) claim compensation if you suffer damage due to unlawful processing.
How to apply: You can send your requests by e-mail to info@promedclinic.com.tr or in writing to Yeşilova Mah. Yeşilova Yan Yolu Cad. Rumeli Üniversitesi No: 44 B, Küçükçekmece / İstanbul, Türkiye (Article 13 of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller). Your application is concluded free of charge within 30 days at the latest. If you consider our reply insufficient, you have the right to lodge a complaint with the Personal Data Protection Board (Article 14 of the Law).
If you reside outside Türkiye, you may have additional rights under the data protection legislation of your country of residence; you can exercise these rights through the same contact channels.
8. Data security
In accordance with Article 12 of the Law, we apply technical and administrative measures such as access authorisation, encrypted connections, staff confidentiality obligations and supplier agreements to prevent unauthorised access to your data.
C. Marketing Communication Consent (Commercial Electronic Messages)
For us to send you information about our treatments, seasonal campaigns and offers by e-mail, SMS or WhatsApp, you must give your separate and explicit consent (Law No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages, Articles 5–7). Consent is given by you ticking the unticked box on the form; your consent is recorded together with your name, surname and contact address and, for recipients in Türkiye, is also registered in the Message Management System (İYS).
·       Not giving consent does not prevent you from receiving information and offers relating to your request (Regulation, Art. 6/1 and Art. 7/9).
·       Every e-mail contains a one-click unsubscribe link at the bottom; for SMS/WhatsApp, the opt-out method is stated in the message. Your opt-out is applied within 3 business days at the latest (Regulation, Art. 9–10). Recipients in Türkiye may also exercise their right to opt out through İYS.
·       Sender address of campaign e-mails: campaign@news.promedclinic.com.tr.
D. Cookies
Our website uses strictly necessary cookies (session, security, reCAPTCHA) and, depending on your preference, analytics/advertising cookies (for example Google Analytics, Meta Pixel). Analytics and advertising cookies run only if you give consent in the cookie notice; you can change your preferences in your browser or via the cookie settings link.
E. Contact
Promed Clinic Sağlık Hizmetleri Ticaret Anonim Şirketi · Yeşilova Mah. Yeşilova Yan Yolu Cad. Rumeli Üniversitesi No: 44 B, Küçükçekmece / İstanbul, Türkiye · +90 549 449 93 54 · info@promedclinic.com.tr · MERSİS: 0733096148500001
We may update this text when necessary; the current version is always published on this page. The Turkish version of this text is authoritative; versions in other languages are translations provided for information, and the Turkish text is available on request from info@promedclinic.com.tr.