GDPR and your data rights

Last updated: June 6, 2026

1. Who handles your data?

Estetrend International Healthcare Services coordinates international healthcare inquiries and patient journeys. For privacy questions or data-rights requests, contact info@estetrend.com.tr or call +90 505 983 95 85.

2. What information may be processed?

Depending on your request, this may include identity and contact details, nationality and travel information, treatment interests, medical history, medications, allergies, diagnostic documents, photographs, videos, consultation messages, appointment details and payment or transaction records.

3. Medical information and photographs

Health information and treatment images can qualify as special-category or sensitive personal data. We request them only where relevant to suitability review, treatment planning, coordination or aftercare. Submission forms should ask for explicit consent before these files are processed.

4. Why is information used?

Information may be used to respond to inquiries, arrange consultations, assess treatment suitability with healthcare professionals, coordinate appointments and travel support, provide aftercare, maintain records, prevent misuse and meet legal obligations.

5. Lawful grounds

Depending on the activity and applicable law, processing may rely on your consent, steps requested before entering a service agreement, performance of a contract, legal obligations, vital interests or legitimate interests. Sensitive health data is processed only where an additional lawful condition applies, such as explicit consent or healthcare-related necessity under applicable law.

6. Who may receive information?

Only relevant recipients should receive the information needed for their role. These may include treating healthcare professionals, clinics, laboratories, authorized Estetrend coordinators, secure technology providers, payment providers and, where requested, hotel or transfer providers. We do not sell personal or medical data.

7. International transfers

Estetrend operates in Turkiye and serves international patients. Information sent from Europe may therefore be processed outside the EEA or UK. Where GDPR transfer rules apply, appropriate contractual, technical or organizational safeguards should be used for the transfer.

8. Retention and deletion

Data should be retained only for as long as necessary for consultation, service delivery, aftercare, legal obligations, accounting or dispute handling. Retention periods can differ for medical, financial and inquiry records. A deletion request will be assessed against any legal or clinical retention requirement.

9. Your rights

Where applicable, you may request access to your data, correction, deletion, restriction, portability, objection to certain processing or withdrawal of consent. Withdrawing consent does not make earlier lawful processing invalid and may affect our ability to continue a requested consultation.

10. Security approach

Reasonable technical and organizational measures are used to reduce unauthorized access, alteration, loss or disclosure. Access should be limited according to role and service need. No online system can promise absolute security, so please avoid sending unnecessary medical information through unsecured channels.

11. How to make a request

Email info@estetrend.com.tr with the subject “Data Rights Request”. Include enough information to identify your communication or patient record. We may request identity verification before releasing, changing or deleting information.

12. Complaints

Please contact us first so we can review your concern. If GDPR applies to your situation, you may also have the right to complain to the data protection authority in your country of residence, workplace or where the alleged issue occurred.