GDPR Notice

SoftCare Sağlık Hizmetleri ve Limited Şirketi ("SoftCare Clinic") is a healthcare organization established and operating in Turkey, and the processing of your personal data is primarily subject to Law No. 6698 on the Protection of Personal Data (KVKK). However, because we provide appointment, treatment planning, and communication services to patients from European Union member states, certain provisions of the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) may also apply to us, under Article 3(2), to the extent we offer goods or services to data subjects located in the EU.

This page explains your rights as a data subject under GDPR and SoftCare Clinic's commitments regarding those rights. This notice does not replace our Privacy Notice; the two documents are intended to provide the same core protections together, under different legal frameworks.

Data Controller Identity

Company Name: SoftCare Sağlık Hizmetleri ve Limited Şirketi
MERSİS No.: 0772156786400001
Global D-U-N-S Number: 751176703
Address: Şişli Fulya Mahallesi Bahçeler Sokak No 19, İstanbul, Turkey
Phone: +90 212 241 30 10
Website: https://softcareclinic.com

Personal Data Processed

• Identity information (full name, date of birth, passport/ID number)
• Contact information (email, phone, address)
• Health data (medical history, treatment records, examination and surgery notes, imaging results)
• Travel and accommodation information (as part of international patient coordination)
• Payment and billing information
• Website usage data (further described in our Cookie Policy)

Legal Bases (GDPR Article 6 and Article 9)

When processing your general personal data, we primarily rely on the following legal bases under GDPR Article 6(1): performance of a contract (Art. 6(1)(b) - carrying out treatment and appointment processes), your explicit consent (Art. 6(1)(a) - for example, in the case of marketing communications), and legitimate interest (Art. 6(1)(f) - improving the quality of our services).

Your health data is considered a 'special category of personal data' under GDPR Article 9. We process this data only on the basis of your explicit consent (Art. 9(2)(a)) or for the purposes of medical diagnosis, treatment, and the provision of health services (Art. 9(2)(h)), and in every case subject to appropriate confidentiality obligations.

International Data Transfers

Turkey has not been recognized by the European Commission as a country providing an 'adequate level of protection' (adequacy decision). For this reason, for personal data transferred from the European Union to Turkey, we seek to provide appropriate safeguards under GDPR Article 46; these safeguards may include obtaining your explicit consent (Art. 49(1)(a)) and the transfer of your data as part of your treatment process (Art. 49(1)(b) - transfer necessary for the performance of a contract).

Upon request, we can provide additional information about the safeguards we apply to the transfer of your data.

Retention Period

Your personal data is retained for as long as required by the purpose of processing and for the statutory retention periods set out in applicable legislation (including, in particular, the medical record retention periods prescribed by Turkish healthcare legislation). Once the retention period expires, your data is deleted, destroyed, or anonymized.

Your Rights Under GDPR

• Right of access (Art. 15): request information about and a copy of your processed data
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data
• Right to erasure / right to be forgotten (Art. 17): request deletion of your data under certain conditions
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20): request your data in a structured, commonly used format
• Right to object (Art. 21): object to processing based on legitimate interest
• Right to withdraw your consent at any time
• Right to lodge a complaint with a competent supervisory authority (data protection authority) in an EU member state (Art. 77)

How to Submit a Request

To exercise the rights above, you can reach us using the contact information at the end of this page. Indicating that you would like your request to be assessed under GDPR will help ensure it is handled through the correct process. We respond to your request within a reasonable time after verifying your identity.

Frequently Asked Questions

This notice is for general informational purposes only, and the applicability of GDPR may vary in each specific case. SoftCare Clinic reserves the right to update and review this document as necessary. This text does not constitute legal advice.