Data protection notice

Data controller

Ariana Health Center — private healthcare provider. Yenibosna Merkez Mah., Bahçelievler / İstanbul 34197, Türkiye. Contact: info@arianahealthcenter.com · +90 536 998 71 50

This notice explains how your personal data is processed when you contact the clinic or use this website.

Categories of data processed

Identity and contact data: name, surname, telephone, email. Taken when you request a pre-assessment or register with the clinic.

Health data: complaint, diagnosis, procedure performed, product and lot used, measurement and test results, imaging records. This is special category personal data under Article 6 of the Law.

Transaction security data: the technical records the infrastructure hosting this site keeps in order to deliver the service.

Purposes and legal grounds

Your health data is processed for the provision of diagnosis, treatment and care, and for the planning and management of health services, under Article 6/3 of the Law, by healthcare staff bound by a duty of confidentiality. No separate explicit consent is required for processing on that basis — the equivalent of the “provision of health care” condition you would find in Article 9 of the GDPR.

Your identity and contact data is processed for planning pre-assessment and follow-up conversations, communicating results and meeting legal obligations, on the grounds of the establishment of a contract and legal obligation.

For promotional, reminder or marketing communication, your data is processed only with your separate explicit consent. You can withdraw that consent at any time; withdrawal does not affect the lawfulness of processing up to that point.

The particular position of this website

This site consists entirely of static files and runs no application server or database. The form on the site does not send what you enter to us; it turns it into a ready-made WhatsApp or email message on your own device. You decide whether to send it.

So unless you fill in the form and send the message, none of your data reaches us. Once you send it, the privacy terms of the channel you chose also apply.

There are no third-party tracking cookies on the site for advertising, analytics or profiling.

Transfers

Your personal data may be transferred to authorised public institutions under legal obligations, to collaborating healthcare providers and laboratories where the treatment process requires it, and to financial institutions in the context of payment processes.

For patients travelling from abroad, because pick-up, transfers and accommodation are provided in collaboration with a licensed travel agency, only the identity and itinerary information that service requires is shared with the agency. Health data is not included in that sharing.

Transfers abroad are not made unless the conditions in the relevant provisions of the Law are met. If you live in the UK or the EU, that means your health record stays in Türkiye unless you ask for a copy — which you are entitled to.

Retention

Health records are retained for the periods prescribed in the relevant health legislation. When those periods expire, the data is deleted, destroyed or anonymised.

Where processing is based on explicit consent and that consent is withdrawn, the data is not retained unless there is another legal ground for processing.

Your rights and how to apply

Under Article 11 of the Law you have the right to learn whether your data is being processed, to request information if it is, to learn the purpose of processing, to know the third parties to whom it has been transferred at home or abroad, to request correction if it is incomplete or incorrect, to request erasure or destruction, to object to an automated analysis producing a result against you, and to claim compensation if you suffer loss.

• Applications — by email to info@arianahealthcenter.com or in writing to the clinic address
• Response time — your application is concluded within 30 days at the latest
• Identity verification — applications where we cannot verify your identity cannot be answered
• Escalation — if you are not satisfied with the outcome, you can complain to the Turkish Personal Data Protection Board, the national supervisory authority