
Last updated: 26 December 2025
GDPR & Your Data Rights
This page explains how GetClinic processes personal data and how you can exercise your rights under the General Data Protection Regulation (GDPR). We are committed to transparency, privacy, and responsible data handling.
Who we are (Data Controller)
After your treatment, you can typically resume normal activities within a few days. However, it's essential to follow your healthcare provider's advice for a safe and smooth recovery.
1.1. Data Controller
Explore the groundbreaking solutions from GetClinic Teknologi A.Ş., a top tech firm committed to improving healthcare with advanced software and outstanding services designed specifically to cater to your unique requirements.
1.2. Registered Address
After X hours, it is safe to shower, but be cautious. Avoid applying direct pressure on the treated areas to ensure proper healing and minimize discomfort. Always follow your healthcare provider's advice for the best results.
1.3. Privacy Contact
After a break of X days, engage in light exercise to ease back into your routine. It's important to steer clear of intense workouts and heavy lifting during this period to prevent injury and promote recovery.
1.4. Data Protection Officer
Short flights are generally safe after a few days, but it's essential to confirm your long-haul travel plans. Always check for any updates or restrictions that may affect your journey.
1.5. EU / UK Representative
To minimize swelling, sleep on your back with your head elevated for several nights. This position helps improve circulation and promotes healing, ensuring you feel more comfortable and refreshed upon waking.
Manage My Data
Use the options below to manage how your personal data is processed. All requests are handled securely and in accordance with GDPR requirements.
2.1. Request access to my data
You have the right to request a copy of your personal data. This includes details on how we utilize and share your information with others, ensuring transparency and control over your personal information.
2.2. Request deletion
You have the right to request the deletion of your personal data when it is no longer necessary for our purposes or if you decide to withdraw your consent for its use.
2.3. Correct my data
You are entitled to modify or rectify any personal information that is found to be inaccurate or incomplete. It is your right to ensure that your details are correct and up to date.
2.4. Export my data
You have the option to download your personal data in a structured format that is widely used and easily readable by machines, ensuring you can access and utilize your information effectively.
2.5. Marketing opt-out
At any time, you have the option to unsubscribe from marketing emails and promotional messages. Your preferences matter, and we respect your choice to stop receiving these communications whenever you decide.
What Data We Collect
Use the options below to manage how your personal data is processed. All requests are handled securely and in accordance with GDPR requirements.
3.1. Data You Provide Directly
Request access to your data to understand how we collect, use, and share your personal information. This empowers you with transparency and control, ensuring you know exactly how your data is handled.
- Full name
- Email address
- Country and city preferences
- Treatment interests and inquiry messages
- Files you choose to upload (such as photos or reports), only when explicitly submitted by you
3.2. Data Collected Automatically
We automatically collect personal data that is essential for our services. You can request its deletion when it's no longer needed or if you withdraw your consent for its use, ensuring your privacy is respected.
- Device and browser information
- IP address and approximate location (city/country level)
- Website usage events (pages visited, interactions, timestamps)
- Cookies and local storage identifiers, subject to your consent preferences
3.3. Data Received from Clinics
When data is received from clinics, you have the right to correct any inaccuracies or omissions in your personal information. It's important to keep your details accurate and current for effective communication.
- Quotation details
- Appointment confirmations
- Post-treatment support and follow-up planning
- Follow-up or coordination notes related to your request
Why We Process Your Data
We gather personal information exclusively to run GetClinic effectively and to provide assistance with your questions, ensuring a smooth experience while prioritizing your privacy and data security.
4.1. Core Service Purposes
Our Core Service Purposes involve requesting access to your data, allowing you to see how we collect, use, and share your personal information. This ensures transparency and gives you control over your data management.
- Provide relevant clinic, treatment, or package options based on your preferences
- Match patients with verified clinics and providers
- Coordinate inquiries and facilitate communication
4.2. Communication
In our communication practices, we gather necessary personal data to enhance our services. You have the right to request deletion of this data whenever it is no longer required or if you choose to withdraw your consent.
- Respond to inquiries and requests
- Contact you via WhatsApp, email, or phone regarding options, updates, or clarifications
4.3. Security & Fraud Prevention
In the realm of Security & Fraud Prevention, you have the authority to amend any errors in your personal data received from clinics. Maintaining accurate information is crucial for safeguarding your identity and ensuring effective communication.
- Detect and prevent fraudulent or abusive activity
- Ensure platform integrity and user safety
- Contact the clinic for assistance after your return for any support needed.
4.4. Customer Support
At Customer Support, we ensure that any data received from clinics is accurate. You have the right to correct any inaccuracies in your personal information, helping us maintain effective communication and provide you with the best service.
- Handle support requests
- Manage complaints or disputes related to inquiries or services
4.5. Platform Improvement
Our platform is committed to enhancing user experience by ensuring that all personal information from clinics is accurate and up-to-date. This allows for seamless communication and helps us serve you better.
- Analyze platform usage and interaction patterns
- Improve features, workflows, and reliability
- Analytics are used in accordance with applicable consent requirements
4.6. Marketing & Communication
Accurate personal information is essential for effective marketing and communication. When clinics send data, you can correct any inaccuracies or omissions, ensuring your details are always up-to-date for seamless interactions.
- Send promotional or informational communications
- Marketing messages are sent only where required consent has been obtained
- You can opt out at any time
Legal Transparency
We are committed to transparency in our data practices and comply with all applicable data protection laws.
5.1. Lawful Basis for Processing Personal Data
We process your personal data based on various lawful bases including consent, contract performance, legal obligations, and legitimate interests. The specific basis depends on the purpose of processing.
International Transfers of Personal Data
Your data may be transferred to and processed in countries outside of your residence. We ensure appropriate safeguards are in place.
7.1. Where your data may be processed
Your data may be processed in Turkey, the European Union, and other countries where our service providers operate.
7.2. Safeguards for international transfers
We use standard contractual clauses, adequacy decisions, and other appropriate mechanisms to ensure your data is protected during international transfers.
Data Protection
We take data protection seriously and implement appropriate measures to keep your information safe.
8.1. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. After this period, your data is securely deleted or anonymized.
Data Subject Rights
Under the GDPR, you have several rights regarding your personal data.
9.1. Your Rights Under GDPR
You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You also have the right to withdraw consent at any time.
Data Subject Access Request
You can submit a request to access, modify, or delete your personal data at any time.
10.1. Submit a GDPR Request
To exercise your data rights, please contact us at privacy@getclinic.com. We will respond to your request within 30 days as required by GDPR.
Marketing Preferences
You have control over how we communicate with you for marketing purposes.
11.1. Email Marketing
You can opt out of email marketing at any time by clicking the unsubscribe link in our emails or contacting us directly.
11.2. WhatsApp & SMS Communications
You can manage your WhatsApp and SMS communication preferences through your account settings or by contacting our support team.
Security measures (high-level)
We implement robust security measures to protect your personal data.
13.1. Access controls
We implement strict access controls to ensure only authorized personnel can access your data.
13.2. Encryption in transit
All data transmitted between your device and our servers is encrypted using industry-standard protocols.
13.3. Limited access
Access to personal data is limited to employees who need it to perform their job functions.
13.4. Vendor due diligence
We carefully evaluate all third-party vendors to ensure they meet our security standards.
13.5. Continuous monitoring
We continuously monitor our systems for security threats and vulnerabilities.
Children's Data
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Complaints and Regulators
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find your local authority at the European Data Protection Board website.
Relationship to Other Policies
This GDPR policy should be read in conjunction with our Privacy Policy, Cookie Policy, and Terms of Service. In case of any conflict, this GDPR policy takes precedence for EU/EEA residents.