Privacy Policy

1. Introduction

This Privacy Policy has been prepared to inform you about how your personal data is collected, processed and protected when you use our Curavita Evde Sağlık platform. By using our platform, you are deemed to have accepted the data processing practices described in this policy.

At Curavita Evde Sağlık, we attach great importance to the protection of your personal data. This policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK) and other applicable legislation. Our aim is to be transparent about how the personal data we collect while providing our services to you is used, stored and protected.

This privacy policy applies to all users of our platform. It covers the processing of personal data both for patients who wish to receive services and for healthcare professionals who provide services through our platform. Our policy covers our platform's website, mobile application (if any) and all related digital services.

Your privacy is important to us, and we are committed to processing your personal data only for the purposes set out in this policy and within the framework of our legal obligations.

We take particular care when processing special categories of personal data such as health information and medical records. Such data is processed only with your explicit consent and solely for the purpose of providing healthcare services. All of your data is protected by industry-standard security measures.

Please read this privacy policy carefully before using the Curavita Evde Sağlık platform. By registering on or visiting our platform, or by using any of our services, you accept the terms of this policy. If you do not accept these terms, please stop using our platform.

The purpose of this policy is to help you understand your rights regarding the processing of your personal data and to inform you about Curavita Evde Sağlık's data protection practices. If you have any questions or concerns, you can reach us through the contact channels listed at the end of this policy.

2. Information We Collect

We may collect the following information through our platform:

Personal information such as first and last name, email address, phone number and Turkish national identification number (T.C. Kimlik No.)
Demographic information such as date of birth, age and gender
Health data such as health history, medical reports, test results and information on medications used
Technical information such as IP address, device information, and the browser and operating system you use
Your activity on the platform, appointment history, the services you use and the content you interact with
Location information (if you allow it, for example when requesting a service at home)
Payment and billing information (credit card details are processed through secure payment providers)

3. How We Use Information

We use the information we collect for the following purposes:

To provide and improve the home healthcare services we offer through our platform
To manage appointments and carry out patient follow-up
To provide you with personalized health reports, analyses and consultancy services
To manage your billing, payment and insurance transactions
To contact you about updates, legal changes, offers and announcements related to our platform
To ensure the security of our platform and fulfill our legal obligations
To analyze the use of our platform and improve the user experience
To pass on the necessary information to healthcare professionals in emergencies

We may share your personal and health information with third parties in the following cases:

With doctors, nurses and other healthcare professionals whom you authorize for your healthcare services (with your consent)
With our service providers (e.g. payment processors, laboratory services, imaging centers, server hosting services) to the extent necessary to provide our services
With competent public institutions and organizations (Ministry of Health, judicial authorities, etc.) when required by legal regulations or upon an official request
With the necessary healthcare institutions to protect your vital interests in medical emergencies
With the relevant parties in cases such as a company merger, acquisition or sale of assets, provided that confidentiality obligations are observed

We always obtain your explicit consent before sharing your information with third parties for marketing purposes.

5. Data Security

We use industry-standard security measures to protect your personal and health data. These measures include SSL/TLS encryption, secure data storage, regular security audits and data privacy training for employees. However, please note that no data transmission over the internet and no storage system is 100% secure.

The technical and administrative measures we take to keep your data secure are as follows:

All your sensitive data is protected in transit and at rest using industry-standard encryption protocols
Access to our systems is restricted through strong password policies and multi-factor authentication (MFA) systems (where applicable)
Our databases are backed up regularly and periodically tested for security vulnerabilities
Our physical server infrastructure is hosted in high-security, certified data centers
Our employees receive regular training on data privacy, information security and the KVKK
Incident response and contingency plans have been developed to prepare for possible data breaches
Your user accounts are protected by suspicious activity monitoring systems and strong password policies

At Curavita Evde Sağlık, we take additional security measures to protect sensitive personal data, especially your health data. This data can be accessed only by authorized personnel, solely for the purpose of providing services to you and only to the extent necessary. Our contracts with our service providers require them to comply with the same level of data security standards.

6. Cookies and Similar Technologies

Our site uses strictly necessary cookies that are required for the site to function (session management, form security and storing your cookie preference). External content such as the map on the contact page, and any analytics or marketing cookies that may be used in the future, only run if you give your permission; our site currently does not use any analytics or marketing cookies.

Our Cookie Policy explains in detail which cookies are used for what purpose, how long they are stored and how you can manage your preferences. You can change your preferences at any time using the "Manage cookie preferences" button on the Cookie Policy page, and you can also delete or block cookies in your browser settings. If strictly necessary cookies are blocked, some functions of the site may not work properly.

7. User Rights (KVKK Article 11)

Under Article 11 of the Personal Data Protection Law, you have the following rights:

To learn whether your personal data is being processed
To request information about the processing if your personal data has been processed
To learn the purpose of processing your personal data and whether it is used in line with that purpose
To know the third parties, in Türkiye or abroad, to whom your personal data is transferred
To request the correction of your personal data if it is incomplete or inaccurately processed, and to request that the action taken in this regard be notified to third parties to whom your personal data has been transferred
To request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the KVKK and other applicable laws, and to request that the action taken in this regard be notified to third parties to whom your personal data has been transferred
To object to any outcome to your detriment that arises from the analysis of your processed data exclusively by automated systems
To claim compensation for damage if you suffer damage as a result of the unlawful processing of your personal data

To exercise these rights, please contact us using the contact details at the end of this policy.

8. Data Retention Periods

We retain your personal data in line with the purpose for which it was collected and for the period specified in the relevant legislation (e.g. Ministry of Health regulations, the KVKK) or required for the purpose for which it is processed. When the retention periods expire, your data is deleted, destroyed or anonymized.

In general, the retention periods for your personal data are as follows (these periods may vary according to legal regulations):

Your health records: Generally retained for 10 years under the relevant legislation.
Your account information relating to platform use: Retained for as long as your account is active and, after you close your account, for a reasonable period (generally between 1 and 5 years) for legal follow-up and the resolution of disputes.
Cookies and log data: May be retained for periods ranging from a few days to several years, depending on their type and purpose.

Data whose retention period has expired is irreversibly anonymized or securely destroyed. Some data may be retained for longer due to our legal obligations or legitimate interests; in this case, we ensure that the data is accessible only for the relevant purpose.

If you request the deletion or anonymization of your personal data, your request will be fulfilled within 30 days at the latest, unless there is a legal obligation to retain the data, and you will be informed.

9. Children's Privacy

Our platform is not intended for children under the age of 18, and we do not knowingly collect personal information from children under 18. If you become aware that a child under 18 has provided us with personal information, please let us know and we will delete this information from our records.

We apply the following policies to protect children under 18:

Procedures to verify users' age are applied during registration
The necessary technical measures have been taken to avoid processing the personal data of persons under 18
No child is allowed to register on our platform or use our services without the supervision of a parent or legal guardian
We promptly and securely delete data that we identify as belonging to children
For individuals under 18 with special healthcare needs to access healthcare services, the explicit consent and supervision of a parent or legal guardian are required

Parents or legal guardians who believe that their child's personal data has been collected by mistake can contact us at info@curavitaevdesaglik.com. If such information has been collected, we will delete it from our records, taking the necessary security measures.

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy from time to time. We will inform you of significant changes to the policy by posting a visible notice on our platform or by sending a notification to your registered email address. Your continued use of our platform after the changes are published means that you accept the updated policy. We therefore recommend that you review our policy periodically.

The following principles will be observed when changes are made to our Privacy Policy:

Significant changes will be announced on our platform and/or by email a reasonable period before they take effect.
The most up-to-date version of the policy will always be available on our platform, and the "Last Updated" date at the top of the policy will show the date of the most recent revision.
If the changes are not acceptable to you, you have the option to stop using our platform and close your account.

11. Contact

If you have any questions or concerns about this Privacy Policy, or requests to exercise your rights under the KVKK, please contact us using the details below:

Data Controller: Curavita Evde Sağlık (Ges Global Sağlık Hizmetleri Limited Şirketi)

Email: info@curavitaevdesaglik.com

Phone: +90 216 235 10 45

Your applications will be answered as soon as possible and in any case within the statutory period of 30 days. Depending on the nature of your application, additional information may be requested to verify your identity.