Who we are
This policy explains how MYK Healthroutes collects and uses personal data when you visit this website or send us an enquiry. The data controller is MYK Healthroutes (MYK HEALTH ROUTES TRAVEL AGENCY, licence no. 17491), Erenköy Mah. 4871. Sk. No:21 A, Kepez, Antalya, Türkiye.
MYK Healthroutes coordinates communication and practical arrangements for international patients considering treatment in Antalya. We do not perform medical procedures: these are carried out by independent healthcare professionals at the relevant hospital.
We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Economic Area and the United Kingdom, the GDPR and the UK GDPR.
What personal data we collect
When you send an enquiry through the contact form we receive:
- your name, email address and phone number;
- the treatment you are interested in;
- any message you choose to write, which may include health information;
- a record that you agreed to this policy.
When you visit the site, our hosting and security providers receive technical data that every web server receives, such as your IP address, browser type and the pages requested. We also store your cookie choice in your browser (see our Cookie Policy).
If you contact us by email, phone or WhatsApp, we keep the messages you send us and our replies.
Health information
Information about your health is a special category of personal data. Please share only what is needed for us to understand your enquiry. We ask for your explicit consent when you tick the consent box on the contact form, and we use health information only to arrange a review of your case by the appropriate medical professional and to plan the next steps with you.
You can withdraw your consent at any time by writing to us. Withdrawing does not affect processing carried out before you withdrew.
Why we use your data and on what basis
- To answer your enquiry and take steps you ask for before a treatment arrangement is made (performance of a contract or steps before it).
- To handle health information you give us (your explicit consent).
- To keep the website and contact form secure and to prevent spam (our legitimate interest).
- To meet legal obligations that apply to a travel agency, such as accounting and record keeping (legal obligation).
- To measure how the site is used, only if you accept analytics cookies (your consent).
Who we share it with
We do not sell personal data. We share it only with the following, and only as far as needed:
- Hosting provider: Turhost, which hosts this website.
- Form and email providers: Cloudflare, which receives the contact form submission, and Resend, which delivers it to us by email using its European (Ireland) region.
- Google reCAPTCHA, which checks that the form is submitted by a person and not a bot.
- Google (Google Tag Manager and analytics) and Meta (Meta Pixel), only if you accept analytics or marketing cookies.
- Sanity, which stores the website content and images. It does not receive your enquiry.
- Healthcare professionals and hospitals involved in your care, but only when you decide to go ahead, and only the information they need.
- Public authorities, when the law requires it.
Transfers outside Türkiye
Some of the providers above process data outside Türkiye, including in the European Union and the United States. Where the law requires it, we transfer data abroad with your explicit consent, which you give when you tick the consent box on the contact form, or on the basis of the safeguards the law allows.
How long we keep your data
We keep personal data only as long as we need it for the purposes above or as long as the law requires. If an enquiry does not lead to a treatment arrangement, we delete or anonymise it once we no longer need it to follow up with you.
How we protect it
The website uses HTTPS. The contact form is protected against automated abuse, enquiries are sent by email only to our team, and access to them is limited to staff who need it. No system is completely secure, so please avoid sending sensitive documents until we have agreed a secure way to share them.
Your rights
Under Article 11 of the KVKK and, where it applies, the GDPR, you can ask us to:
- tell you whether we process your data and give you a copy;
- explain why we use it and who receives it;
- correct data that is incomplete or wrong;
- delete or anonymise your data when the reasons for processing no longer apply;
- restrict or object to certain processing;
- withdraw a consent you have given;
- receive your data in a portable format where the GDPR applies.
To use these rights, write to info@mykhealthroutes.com. We reply within 30 days. You also have the right to complain to the Turkish Personal Data Protection Board (KVKK) or, if you live in the EEA or UK, to your local data protection authority.
Children
This website is not meant for children. If you think a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy. The date at the top of the page shows when it last changed.
Contact
MYK Healthroutes, Erenköy Mah. 4871. Sk. No:21 A, Kepez, Antalya, Türkiye. Email: info@mykhealthroutes.com. Phone: +90 530 132 40 07.