This notice is provided under Article 10 of the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”) by SBL Health Travel, established in the Netherlands, for the healthcare and accommodation services organised in Turkey. The EU General Data Protection Regulation (GDPR) applies first and foremost to our website and services; this notice provides the KVKK information for the part of the process in which your data is shared with clinics, hospitals and hotels in Turkey. A Turkish version is available here.
1. Data controller
SBL Health Travel
Goudse Rijweg 380, 3031 CK Rotterdam, the Netherlands
Email: [email protected]
Phone / WhatsApp: +31 6 34 14 70 27
2. Personal data processed
- Identity and contact data: first name, surname, phone number, email address.
- Request data: your message in the contact form and the service you are interested in.
- Health data (special categories): medical information you share so that your treatment can be planned.
- Transaction security data: IP address, browser information and cookie records.
3. Purposes of processing
- Answering your requests and questions and keeping in touch,
- Planning and carrying out your treatment, spa trip, transport and accommodation,
- Follow-up and contact after treatment,
- Securing the website and complying with legal obligations.
4. Legal grounds
Your personal data is processed under Article 5 KVKK on the grounds of establishing or performing a contract and complying with legal obligations. Your health data is processed under Article 6 KVKK only with your explicit consent; you can withdraw your consent at any time.
5. Transfer of data
Your data is transferred, solely to carry out the treatment and travel process, to partner clinics and hospitals, doctors, hotels and transport providers in Turkey. This transfer is based on your explicit consent or on the performance of the contract in accordance with Articles 8 and 9 KVKK. Your data is not sold to third parties for marketing purposes.
6. Retention period
Your data is kept for as long as the purpose of processing requires and for the statutory retention periods; afterwards it is deleted or anonymised.
7. Your rights (Article 11 KVKK)
You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction; and to claim compensation if you suffer damage.
You can send your requests to [email protected]. Applications are concluded within 30 days at the latest. For your rights in the European Union (GDPR), see the privacy statement.