Privacy Policy

Privacy Policy for Rehabtürk Insurance Services

Effective Date: July 24, 2025

1. Introduction

Welcome to Rehabtürk. We are committed to protecting the privacy and security of our clients’ personal information. This Privacy Policy outlines how we collect, use, share, and protect your personal data when you use our insurance services.

This policy applies to all foreign individuals and eligible citizens of the Republic of Turkey domiciled abroad who purchase our Health Tourism Complication Insurance plans for treatments and surgeries performed in Turkey.

We are dedicated to being transparent about our data practices and adhering to the principles of the General Data Protection Regulation (GDPR).

2. Data Controller

Rehabtürk is the data controller, which means we are responsible for deciding how we hold and use personal information about you.

If you have any questions about this privacy policy or our data protection practices, please contact us at:

  • Company Name: Rehabtürk
  • Address: [Your Full Business Address]
  • Email: [Your Data Protection Email, e.g., [email protected]]
  • Phone: [Your Business Phone Number]

3. What Personal Data We Collect

We collect personal data to provide and manage your insurance policy effectively. The information we may collect includes:

  • Personal Identification Information: Your full name and passport number, which is required for policy creation.
  • Contact Information: Your email address, phone number, and home country address.
  • Medical & Treatment Information: Details regarding the primary surgery or treatment you plan to have in Turkey, as well as any subsequent treatments for complications. This includes information required for us to assess coverage for repetition surgeries.
  • Travel and Accommodation Details: Information related to your flight tickets and accommodation if you need to make a claim under these coverages. This may include receipts and physician reports confirming the medical necessity of your stay.
  • Financial Information: Your bank account details (SWIFT, IBAN) are required for processing reimbursements for covered expenses, such as interventions in your native country.
  • Companion Information: If your plan includes companion coverage, we may collect transportation and accommodation details for one companion traveling with you.
  • Technical Data: When you visit our website, we may collect information about your device and Browse actions through cookies and similar technologies.

4. How We Use Your Personal Data

Your personal data is used for the following specific purposes:

  • To Provide Insurance Services: To create and administer your complication insurance policy , process your premiums, and manage your coverage for the 6-month policy period.
  • To Process Claims: To evaluate and process your claims for inpatient treatment, repetition surgeries, flight tickets, accommodation, and other covered expenses.
  • To Manage Reimbursements: To facilitate payments for covered minor interventions in your native country or other reimbursements directly to your bank account.
  • To Communicate with You: To send you important information about your policy, respond to your inquiries, and provide customer support.
  • To Comply with Legal Obligations: To meet our legal and regulatory requirements, including those set by the Republic of Turkey Ministry of Health for “Medical Tourism Institutions”.
  • To Improve Our Services: To analyze data on how our services are used, helping us improve our website, products, and customer experience.

5. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds under GDPR:

  • Contractual Necessity: Most of our processing is necessary to fulfill the terms of the insurance contract we have with you. This includes everything from issuing the policy to processing your claims.
  • Legitimate Interests: We may process your data for our legitimate interests, such as for administrative purposes, improving our services, and ensuring the security of our systems, provided that your rights and interests do not override these.
  • Consent: In specific situations, we may rely on your explicit consent to process certain data. You have the right to withdraw this consent at any time.
  • Legal Obligation: We may need to process your data to comply with a legal or regulatory obligation.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with the following third parties only when necessary:

  • Medical Providers: We will share information with the accredited hospitals and medical centers in Turkey where you receive your primary and secondary treatments to verify claims.
  • Service Providers: We may engage third-party companies to process payments, manage IT systems, or assist with other administrative tasks. These providers are bound by confidentiality and data protection agreements.
  • Regulatory Authorities: We may disclose your information to regulatory bodies, such as the Republic of Turkey Ministry of Health, or law enforcement if required by law.

7. Data Security

We are committed to protecting your data. We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Your policy is valid for 180 days, and data related to it will be kept in accordance with statutory limitation periods for claims.

9. Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data, including:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
  • Right to Erasure (‘Right to be Forgotten’): You can request that we delete your personal data where there is no compelling reason for us to keep it.
  • Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain circumstances.
  • Right to Data Portability: You have the right to receive your data in a structured, machine-readable format.
  • Right to Object: You can object to us processing your data for our legitimate interests.

To exercise any of these rights, please contact us using the details provided in Section 2.

10. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.