Consultations may be listened to by authorised staff for quality control purposes; a notice is shown on screen when this happens.

Emergency warning: This platform must not be used for medical emergencies. In an emergency, call 112 (in Türkiye) or your local emergency number.

This notice explains how your personal data is processed in connection with the online health consultation services offered at wmhealthistanbul.com, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").

1. Data Controller

Your personal data is processed by WM Health Istanbul ("WM Health Istanbul") as data controller.

• Address: Istanbul, Türkiye
• Phone: to be added soon
• E-mail: info@wmhealthistanbul.com

2. Personal Data We Process

• Identity and contact data: name, surname, e-mail address, phone number, country.
• Health data (special category data): your complaint, your answers in the pre-assessment form, test results, prescriptions and imaging documents you upload, and your doctor's consultation notes.
• Video consultation data: date, duration and participants of the consultation. Audio and video recordings are made only if you give separate explicit consent.
• Transaction and payment data: appointment, invoice and payment details. We do not store your card details; payments are collected by a licensed payment institution.
• Security data: IP address, session and login records, browser information.

3. Purposes of Processing

• Creating and managing your appointment and sending you reminders,
• Conducting the online consultation with the doctor and the medical pre-assessment,
• Processing payments, invoices and refunds,
• Responding to your requests and complaints,
• Monitoring the quality and safety of our service,
• Ensuring information security and preventing misuse,
• Complying with legal obligations and requests from competent authorities.

4. Legal Grounds

Under Article 5 of the KVKK (and Article 6 GDPR where applicable), your personal data is processed because it is necessary to enter into and perform the contract with you, to comply with our legal obligations, to establish, exercise or defend legal claims, and for our legitimate interests provided that your fundamental rights and freedoms are not harmed.

Under Article 6 of the KVKK (and Article 9 GDPR where applicable), your health data is processed by persons under a duty of confidentiality for the purposes of medical diagnosis, treatment and care, or on the basis of your explicit consent. Processing based on your explicit consent is described in the separate "Explicit Consent Statement".

5. Transfers of Personal Data

Your personal data may be shared only as far as necessary for the purposes above with:

• the doctor who conducts your consultation,
• a licensed payment institution for payments,
• public authorities legally entitled to request it,
• suppliers that provide our hosting and technical infrastructure.

The platform's servers and video consultation infrastructure run on servers located in the United Kingdom (Hostinger). Video consultations are not routed through a third-party video service; they run on a server rented and managed by WM Health Istanbul.

6. How We Collect Data

We collect your personal data electronically through the appointment, pre-assessment, contact and live support forms on our website, document upload areas, the video consultation system and e-mail.

7. Quality Control of Consultations

To monitor the quality and safety of our service and to investigate complaints and technical issues, an authorised WM Health staff member who is bound by confidentiality may join an ongoing video consultation as a listener only. The listener does not speak and does not transmit video or audio. When this happens, the notice "An authorised WM Health staff member is listening to this consultation for quality control purposes." is shown on both your screen and your doctor's screen until the listening ends. The consultation is not recorded because of this listening; a consultation is recorded only with your separate consent. The date and duration of the listening, the staff member who listened and the stated reason are kept for 2 years for security and audit purposes; the content of the consultation is not included in these records. To request information about this processing, to object to it, or to exercise your other rights under Article 11 of the Turkish Personal Data Protection Law (KVKK) and, where applicable, the GDPR, you can contact us at info@wmhealthistanbul.com.

8. Retention

Your personal data is kept for as long as the purpose of processing requires and for the statutory retention periods under applicable law. At the end of these periods it is deleted, destroyed or anonymised.

9. Your Rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information about it; to learn the purpose of processing and whether data is used accordingly; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction; to request that third parties be notified of these actions; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing. If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with your local supervisory authority.

You can send your requests to info@wmhealthistanbul.com or in writing to our address above. Requests are answered free of charge within 30 days at the latest.