Personal Data Protection
Last updated: January 2025
1. Data Controller
Under applicable data protection regulations, the data controller is: ERUCA Health Tourism Travel Agency — Valide-i Atik Mah. Nuhkuyusu Cad. No:129/1 Üsküdar/Istanbul, Turkey.
2. Personal Data Processed
Identity (name, surname), contact (phone, email, address), health (treatment request, general health information), financial data, and digital trace data (IP, cookies, session records) may be processed.
3. Purposes of Processing
Your personal data is processed for planning and delivering health tourism services, appointment and transfer organisation, compliance with legal obligations, ensuring patient safety, and statistical analysis.
4. Legal Bases
Data is processed on the basis of: your explicit consent, performance of a contract, our legitimate interests, and legal obligations imposed by applicable law.
5. Retention and Erasure
Your personal data is deleted, destroyed, or anonymised in accordance with our Personal Data Retention and Disposal Policy once the purpose of processing ceases or the legal retention period expires.
6. Domestic and International Transfers
Your data may be transferred to partner hospitals and clinics, travel and transfer agencies, and authorised institutions when legally required. International transfers are carried out in compliance with applicable data protection law.
7. Your Rights
You have the right to: learn whether your data is processed; request information if it is; learn the purpose and whether it is used accordingly; learn about domestic/international transfers; request correction of incomplete or incorrect data; request erasure or destruction; object to processing; and claim compensation for damages.
8. How to Apply
To exercise your rights, send an email to info@eruca.com with identity-verifying documents, or submit a written application to Valide-i Atik Mah. Nuhkuyusu Cad. No:129/1 Üsküdar/Istanbul. Applications are answered within 30 days.