Information Notice under the Turkish Law on the Protection of Personal Data (KVKK)
Last updated: 14.08.2026
This notice is provided by Risus Care to inform you, as a data subject, about how your personal data is processed, in accordance with Article 10 of the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK") and the related Communiqué on Principles and Procedures for the Fulfilment of the Obligation to Inform.
Because Risus Care provides health and medical tourism services, some of the data we process is special category (sensitive) personal data, including health data, which the KVKK protects with additional safeguards.
1. Data Controller
Under the KVKK, the data controller is:
Legal / trade name: Risus Uluslararası Sağlık Turizmi ve Tic. Ltd. Şti (operating as "Risus Care")
Registered address: Meşrutiyet Mah. Ebe Kızı Sok. Sosko İş Merkezi No: 16/A6, Şişli, İstanbul, Türkiye
Tax office / no.:Mecidiyeköy VD 7351936579
Health-tourism authorization: Authorized by the Republic of Türkiye Ministry of Health and Ministry of Culture and Tourism
Email: info@risuscare.com
Phone / WhatsApp: +90 542 336 64 00
Website: https://risuscare.com
2. Categories of personal data we process
Identity and contact data: name, surname, telephone number, email address, country of residence, and where required for travel or treatment, passport / ID details.
Customer / transaction data: enquiry details, treatment and booking records, travel and accommodation arrangements, correspondence, payment and billing records.
Special category (health) data: medical history, conditions, medications, allergies, images shared for assessment, diagnostic and treatment information, consultation and post-treatment records.
Technical data: IP address, device and browser information, and usage data collected through cookies (see our Cookie Policy).
3. Purposes of processing
Your personal data is processed for the following purposes:
responding to your enquiries and providing information, quotes and consultations;
assessing your suitability for treatment and planning your care safely;
coordinating and delivering treatment with partner clinics, hospitals and physicians;
organizing travel, transfers, accommodation, concierge and aftercare services;
managing our contractual and customer relationship with you;
carrying out finance, accounting and billing activities;
fulfilling our legal obligations and responding to requests from authorized public bodies;
ensuring the security of our operations, information systems and Website;
with your explicit consent, sending information about our services;
establishing, exercising or defending legal claims.
4. Legal grounds for processing
Ordinary personal data is processed on the legal grounds set out in Article 5 of the KVKK, in particular where:
processing is necessary for the establishment or performance of a contract;
processing is necessary for compliance with a legal obligation to which we are subject;
processing is necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms;
processing is necessary for the establishment, exercise or protection of a right;
and, where none of the above applies, on the basis of your explicit consent.
Special category (health) data is processed on the grounds set out in Article 6 of the KVKK. Health data is, as a rule, processed on the basis of your explicit consent, or, where applicable, by persons or authorized institutions under a duty of confidentiality for the purposes of protection of health and the provision of medical services.
5. To whom and for what purposes personal data may be transferred (domestic)
In accordance with Articles 8 of the KVKK and limited to the purposes above, your personal data may be transferred to:
partner clinics, hospitals, physicians and dental/surgical teams involved in your treatment;
travel, transfer, accommodation and concierge service partners;
suppliers and service providers acting on our behalf (IT, hosting, communications, translation, payment);
our professional advisers such as lawyers, accountants and financial advisers;
authorized public institutions and organizations, and judicial authorities, where required by law.
Transfers of special category data are carried out in line with the additional safeguards required by the KVKK and secondary legislation.
6. Transfers abroad
Because our services are provided in Türkiye and may involve international patients and partners, your personal data may be transferred abroad in accordance with Article 9 of the KVKK — for example on the basis of your explicit consent, or where the conditions and safeguards set out in the Law and secondary legislation are met.
7. Method of collection and legal reason
We collect your personal data through the contact and enquiry forms on our Website, WhatsApp, telephone, email, social media, and during the consultation and treatment process — in electronic and, where necessary, physical form. It is collected and processed based on the legal grounds set out in Sections 4 to 6 above.
8. Your rights as a data subject (Article 11 of the KVKK)
Under Article 11 of the KVKK, you have the right to:
learn whether your personal data is being processed;
request information if your personal data has been processed;
learn the purpose of processing and whether it is used in accordance with that purpose;
know the third parties to whom your personal data is transferred, domestically or abroad;
request correction of incomplete or inaccurate data;
request deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK;
request that correction, deletion or destruction be notified to third parties to whom the data has been transferred;
object to any adverse outcome arising from the exclusively automated analysis of your data;
claim compensation for damage arising from unlawful processing of your data.
9. How to exercise your rights
You may submit your requests concerning the rights above to us in accordance with the Communiqué on the Principles and Procedures of Application to the Data Controller. Your application should include your identity information and the details of your request, and may be submitted:
in writing to our registered address (with a wet or verified signature);
through your registered electronic mail (KEP) address to our KEP address [Insert];
by email to info@risuscare.com from an email address previously registered with us, or by other methods permitted under the applicable legislation.
We will conclude your request free of charge and as soon as possible, and in any event within thirty (30) days of receipt, in line with the nature of the request. Where a fee is applicable under the tariff determined by the Personal Data Protection Board, we may charge that fee. If your request is refused, if you find the response insufficient, or if we do not respond in time, you have the right to file a complaint with the Personal Data Protection Board within the periods set out in the Law.
10. Contact
Email: info@risuscare.com
Phone / WhatsApp: +90 542 336 64 00
Address: Meşrutiyet Mah. Ebe Kızı Sok. Sosko İş Merkezi No: 16/A6, Şişli, İstanbul, Türkiye
11. Updates
We may update this notice from time to time in line with changes in our practices or the applicable legislation. The current version is always published on this page with the "Last updated" date above.