Last updated · 21.10.2026
This is a translation for information. The Turkish text prevails.
What this page is about
This page explains the rights of people whose personal data is processed under Turkish Personal Data Protection Law No. 6698 (the "Law", known in Türkiye as KVKK), and how to exercise these rights with the data controller, Medassist Turizm ve Seyahat A.Ş. ("MedAssist"). You can find the purposes and legal grounds for processing your personal data on our "Privacy notice" page.
Data controller
– Company name: Medassist Turizm ve Seyahat A.Ş.
– Address: Alibeyköy Mah. Namık Kemal Cad. 73-77, Kat: 1 No: 23, Eyüpsultan / İstanbul, Türkiye
– Email: medassist@medassist.com.tr
– Phone: +90 212 427 47 47 (office)
– Tax number: 6141179403
– Istanbul Chamber of Commerce registration number: 184968-5
Your rights
Under Article 11 of the Law, you have the right to apply to MedAssist to:
– learn whether your personal data is processed,
– request information about it if it has been processed,
– learn the purpose of processing and whether your data is used in line with that purpose,
– know the third parties in Türkiye or abroad to whom your personal data has been transferred,
– request the correction of your personal data if it is incomplete or inaccurate,
– request the deletion or destruction of your personal data under the conditions set out in Article 7 of the Law,
– request that third parties to whom your personal data has been transferred be notified of correction, deletion or destruction,
– object to a result against you arising from analysis of the processed data exclusively through automated systems,
– claim compensation if you suffer damage because your personal data has been processed unlawfully.
You can also withdraw at any time the explicit consent you gave for the processing of your health data. Withdrawal does not affect the lawfulness of processing carried out up to that date; once you withdraw it, your health data is deleted, except for records we are legally required to keep, and the organisation process can no longer rely on that data.
How to apply
You can send your application, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in one of the following ways:
– In writing: deliver your signed application by hand to the address above, or send it through a notary public.
– With a secure electronic signature or mobile signature: send your signed application to medassist@medassist.com.tr.
– From your registered email address: write to medassist@medassist.com.tr from the email address you previously gave us and which is in our records.
Please write "Request for information under the Personal Data Protection Law" on the envelope or in the email subject line.
What your application must include
– your name, surname and, if the application is in writing, your signature,
– your Turkish identity number if you are a citizen of the Republic of Türkiye; if you are a foreign national, your nationality and your passport number or identity number, if any,
– your place of residence or business address for notification,
– your email address, phone and fax number for notification, if any,
– the subject of your request and, if any, information and documents supporting it.
If you apply on behalf of someone else, you must attach a document showing that you are authorised to do so (for example a power of attorney or a guardianship document). If we cannot verify your identity, we may ask you for additional information so that personal data is not disclosed to unauthorised persons.
How your application is concluded
Your application is concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest. If the process involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your request is accepted, it is carried out; if it is rejected, the reason is explained. Our answer is sent to you in writing or electronically, using the contact details given in your application.
Complaint to the Board
If your application is rejected, you find the answer insufficient or no answer is given in time, you can file a complaint with the Personal Data Protection Board within thirty days of learning of the answer and in any case within sixty days of the application date. Under Article 14 of the Law, a complaint cannot be filed before an application has been made to the data controller.
Treating hospitals
The hospitals and doctors who provide treatment are separate data controllers for the personal data they process. You can send applications concerning medical records kept by a hospital directly to that hospital; we will help you find out which hospital to contact.
Language
The Turkish version of this text prevails; versions in other languages are for information.