Privacy Policy

Last updated: June 2026

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data through the Just Clinic Istanbul website.

1. Data controller

Legal name: İstanbul Soft Bilişim ve Danışmanlık Ltd. Şti.
Trading name: Just Clinic Istanbul
Activity: Intermediation and consultancy in medical tourism and aesthetic surgery
Registered address: Mecidiyeköy Mah. Raşit Rıza Sok. Yıldırım İş Hanı No:3 Kat:2 Daire: 5, Şişli, İstanbul, Türkiye, Turquía
Tax ID / Company registration number: [Número de identificación fiscal / Vergi No — pendiente]
Contact email: info@justclinicistanbul.com
Phone: +90 533 390 65 41

İstanbul Soft Bilişim ve Danışmanlık Ltd. Şti. (Just Clinic Istanbul) acts as the data controller for personal data collected through contact forms, free consultation requests and other channels enabled on the website https://justclinicistanbul.com.

2. Personal data we collect

We may process the following categories of data:

  • Identification and contact data: full name, phone number, email address and country of residence.
  • Communication data: content of messages, enquiries and requests sent via forms, email, WhatsApp or other channels indicated on the site.
  • Health-related data: clinical information you voluntarily provide (medical history, treatments of interest, reason for enquiry) and images (body or facial photographs) you send us to assess your case and advise on medical or aesthetic procedures.
  • Technical data: IP address, browser type, device and browsing data collected through cookies (see our Cookie Policy).

Please do not include third-party data in your messages without their authorisation. Health-related images should only be sent when necessary for assessment of your enquiry and with full understanding of their purpose.

3. Purpose of processing

We process your personal data for the following purposes:

  • To manage and respond to your information requests, free consultations and quote enquiries.
  • To assess your case on a preliminary basis and connect you with partner professionals and clinics in Istanbul.
  • To coordinate planning for your medical trip, appointments, post-operative follow-up and communications related to the service requested.
  • To comply with applicable legal obligations and respond to requests from competent authorities.
  • To improve our services and website experience when you have consented to analytical cookies.

4. Legal basis for processing

The legal basis for processing your data is:

  • Consent of the data subject (Article 6(1)(a) GDPR): when you submit forms, images or messages, you consent to the processing of your data for the stated purposes. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Performance of pre-contractual measures or contract (Article 6(1)(b) GDPR): when processing is necessary to manage the relationship arising from your service request.
  • Legitimate interest (Article 6(1)(f) GDPR): to ensure website security and respond to general enquiries, always respecting your rights and freedoms.

Processing of health data and clinical images is based on your explicit consent (Article 9(2)(a) GDPR), given when you voluntarily send such information for preliminary medical assessment.

5. Data retention

We will retain your personal data while you maintain an active relationship with Just Clinic Istanbul or for as long as necessary to fulfil the purposes for which they were collected. Once the relationship ends, data will be blocked for legally required periods (for example, tax or liability obligations) and, after that period, securely deleted. Clinical images will be kept only for as long as necessary to assess and follow up your case, unless you request deletion earlier.

6. Recipients and international transfers

Your data may be shared with:

  • Medical professionals, clinics and partner hospitals in Turkey, when necessary for assessment and planning of your treatment.
  • Technology service providers (hosting, email, communication tools) acting as processors and contractually obliged to protect your data.
  • Public authorities, when required by law.

Some recipients may be located outside the European Economic Area (EEA), particularly in Turkey. In such cases, Just Clinic Istanbul will adopt appropriate safeguards under the GDPR (standard contractual clauses, adequacy decisions or other recognised measures) to ensure an equivalent level of protection.

7. Your rights

You may exercise the following rights at any time:

  • Access: obtain confirmation of whether we process your data and access to them.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure («right to be forgotten»): request deletion of your data where applicable.
  • Objection: object to processing of your data in certain circumstances.
  • Restriction of processing: request limitation of processing in legally provided cases.
  • Data portability: receive your data in a structured format and transmit them to another controller, where technically feasible.
  • Withdrawal of consent: withdraw consent given without retroactive effect.

8. How to exercise your rights

To exercise your rights, send a request to info@justclinicistanbul.com stating the right you wish to exercise, your full name and a copy of identification. We will respond within one month, extendable by two further months in complex cases, in accordance with the GDPR.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data does not comply with applicable law. You can contact the AEPD via its website: www.aepd.es.