Customer Information Notice

1. Data Controller

Your personal data is processed by Bona Viva Uluslararası Sağlık Turizm Danışmanlık İnşaat ve Ticaret Limited Şirketi (“Company” or “Bona Viva Tourism”) in its capacity as the data controller.

2. What Data Is Processed?

In case you benefit from our services or contact us, the following personal data may be processed:

• Name, surname, Turkish ID/passport information, nationality

• Contact details such as phone number, e-mail, address

• Health data (treatment request, diagnostic report, past medical information)

• Travel preferences, accommodation and transportation details

• Payment/invoice information

• Request/complaint details

• Website browsing data (IP, cookies)

3. Methods of Collecting Personal Data

Your personal data is collected through the following methods:

• Contact and reservation forms on our website

• E-mail, telephone, WhatsApp, call center services

• Our overseas business partners or representatives

• Documents shared by you to be submitted to healthcare institutions

• Cookies and web analytics tools

• Verbal, written or electronic means, through automated or non-automated methods

4. Purposes and Legal Grounds for Processing Personal Data

Your personal data is processed for the following purposes and legal grounds in accordance with Articles 5 and 6 of the Law:

5. Processing of Special Category Personal Data

Your health data may be processed only:

• With your explicit consent, or

• For the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, by persons or healthcare institutions subject to confidentiality obligations,

• Provided that necessary administrative and technical measures are taken.

6. Transfer of Personal Data

Your personal data may be transferred to the following parties in line with service provision, legal compliance and operational requirements:

• Contracted clinics and hospitals

• Hotels, transportation/transfer companies

• Interpreters and accompanying service providers

• Insurance companies

• Overseas representatives and partner agencies

• Companies providing consultancy, legal, accounting and software services

• Company shareholders and board members

• Authorized public institutions and organizations

• Reservation systems, flight platforms

• Digital advertising consultants and advertising platforms (e.g., Google, Meta)

In the event of a transfer abroad, explicit consent will be obtained, or methods approved by the Authority within the scope of Article 9 of the Law will be applied.

7. Your Rights as a Data Subject

Pursuant to Article 11 of the Law, you have the right to:

• Learn whether your data is being processed

• Request information if your data has been processed

• Learn the purpose of processing and whether it is used appropriately

• Learn the third parties to whom your data has been transferred

• Request correction if it is incomplete/incorrect

• Request deletion/destruction of data

• Object to results arising from automated processing

• Request compensation in case of damage

8. Application Method

You may submit your requests through the following channels:

• info@bonavivatourism.com

• Via the “Relevant Person Application Form” on our website

• In writing to our Company with a wet-signed petition

Your requests will be responded to within 30 days at the latest. If necessary, a fee may be charged in accordance with the tariff determined by the Data Protection Authority.

9. About the Policy

This notice has been prepared within the scope of the Bona Viva Personal Data Protection and Processing Policy. For more detailed information, please refer to the Policy.pdf document.