KVKK Data Processing Notice

Last updated: July 2026

As Bench Turizm Sağlık Hizmetleri Medikal Ürünler Dış Ticaret Ltd. Şti. (the “Company”), we attach the utmost importance to the security of your personal data. In this context, in accordance with the Turkish Personal Data Protection Law No. 6698 (the “KVKK”), we take the necessary measures to prevent the unlawful processing of and access to your personal data and to ensure its safekeeping. As data controller under the KVKK and related legislation, we process your personal data within the framework set out below.

1. Data controller

Company: Bench Turizm Sağlık Hizmetleri Medikal Ürünler Dış Ticaret Ltd. Şti.
Address: Cumhuriyet Mah. Yeni Yol 1 Sk. Now Bomonti Blok No: 2 İç Kapı No: 96 Şişli / İstanbul, Türkiye

2. How your personal data is obtained

Your personal data is obtained in accordance with the KVKK and related legislation for the purposes of mediating, carrying out and managing medical diagnosis, treatment and care services; planning and managing healthcare services and their financing; improving the quality of these services; performing activities foreseen or exempted by public authorities; and fulfilling our obligations regarding record-keeping, reporting and information.

Depending on the nature of the service provided to you, your personal data is collected and processed through any verbal, written, visual or electronic channel, for the purposes listed below and so that the Company can fully and properly perform its contractual and legal obligations. This collection and processing is based on the legal grounds set out in the KVKK, the Basic Law on Health Services No. 3359, Decree Law No. 663, the Regulation on International Health Tourism and Tourist Health, the Regulation on Private Health Institutions, the Regulation on Personal Health Data, and other Ministry of Health regulations and applicable legislation.

3. The personal data we process

Within the framework described above, the personal data — and in particular the special categories of personal data, led by your personal health data — that we process are as follows:

Identity: e.g. first name, surname, date of birth, place of birth, national ID number, passport number for non-Turkish citizens, gender, social-security number, nationality, marital status.
Contact: e.g. telephone number, residential address, e-mail address.
Financial: e.g. bank account number, IBAN details.
Visual and audio records: e.g. photographs, call-centre voice recordings, CCTV footage recorded during your visit to our premises.
Health information: e.g. blood type, medical history, check-up results, consultation reports, operation details, treatment method applied, type of illness, medications used, medical values, test results.
Biometric / genetic data: e.g. fingerprint, palm print, genetic information.
Travel data: e.g. flight information, boarding card, tour route, accommodation details.
Physical space security: e.g. camera image recordings taken to ensure the security of our premises.
Transaction security: e.g. log records and IP addresses obtained while you use our website.

4. Purposes of processing

Your general and special-category personal data listed above may be processed by the Company for the following purposes:

Protecting public health, preventive medicine, and carrying out medical diagnosis, treatment and care, pharmacy and laboratory activities.
Sharing requested information with the Ministry of Health, the Social Security Institution and other public institutions in accordance with applicable legislation.
Fulfilling legal and regulatory requirements.
Invoicing for our mediation and healthcare services.
Providing translation and interpreting services.
Informing you about your appointment through our call centre and digital channels.
Verifying your identity.
Planning and managing the internal operations of the institution.
Carrying out analysis in order to improve our healthcare services.
Providing training to our employees.
Monitoring and preventing abuse and unauthorised transactions.
Verifying your relationship with the institutions we have agreements with.
Responding to all your questions and complaints regarding our mediation and healthcare services.
Ensuring the control of transport services.
Carrying out advertising, promotion and marketing activities.
Measuring, increasing and researching patient satisfaction.

Your general and special-category personal data is stored with great care and in compliance with legislation, in physical and electronic archives held by the Company and its external service providers, taking every administrative and technical measure to ensure an appropriate level of security.

5. Transfer of your personal data

Within the framework of the legislation referred to above and for the purposes explained, your personal data obtained by the Company may be shared with:

Judicial authorities.
Laboratories, medical centres, medical-device suppliers and healthcare institutions in Türkiye or abroad with which we cooperate to mediate medical diagnosis and treatment.
Your authorised legal representatives, our Company officials and shareholders.
Third parties from whom we obtain advice, including the lawyers, tax advisers, accountants and auditors we work with.
Regulatory and supervisory bodies and official authorities.
Systems and natural or legal persons located in Türkiye or abroad.
Our suppliers, support-service providers, archiving-service providers and business partners whose services we use or with whom we cooperate, and private-law persons in Türkiye and abroad. (You may obtain more detailed information by applying to the Company in writing.)

6. Destruction of your personal data

The Company stores the personal data it processes for the periods specified by legislation. Where no period is specified, personal data is retained for as long as required by the Company’s practices and the customs of commercial life, in connection with the services provided when the data was processed. Once these periods expire, the personal data is deleted, destroyed or anonymised on the first destruction date, in accordance with Article 7 of the KVKK.

7. Your rights and how to apply

Under Article 11 of the KVKK you may submit your requests to the Company. In accordance with the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10 March 2018, and current legislation, you may submit your request:

In person, by hand, to Cumhuriyet Mah. Yeni Yol 1 Sk. Now Bomonti Blok No: 2 İç Kapı No: 96 Şişli / İstanbul;
Via notary to the same address;
With a secure electronic or mobile signature to our registered electronic-mail (KEP) address benchturizm@hs01.kep.tr; or
From the e-mail address registered in our system, to info@estecapelli.com.

For a person other than the data subject to make a request, a notarised special power of attorney issued on behalf of the applicant by the data subject is required. Requests submitted properly to the Company are concluded within thirty days at the latest. If concluding the request requires an additional cost, the fee set in the tariff determined by the Personal Data Protection Board may be charged. Where the response is provided on a recording medium such as a CD or flash drive, a fee not exceeding the cost of the medium may be requested. The Company may request information from the applicant to determine whether they are the data subject, and may direct questions regarding the application in order to clarify the matters raised.