Privacy Policy

1.Data controller

The data controller is the operator of the MyClinicTrip website, who can be contacted at myclinictrip@gmail.com.

For any request concerning personal data you can write to myclinictrip@gmail.com. No data protection officer (DPO) has been appointed, as this is not mandatory for the processing described in this notice.

2.What data we collect

The site collects personal data only in the cases listed below.

3.Data on healthcare facilities

MyClinicTrip is an independent informational directory that processes factual, publicly accessible data on healthcare facilities: name, address, public contact details, official website and presence in the public registries of the Ministry of Health of the Republic of Türkiye (T.C. Sağlık Bakanlığı). The processing is carried out for informational and documentation purposes, on the basis of the legitimate interest in organising and making consultable information that is already public, citing its source.

The facilities concerned can request the correction of inaccurate information or dispute their presence in the directory through the report form available on the site or by writing to myclinictrip@gmail.com. Every request is assessed case by case, taking into account the public and factual nature of the data, the available sources and the interests involved.

4.Purposes and legal bases

• Operation of the directory — processing of public, factual data on healthcare facilities for informational purposes. Legal basis: legitimate interest (art. 6.1.f GDPR).
• Replying to contacts and reports — handling of messages sent voluntarily through the site's forms. Legal basis: consent expressed by submitting the form (art. 6.1.a GDPR).
• Site security — prevention of abuse and technical operation (hosting provider logs, anti-spam measures on the forms). Legal basis: legitimate interest (art. 6.1.f GDPR).

5.Data retention

Messages received through the contact and report forms are kept for the time strictly necessary to handle the request and then deleted. Technical logs are managed by the providers listed in the next section according to their respective policies. Factual data on facilities remains published as long as the facility is present in the directory, unless the correction or removal procedures lead to a different outcome.

6.Recipients and providers

Data is not sold or transferred to third parties for marketing purposes. The following providers are used to run the site:

• Vercel — site hosting and technical server logs.
• Supabase — database and authentication for the administrative area; the project is hosted in the European eu-central region (Zurich).
• Resend — sending of notification emails to the operator only, when a message or a report arrives.
• Google Maps Platform — the Google scores shown on facility pages are obtained by the site's server; this integration does not install cookies and makes no requests to Google from the user's browser.
• Google Analytics 4 (Google Ireland Ltd.) — aggregate visit statistics, active only if the user consents to the "Statistics" cookie category. Consent can be withdrawn at any time from the Cookie Policy.

Data may also be disclosed to the competent authorities where required by law.

7.Transfers outside the European Economic Area

Some of the providers listed may have offices or infrastructure outside the European Economic Area. In such cases the transfer takes place on the basis of the safeguards provided for by the GDPR, such as adequacy decisions of the European Commission or the standard contractual clauses adopted by the providers themselves.

8.Rights of the data subject

Under articles 15–21 of the GDPR, you have the right to request access to your personal data, its rectification or erasure, the restriction of processing, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

To exercise these rights, write to myclinictrip@gmail.com. You also have the right to lodge a complaint with the competent data protection supervisory authority, for example the one of your country of residence.

9.Minors

The site is an informational resource and is not intended for minors. It has no user areas and does not knowingly collect personal data of minors.

10.Security

The site adopts technical measures that are reasonable and proportionate to the processing carried out: encrypted connections (HTTPS), database access restricted through authorisation rules and an administrative area protected by authentication, reserved for the operator only. The contents of the forms are not recorded in the application logs.

11.Changes to this notice

This notice may be updated to reflect changes to the site or to the law. Updated versions are published on this page with the date of the last update.

12.Contact

For questions about this notice or about the processing of data you can write to myclinictrip@gmail.com or use the contact page.