Privacy Policy for Elara Medical Tourism Agency

Last updated October 12,2023

1. Introduction:

About Elara Medical Tourism Agency:

Elara Medical Tourism Agency is a premier service provider dedicated to offering medical tourism solutions for individuals seeking high-quality medical procedures in Turkey. Specializing in areas such as aesthetics, hair transplants, and other medical services, we act as the bridge connecting patients from the UK, USA, France, Romania, various Arab countries, Russia, and other regions to renowned medical professionals and institutions in Turkey.

Our Commitment to Privacy:

We deeply value the trust that our clients place in us, not only in their medical journey but also in the protection and confidentiality of their personal information. Recognizing the sensitive nature of medical tourism, we uphold the highest standards of data protection and privacy. We are dedicated to ensuring that our clients’ personal and health-related data are handled with utmost care, transparency, and in compliance with international privacy laws.

As we guide you through your medical tourism experience, our commitment is to:

• Transparency: Clearly communicate how and why we use your information.
• Control: Offer you choices about the data you share and how it’s used.
• Protection: Safeguard your information with stringent security measures.
• Compliance: Regularly review and adapt to evolving international privacy standards and regulations.

We encourage all our clients and users to familiarize themselves with our privacy policy to understand our practices and your rights concerning your data.

2. Data Controller Details:

Who is the Data Controller?

The data controller responsible for processing and managing your personal data in compliance with this privacy policy is Elara Medical Tourism Agency.

Company Details:

• Name: Elara Medical Tourism Agency
• Registered Address: B Block of Folkart Towers, manas Blv, Adalet Mah Office 2002, 20th floor, B block, 35530 Bayraklı/İzmir/Türkiye
• Registration Number: [4831359495]
• Contact Email: admin@elaramedical.com
• Phone Number: +90 544 977 9074
• Website: www.elaramedical.com

For any inquiries, concerns, or requests regarding your personal data, you may contact us using the details provided above. Our dedicated team will assist and address your queries promptly.

3. Scope of the Policy:

Geographical Coverage:

This privacy policy applies to individuals accessing our services and website from the following countries:

• United Kingdom
• United States of America
• France
• Romania
• Russia
• Arab countries (including but not limited to Saudi Arabia, United Arab Emirates, Egypt, etc.)

While the main data controller operations are based in Turkey, our commitment to privacy and data protection extends to clients from these countries and any other regions where our services might be sought.

Applicability:

The policy is applicable to:

• Prospective Clients: Individuals considering or inquiring about our medical tourism services.
• Registered Clients: Individuals who have registered on our website or availed of our services.
• Website Visitors: Any user who accesses our website, regardless of whether they use our services.
• Partners & Affiliates: Any third-party entities or individuals with whom we collaborate to provide our services.

By accessing our website, making inquiries, or using our services, individuals agree to the terms laid out in this privacy policy and the data practices described herein. If you do not agree with our data practices, we advise not using our website or services.

4. Information We Collect

At Elara Medical Tourism Agency, we prioritize offering a seamless experience to our clients while ensuring their data is protected. In our quest to deliver exemplary medical tourism services, we collect several types of information. The nature and purpose of this data collection are explained below:

a. Personally Identifiable Information (PII)

This refers to information that can directly identify an individual. We collect the following PII:

• Name: To address and recognize our clients.
• Email Address: For communication, updates, and inquiries.
• Physical Address: To facilitate certain services or deliveries related to our offerings.
• Passport & ID Number: Necessary for specific medical services, travel arrangements, and to ensure the identity of our clients.

b. Health-related Data

Given the nature of our services, we collect health information pertinent to the medical procedures our clients are seeking:

• Medical History: To understand our client’s health background and ensure appropriate medical services.
• Specific Medical Queries or Requirements: To tailor our services to each client’s unique needs.

c. Transactional Data

To facilitate bookings and other related services, we collect:

• Payment Details: Including credit/debit card numbers, bank account information, and other payment methods.
• Payment History: A record of transactions with our agency for reference and accounting purposes.

d. Technical Data

For the enhancement of our website experience and to understand our user base, we gather:

• Geolocation: To customize our services based on the client’s location and to facilitate local partnerships.
• Device Type: Helps optimize our website’s user experience.
• IP Address: For security measures and demographic analytics.

e. Cookies and Tracking Technologies

Our website uses cookies and other tracking tools to:

• Improve User Experience: By remembering preferences and user sessions.
• Analyze Website Traffic: Understanding how users interact with our site helps us make informed improvements.
• Ad and Content Personalization: To offer relevant content to our users.

We respect our client’s choices, and details on how to manage or opt-out of cookies can be found in our dedicated ‘Cookies and Tracking’ section.

5. How We Collect Information

At Elara Medical Tourism Agency, we collect information through various methods to ensure our services align with our client’s needs and to provide a superior user experience. Here’s an overview of how we gather the information:

a. Direct Submissions by the User

Our clients and website visitors provide a significant portion of the data we collect. This direct provision of information occurs in various scenarios:

• Registration: When a new user signs up on our website or platform, they provide details such as name, email address, and other relevant data.
• Consultation Forms: When seeking advice or specific medical services, clients might fill out consultation forms detailing their medical history, preferences, and other pertinent information.
• Feedback and Reviews: After availing of our services, clients might provide feedback or write reviews, sharing their experiences and insights.
• Contact Us: Users who reach out to us via our contact form, email, or other communication channels provide data for correspondence.

b. Automated Data Collection

Several pieces of information are collected automatically as users interact with our platform and services:

• Website Analytics: Tools such as Google Analytics help us understand user behavior on our website. This includes details like pages visited, time spent on the site, and the user’s journey through our platform.
• Online Payments: When a transaction is made on our platform, payment gateways provide transactional data, ensuring a secure transfer of funds.
• Cookies and Trackers: These automatically collect data to enhance the website experience, such as remembering user preferences or analyzing website traffic patterns.
• Technical Logs: Server logs capture details like IP address, device type, browser used, and timestamps of access.

While these methods provide essential data for our operations, our commitment is to use this information responsibly, prioritizing our client’s privacy and security at all times.

6. Purpose and Legal Basis for Processing Data

At Elara Medical Tourism Agency, data processing is a crucial aspect of our operations. We believe in a transparent approach, ensuring our clients fully understand why and how their data is processed. Here are the primary purposes for which we process data and their legal justifications:

a. To Provide Medical Tourism Services

Purpose: To coordinate, manage, and offer medical procedures and related services to our clients.

Legal Basis: Contractual Obligation. Processing this data is essential to fulfill the contract between Elara Medical Tourism Agency and the client seeking medical services.

b. To Facilitate Online Payments

Purpose: To enable secure online transactions for services availed, ensuring smooth financial processes.

Legal Basis: Contractual Obligation. It’s necessary to process payment details to conclude the financial aspects of the services agreed upon.

c. To Improve and Personalize User Experience

Purpose: To enhance our website’s functionality, offer personalized content, and improve overall service quality based on user behavior and feedback.

Legal Basis: Legitimate Interests. It’s in our legitimate business interest to ensure our website and services resonate with our users, fostering satisfaction and loyalty.

d. Compliance with Legal Obligations

Purpose: To adhere to legal requirements, regulations, and standards in Turkey and the countries of our international clientele.

Legal Basis: Legal Obligation. As a business entity, we are bound to comply with the regulatory framework of Turkey and other relevant jurisdictions, ensuring data protection and other associated laws are upheld.

It’s worth noting that wherever consent forms the basis for data processing, users have the right to withdraw this consent at any time. We always prioritize our clients’ rights, ensuring data processing aligns with both ethical standards and legal requirements.

7. International Data Transfers

Given the global nature of our services at Elara Medical Tourism Agency, there may be instances where personal data is transferred across international borders. This is particularly relevant when dealing with clients from various countries and collaborating with international partners. Here’s how we manage these international data transfers:

a. Why We Transfer Data Internationally:

• Service Facilitation: To coordinate medical procedures, travel arrangements, and other associated services, data may need to be shared with our partners outside Turkey.
• Technical Infrastructure: Some of our technical infrastructure, such as servers or cloud storage solutions, may be located in countries different from where the data was collected.

b. Safeguards in Place:

We understand the sensitivity associated with transferring personal data across borders and have put in place robust measures to ensure this data remains protected:

• Standard Contractual Clauses: We utilize standard contractual clauses approved by the European Commission or relevant authorities for data transfers, ensuring that the data transferred receives an adequate level of protection irrespective of the destination country.
• Data Protection Impact Assessments (DPIAs): Before any substantial data transfer, we conduct DPIAs to understand potential risks and put in place mitigation measures.
• Compliance with Adequacy Decisions: We only transfer data to countries that have been deemed to provide an adequate level of data protection as per EU standards or equivalent criteria in other jurisdictions.

c. Your Rights and Choices:

• Informed Consent: Before any data transfer, we ensure that users are fully informed and have provided explicit consent, especially for destinations without an adequacy decision.
• Data Access and Corrections: Clients have the right to access their data, ask for corrections, or even object to data transfers to specific countries.
• Revoking Consent: At any point, clients have the right to revoke their consent for international data transfers.

Our commitment is to maintain the sanctity and security of our client’s data, no matter where it resides. By abiding by the highest international standards and legal provisions, we aim to ensure that our clients’ data is always protected, irrespective of geographical boundaries.

8. How We Use and Share the Information

At Elara Medical Tourism Agency, our primary goal is to provide top-tier medical tourism services. To achieve this, we utilize the information collected for various purposes, ensuring it’s done with utmost discretion, transparency, and security. Here’s an overview of how we use and share the collected information:

a. Internal Processing and Coordination:

Purpose: We use the data internally to process requests, coordinate medical services, and ensure smooth operational workflows.

Examples: This includes scheduling appointments, matching clients with the right medical providers based on their requirements, and ensuring all pre-procedure preparations are completed.

b. Customer Service

Purpose: Data helps our customer service team understand client needs, answer queries, and resolve any issues swiftly.

Examples: If a client contacts us regarding their appointment or any service-related query, our team can promptly access the necessary details to assist the client effectively.

c. Sharing with Third-party Medical Providers or Partners

Purpose: To deliver our services, it’s essential to collaborate with medical providers, hospitals, clinics, and other partners.

Examples: Once a client opts for a specific medical procedure, we share relevant health data and personal details with the chosen medical provider to facilitate the service.

Safeguards: All our third-party partners are meticulously vetted, and we ensure they adhere to strict data protection standards. Additionally, data shared is limited strictly to what’s necessary for the provision of the medical service.

d. Legal Disclosures

Purpose: In specific scenarios, we may be legally obligated to share data with regulatory bodies, government agencies, or law enforcement.

Examples: This could be in response to a legal request like a court order, to investigate potential illegal activities, or to ensure the safety and security of our clients and our operations.

Safeguards: Such disclosures are made judiciously, ensuring they adhere to the legal requirements of Turkey and other relevant jurisdictions. We ensure that any request for data is valid, specific, and within the bounds of the law.

It’s important for our clients to know that their trust is paramount. We never sell or rent personal information to third parties for marketing purposes. Every use or sharing of data is driven by our commitment to provide seamless medical tourism services while upholding the highest ethical and legal standards.

9. Data Retention

Data retention is a critical aspect of our data protection strategy at Elara Medical Tourism Agency. We are committed to ensuring that personal data is only stored for as long as necessary to fulfill the purposes for which it was collected, and in compliance with our legal obligations, dispute resolution processes, and enforcement of our agreements. Here’s how we approach data retention:

a. Retention Periods

Medical Records and Health-related Data: Given the nature of medical services, health-related data may need to be retained for extended periods, often determined by medical standards and legal obligations. Typically, such data is retained for a duration of 10 years, unless a different period is required by specific regulations or medical practices.

• Transactional Data: Information related to payments and transactions is typically retained for a period of 7 years, aligning with standard financial and tax record-keeping obligations.
• Personal Identifiable Information (PII): Data such as name, email, address, and other contact details are retained for as long as the user is active with our services. If there’s no activity from a user for a consecutive period of 5 years, the PII data is reviewed and possibly archived or deleted.
• Technical Data: Data like IP addresses, geolocation details, and device information is typically held for a shorter duration, usually up to 2 years, to assist with system security and operational purposes.

b. Criteria for Determining Retention Duration

Several factors influence our data retention periods:

• Nature of Data: Medical data may require longer retention than technical data due to its significance and potential future medical relevance.
• Purpose of Collection: Data collected for transactional purposes has a different retention need than data collected for marketing or feedback.
• Legal and Regulatory Obligations: Laws in Turkey and the relevant jurisdictions our clients hail from may mandate specific retention periods.
• Contractual Obligations: Contracts with third-party providers or clients may specify data retention terms.

c. Deletion of Data

Once the data has fulfilled its purpose and is no longer required, it undergoes a secure deletion process. This ensures that the data, once deleted, cannot be recovered or reconstructed.

d. Archiving and Anonymization

In instances where data might have research or analytical value, we may choose to archive or anonymize it. Anonymized data strips any personally identifiable information, ensuring individual privacy while preserving the data’s analytical value.

We remain committed to treating our client’s personal data with utmost respect, ensuring it’s only retained for genuine, necessary purposes, and is adequately protected throughout its lifecycle.

10. How We Protect Your Information

At Elara Medical Tourism Agency, safeguarding your personal information is a top priority. In today’s digital age, ensuring data privacy and security is not just a legal obligation, but also a testament to our commitment to our clients. Here’s how we ensure your data remains protected:

a. SSL Encryption

Purpose: Secure Sockets Layer (SSL) encryption ensures that the data transferred between our users’ devices and our servers remains confidential and tamper-proof.

Implementation: Our website and all associated platforms operate under SSL, evident from the “https” prefix in our web address and often represented by a padlock symbol in the browser’s address bar.

b. Secure Payment Gateways

Purpose: To protect sensitive financial information, such as credit card details, during online transactions.

Implementation: We collaborate only with reputed payment gateway providers known for their high-security standards. These gateways employ advanced encryption techniques to shield transactional data, ensuring your financial details remain confidential.

c. Data Access Restrictions

Purpose: To prevent unauthorized access, data breaches, or misuse of personal information.

Implementation:

• Role-Based Access Control (RBAC): Employees and partners are granted access to data based on their role within the organization. Not everyone has access to all data. For instance, a customer service representative might not have access to medical records unless it’s essential for their role.
• Multi-factor Authentication (MFA): Where feasible, we employ MFA techniques to ensure that only authorized individuals can access sensitive data.
• Regular Audits: Periodic audits help us identify any potential lapses or vulnerabilities in our access control mechanisms.

d. Regular Security Updates and Patches

Purpose: To ensure our systems remain protected against known vulnerabilities and threats.

Implementation: We maintain a routine of updating our software, systems, and platforms with the latest security patches. Our IT team remains vigilant to emerging security threats and ensures our defense mechanisms are up-to-date.

e. Physical Security

Purpose: To safeguard our servers, databases, and other critical infrastructure from physical breaches.

Implementation: Our servers and data centers are housed in facilities with round-the-clock surveillance, biometric access controls, and other state-of-the-art security measures.

f. Employee Training and Awareness

Purpose: Ensuring that our staff understands the importance of data privacy and are aware of best practices.

Implementation: Regular training sessions, workshops, and awareness campaigns ensure our team remains well-equipped to handle personal data responsibly and is updated about evolving security protocols.

Through these measures, we endeavor to provide a robust shield for your data. While we strive for maximum security, it’s important to note that no system can guarantee absolute security. However, our commitment lies in ensuring that all reasonable measures are in place to safeguard your personal information.

11. Cookies and Tracking

Digital platforms, including websites, use tracking technologies like cookies to improve user experience, gather insights, and deliver personalized content. At Elara Medical Tourism Agency, we believe in transparency regarding how we utilize these technologies. Here’s a detailed overview of our approach to cookies and tracking:

a. What are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit our website. They store information about your preferences, navigation patterns, and other useful details that help enhance your user experience.

b. Types of Cookies We Use:

• Role-Based Access Control (RBAC): Employees and partners are granted access to data based on their role within the organization. Not everyone has access to all data. For instance, a customer service representative might not have access to medical records unless it’s essential for their role.
• Multi-factor Authentication (MFA): Where feasible, we employ MFA techniques to ensure that only authorized individuals can access sensitive data.
• Regular Audits: Periodic audits help us identify any potential lapses or vulnerabilities in our access control mechanisms.

c. Purpose of Cookies

• Enhancing User Experience: Cookies remember your preferences, like language settings, and offer a more tailored browsing experience.
• Site Performance and Analytics: Through cookies, we gather insights into how users interact with our site – which pages are visited most, how long users stay on a page, and more. This helps us refine and improve our content and services.
• Advertising and Marketing: Cookies help us and our advertising partners display relevant ads based on your interests and previous interactions with our site.
• Security: Some cookies play a role in ensuring the security of our platform by detecting suspicious activities and preventing unauthorized access.

d. Managing Cookies

You have the right to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, doing so might prevent you from taking full advantage of the website.

e. Other Tracking Technologies

• Web Beacons: These are tiny graphics with a unique identifier, similar in function to cookies, used to track users’ online movements.
• Pixel Tags: These are used in conjunction with cookies to help operate our services and gather analytics data.
• Analytics Services: Tools like Google Analytics help us understand user behavior by providing data on visits, page views, time spent, and more.

f. Opting Out

If you do not wish to have cookies placed on your computer or want to be notified before any cookie is set, you can set your web browser to do so, if your browser so permits. Moreover, if you wish to opt-out of interest-based advertising, there are tools and resources available like the Digital Advertising Alliance’s (DAA) Consumer Choice Tool.

We prioritize your privacy and aim to provide a transparent, user-controlled browsing experience. For more information or specific queries about our cookie and tracking practices, please contact us directly.

12. Your Rights and Choices

Your trust in Elara Medical Tourism Agency is paramount to us, and as a part of that trust, we respect and prioritize your rights regarding your personal data. As our esteemed client, you have the following rights and choices when it comes to your information:

a. Right to Access

Definition: You have the right to request access to your personal data that we hold. This allows you to receive a copy of the personal data and check if we are processing it lawfully.

Procedure: Upon request, we will provide a copy of the data we process about you. Depending on the jurisdiction, a small fee might be applicable for administrative costs.

b. Right to Modification

Definition: If you believe any of the personal data we hold about you is incorrect or incomplete, you have the right to request its correction or modification.

Procedure: Once we receive your request and verify the inaccuracy, we will promptly correct the data.

c. Right to Deletion (Right to be Forgotten)

Definition: Under certain circumstances, you can request the deletion of your personal data from our records.

Procedure: Upon your request, and if there are no legal obligations or ongoing transactions preventing us, we will delete your personal data from our systems.

d. Right to Object

Definition: You have the right to object to the processing of your personal data for specific purposes, such as marketing.

Procedure: You can inform us of your objection, and we will cease the processing of your data for those purposes unless there’s an overriding legitimate reason.

e. Right to Data Portability

Definition: This right allows you to request a transfer of your data to another service provider, ensuring your data’s interoperability.

Procedure: Upon request, we will provide your data in a structured, commonly-used, machine-readable format to be transferred to another service.

f. Opt-out Rights

Definition: You can opt out of certain data processing activities or marketing communications at any time.

Procedure: For marketing communications, each of our emails will include an “unsubscribe” link at the bottom. For other data processing activities, you can directly contact us with your request.

g. Right to Limit Processing

Definition: Under certain circumstances, you may request that we limit the processing of your personal data.

Procedure: If you believe your personal data is inaccurate, used unlawfully, or no longer necessary, but you do not want it deleted, you can request that its processing be limited.

h. Right to Complain

Definition: If you believe that we are not processing your personal data in line with the law or our privacy commitments, you have a right to file a complaint with a supervisory authority.

Procedure: We encourage you to contact us directly with any concerns, but you also have the right to approach your local data protection authority.

To exercise any of these rights, please contact us using the details provided in the “Data Controller Details” section. We aim to respond to your request promptly and, in any event, within the legally stipulated time frame.

Please note that while we are committed to facilitating these rights, there might be circumstances, driven by legal obligations or other factors, that may prevent us from immediately or fully complying with your request.

13. Children’s Privacy

At Elara Medical Tourism Agency, we recognize the importance of protecting the privacy and safety of children. Our services are designed for adults and are not directed towards children. Here’s our stance on children’s privacy:

a. Age Limitation

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal data from individuals under the age of 18.

b. Verification Measures

While our services are not targeted towards children, we have implemented measures to verify the age of our users during the registration or data submission process. We may require users to provide their date of birth or other age-verifying information.

c. Unintentional Collection

If we become aware that we have unintentionally collected personal data from a child under the age of 18, we will take prompt steps to remove that data from our systems.

d. Parental Consent

If there ever arises a situation where we need to collect personal data from a child under the age of 18, we will do so only with explicit parental or guardian consent. We will provide parents or guardians with the ability to access, modify, or delete their child’s information.

e. Reporting

If you believe that we have collected information from a child under the age of 18 without parental consent, please contact us immediately using the details provided in the “Data Controller Details” section. We will investigate and take appropriate action.

We strongly advise parents and guardians to actively monitor and supervise their children’s online activities. It’s the responsibility of parents and guardians to ensure their child’s safety and privacy on the internet.

14. Third-party Links and Services

Elara Medical Tourism Agency’s website and digital platforms may contain links to third-party websites, services, and applications. We understand the importance of user awareness regarding such third-party interactions, and thus, we provide the following clarifications:

a. External Links

Our website may include hyperlinks to other websites, applications, or platforms that are not operated or controlled by us. While we strive to offer links to credible sources, we cannot guarantee the content, privacy policies, or practices of such third-party sites.

b. No Endorsement Implied

The inclusion of a link on our website does not imply endorsement of the linked site, service, or application by Elara Medical Tourism Agency. We do not review, validate, approve, or oversee these external sites and their content.

c. User’s Responsibility

It is your responsibility to review the privacy policies and terms of service of any third-party website or service you visit or use. Interaction with these sites will be at your own risk.

d. Data Sharing and Collection

These third-party sites might collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with their content. This can include tracking your interactions if you have an account and are logged into that website or service.

e. Liability Limitation

Elara Medical Tourism Agency is not liable for any harm or damages related to the purchase or use of goods, services, resources, content, or any other transactions made in connection with any third-party websites or services.

f. Notification

We encourage users to be aware when they leave our website and to read the terms and privacy policy of any third-party website or service that they visit.

g. Changes to Third-party Relationships

We might, over time, add or remove links or partnerships with third-party websites, services, or applications. We recommend that users regularly review our Privacy Policy to stay informed.

If you have any questions or concerns about a particular third-party service or link, please contact us using the details provided in the “Data Controller Details” section.

15. Updates to This Privacy Policy

Elara Medical Tourism Agency values transparency and trust, and as such, we are committed to regularly reviewing and updating our Privacy Policy to reflect new practices, technologies, and legal requirements. Here’s how we will manage and communicate these changes:

a. Revision Dates

At the top or bottom of our Privacy Policy, we will always display a “Last Updated” date, allowing users to see when the most recent revisions were made.

b. Notification Methods

If we make material changes to this policy, we will notify our users through prominent means such as sending an email, placing a notice on our website’s homepage, or through our other digital communication platforms.

c. Review Responsibility

It is your responsibility as a user to periodically review this Privacy Policy to be aware of any changes. However, we will do our best to ensure you are informed of significant changes.

d. Continual Use Implies Consent

Your continued use of our services after the changes have been made and communicated implies your acknowledgment and acceptance of the updated Privacy Policy.

e. Archived Versions

We will maintain archived versions of our Privacy Policy for review upon request. This allows users to view and understand what changes have been made over time.

f. Queries on Changes

If you have questions or concerns about any changes made to our Privacy Policy, you are encouraged to reach out to us using the details provided in the “Data Controller Details” section. We are committed to clarifying and addressing your concerns.

16. Contact and Complaints

Elara Medical Tourism Agency is dedicated to being accessible and responsive to our users, especially when it comes to the sensitive matter of privacy. If you have any questions, concerns, or complaints regarding our privacy practices, here’s how you can get in touch:

a. Direct Contact

Email: For immediate inquiries or concerns, you can reach out to our dedicated privacy team at [admin@elaramedical.com].

Phone: You can also call us at [+90 544 977 9074] during business hours for direct conversations.

Mail: For written communications, you can send letters to:

Elara Medical Tourism Agency: [B Block of Folkart Towers, manas Blv, Adalet Mah Office 2002, 20th floor, B block, 35530 Bayraklı/İzmir/Türkiye]

b. Designated Representative

We have a Data Protection Officer (DPO) appointed to address all privacy-related matters. You can directly communicate with our DPO at [dpo@elaramedical.com] for specialized concerns.

c. Complaints Procedure

If you believe that we have not addressed your privacy concerns satisfactorily, please provide a detailed written account of the issue so we can investigate further.

Should you feel that your concerns are still not addressed, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

d. Response Time

We aim to acknowledge all received communications related to privacy within 48 hours and strive to resolve any concerns or complaints in a timely and comprehensive manner.

e. Feedback Encouraged

We value feedback on our privacy practices as it helps us to continuously improve and prioritize our users’ needs. If you have suggestions or observations about our Privacy Policy or practices, we invite you to share them with us.

17. Applicable Law and Jurisdiction

Navigating the legal landscape of data privacy is of utmost importance to Elara Medical Tourism Agency. When it comes to matters of privacy, data protection, and any potential disputes, the following terms define the governing law and jurisdiction:

a. Governing Law

This Privacy Policy and any matters relating to your data protection rights are governed by and shall be construed in accordance with the laws of the Republic of Turkey, without regard to its conflict of law provisions.

b. International Considerations

Recognizing our diverse clientele, we also endeavor to adhere to the relevant data protection and privacy regulations of the countries we serve, including the UK, USA, France, Romania, Arab nations, and Russia. While the primary governing law is that of Turkey, we acknowledge and respect international standards where applicable.

c. Jurisdiction

In the event of any dispute arising from or related to this Privacy Policy, the competent courts of Turkey shall have exclusive jurisdiction. However, we are committed to resolving any issues or concerns amicably and through dialogue before resorting to formal legal action.

d. Alternative Dispute Resolution

Before initiating any formal proceedings, users are encouraged to contact us directly to seek an amicable solution. If a mutual resolution cannot be achieved, both parties might consider alternative dispute resolution mechanisms, like mediation or arbitration, before pursuing litigation.

e. International Users

If you are accessing our services from outside Turkey, please be aware that your information may be transferred to, stored, and processed in Turkey, where our primary data centers and operations are located. By using our services, you understand and agree that your data might be subject to Turkish laws and jurisdiction.