# Privacy notice under Turkish Law No. 6698 Last updated: 8 October 2026 This notice is issued by Cardicare Medikal Sağlık ve Danışmanlık Hizmetleri Sanayi ve Ticaret Limited Şirketi, as data controller, under Turkish Personal Data Protection Law No. 6698 (KVKK). It explains how your personal data is processed when you visit the Cardisio Türkiye website and use the form on it. ## Data controller Your personal data is processed by the data controller, Cardicare Medikal Sağlık ve Danışmanlık Hizmetleri Sanayi ve Ticaret Limited Şirketi (the “Company”). - Address: Küçükbakkalköy Mh. Dudullu Cad. Brandium Rezidans R1 Blok No:23-25A, K:12 D:141-142, Ataşehir/İstanbul - E-mail: info@cardisio.com.tr ## Categories of personal data processed The Company processes only the following data: - Identity and contact details: full name, e-mail address, phone number, city or country. - Professional details: organisation name, organisation type and, optionally, your role. - Request details: request type and, optionally, the estimated number of tests per month and your message. - Security data: the IP address, time of access, requested page address and browser information (user agent) recorded in server logs. ## Do not send health data The form is not designed to collect health data. Do not share any diagnosis, test result, treatment or similar health information about yourself or anyone else in the form or by e-mail. Health data is not requested; any health data sent this way is not used and is deleted when it is noticed. ## Heart age calculator The health-related values you enter in the heart age calculator do not leave your browser; the Company does not receive, record or process them. The server only keeps the total number of completed calculations; that number contains no personal data. To limit misuse of the counter, the IP address of the request (for IPv6, the network prefix) is kept in server memory only, for at most one hour; it is not written to a log or to disk and is not used for any other purpose. As with the server logs, this serves to keep the site secure and to prevent misuse. ## Purposes of processing Your personal data is processed for the following purposes: - To answer your quote, information or contact request and to prepare a quote for you. - To contact you about your request. - To keep the site secure, prevent misuse and fix technical faults. ## Legal bases Your personal data is processed on the following legal bases listed in Article 5(2) of the KVKK: - Form data: processing is necessary, provided that it is directly related to the conclusion or performance of a contract, for the personal data of the parties to that contract (sub-paragraph c), and the legitimate interest in answering your request (sub-paragraph f). - Server logs: the legitimate interest in keeping the site secure, provided that your fundamental rights and freedoms are not harmed (sub-paragraph f), and processing being necessary for the establishment, exercise or protection of a right (sub-paragraph e). ## Method of collection Form data is collected from you electronically when you fill in the form on the site and is sent by e-mail to the Company’s mailbox. The site does not keep form submissions in a database. Server logs are created automatically by the server when you visit the site. ## Recipients Your personal data may be transferred, only for the purposes above and in accordance with Articles 8 and 9 of the KVKK, to: - The providers from which the Company obtains hosting and e-mail services, to the extent needed to deliver those services. - Public authorities legally entitled to request it, when they do so. ## Services your browser contacts directly The map images on the centres page are loaded from OpenFreeMap servers; in doing so, your browser sends your IP address to those servers. The directions link opens Google Maps only when you click it. The fonts on the site are served from our own server. ## Retention Form data is kept until your request has been concluded and the statutory retention periods have expired. Server logs are kept for as long as security and troubleshooting require and for the statutory retention periods. When that period ends, the data is deleted, destroyed or anonymised. ## Your rights under Article 11 of the KVKK By applying to the Company, you may: - Learn whether your personal data is processed. - Request information if it has been processed. - Learn the purpose of processing and whether the data is used in line with that purpose. - Know the third parties in Türkiye or abroad to whom it has been transferred. - Request its correction if it is incomplete or inaccurate. - Request its erasure or destruction under the conditions set out in the KVKK. - Request that correction, erasure or destruction be notified to the third parties to whom the data was transferred. - Object to a result against you that arises from analysis exclusively by automated systems. - Claim compensation if you suffer damage because of unlawful processing. ## How to apply You may send your request in writing to Küçükbakkalköy Mh. Dudullu Cad. Brandium Rezidans R1 Blok No:23-25A, K:12 D:141-142, Ataşehir/İstanbul, or by e-mail to info@cardisio.com.tr, with enough information to verify your identity. Your application will be concluded free of charge as soon as possible according to its nature and within thirty days at the latest. If the action involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.