1. Data controller and contact details
ITALMEDICA is operated by Giuseppe Amato, based in Türkiye. For questions about personal data, data subject rights or deletion requests, please contact:
Email: info@italmedica.it
ITALMEDICA provides guidance and organizational support. Medical services are delivered by healthcare facilities and professionals, who may act as independent data controllers.
2. What information we collect and how
This website does not contain contact forms and does not automatically submit leads to Google Sheets. WhatsApp buttons open a conversation without any pre-filled message.
When you contact us through WhatsApp or email, we may receive information you choose to provide, including:
- Your name and surname, if provided.
- Your phone number or WhatsApp contact.
- Your email address.
- Your preferred communication language.
- Your messages, enquiries and shared quotations.
The hosting server may also record technical connection information, including IP addresses, access dates and times, browser types and requested pages, for operation and security.
3. Photographs, X-rays and health information
In order to facilitate a preliminary assessment by healthcare professionals, photographs, quotations, dental X-rays, medical records or other health information may be required.
Such documents may contain health data, which require enhanced protection under applicable data protection laws.
Important: please do not send medical records in your first WhatsApp message. Start with a general enquiry. Before sharing medical information, we will explain what is needed, who may receive it and which channel to use.
Health information is requested or shared only when necessary and subject to an appropriate legal condition. Where required, specific, informed and explicit consent will be requested.
Starting a WhatsApp conversation does not, by itself, constitute explicit consent for every use or international transfer of health information.
4. Purposes and legal bases for processing
Personal information may be used to respond to enquiries, provide guidance, help compare treatment quotations and facilitate assessments by healthcare providers when requested.
Where applicable, ordinary personal data may be processed to take steps requested before entering into a contract (GDPR Article 6(1)(b)), on the basis of legitimate interests in managing communications and maintaining website security (GDPR Article 6(1)(f)), or to comply with legal obligations.
Health information also requires a specific condition under GDPR Article 9 and relevant Turkish law. Where processing relies on explicit consent, it will be requested before the relevant use or disclosure of health information.
We do not automatically subscribe individuals to marketing newsletters or send unsolicited promotional messages.
5. Data recipients and healthcare partners
Personal information may be handled by people authorized to manage enquiries, essential technology providers, hosting and communication services and, where necessary, healthcare facilities or partners involved in the requested treatment pathway.
Before medical documents are shared with a healthcare provider, the recipient and purpose will be explained and any legally required consent obtained.
Healthcare facilities may process information as independent controllers under their own privacy notices.
We do not sell personal data to third parties for advertising purposes.
6. International processing and transfers
ITALMEDICA operates from Türkiye and assists people living in the European Union and other countries.
Some personal information may therefore be accessed or processed outside the European Economic Area, including Türkiye, or through international technology providers.
Where the GDPR applies, international transfers must comply with Chapter V and rely on the conditions or safeguards required by applicable law.
Before medical documentation is transferred to a partner, relevant information about the recipients and applicable safeguards will be provided.
Turkish Personal Data Protection Law No. 6698 (KVKK) may also apply.
7. WhatsApp, external resources and cookies
When you select a WhatsApp button, you leave this website and use a third-party messaging service within the Meta ecosystem.
Messages and related metadata may be processed under WhatsApp's terms and privacy settings. Please read the WhatsApp Privacy Policy .
The website may load Google Fonts, which may receive technical connection information such as IP addresses.
The current landing-page code does not include Google Analytics, Meta Pixel, advertising profiling technologies or automated lead forms.
The hosting service and other external providers may carry out separate technical processing under their own terms. Any non-essential technologies introduced in the future will require a review of this notice and, where applicable, prior user consent.
8. Data retention
For ordinary enquiry-related contact details and correspondence, the intended standard retention period is 12 months after an enquiry has been closed, unless legal obligations or documented legitimate needs require a different period.
Medical documentation should be retained only for as long as strictly necessary for its specific purpose, and then securely deleted or returned in accordance with applicable law and agreements.
9. Data security and children
We adopt proportionate technical and organizational measures intended to limit access to personal data and reduce risks of loss or unauthorized disclosure.
The service is not intended to collect children's health information without the involvement of a parent or legal guardian and appropriate healthcare professionals.
10. Your data protection rights
Where applicable, you may request access to your personal data, correction, erasure, restriction of processing, data portability or object to processing.
You may also withdraw any consent previously given, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact info@italmedica.it .
You may lodge a complaint with the relevant supervisory authority, including a European data protection authority where the GDPR applies, or the Turkish KVKK , according to applicable law.
11. Updates to this Privacy Policy
This notice may be updated to reflect changes in services, technology providers or applicable data protection laws. The current revision date appears at the beginning of the page.