Loading
LoadingWe hold an email address and a language preference. This page explains everything sitting behind that sentence.
This policy covers this website and the one thing you can sign up for on it: the educational newsletter.
There are no accounts here. You cannot log in, and nothing you read is tied to you. The only way we come to hold personal data is if you type an email address into one of our forms.
Medically+ is the data controller. Write to medicallyistanbul@gmail.com about anything in this document.
Everything below is either typed in by you or produced automatically by the sign-up itself. Nothing is bought, scraped, or inferred.
| What | Why we hold it | How long |
|---|---|---|
| Email address | To send the confirmation email and the emails you asked for | Until you unsubscribe, then kept as a suppression record |
| First name (optional) | To address you by name | Same as the email address |
| Language preference | To send you English or French | Same as the email address |
| Broad topic interests | To send only the subjects you picked | Same as the email address |
| Confirmation and unsubscribe tokens | To prove a sign-up was genuine and to let you leave in one click | Same as the email address |
| Sign-up and confirmation timestamps | To evidence that consent was given, as GDPR and KVKK require | Same as the email address |
| IP address | To stop automated sign-up floods | Ten minutes, then discarded |
| Page views | To count how many people read an article | Aggregated only, never linked to you |
This is not a statement about our intentions. There is no field anywhere on this site where any of the following could be entered, and nowhere in our systems that could hold it. Until our authorization is granted we are not permitted to handle it, and we have built the site so that we cannot.
For the newsletter our lawful basis is your consent, under Article 6(1)(a) GDPR and Article 5 of the KVKK. That is why nothing is sent until you click the link in the confirmation email. An address that is never confirmed never receives anything.
For the short-lived IP record that blocks sign-up floods, our basis is legitimate interest under Article 6(1)(f) GDPR: keeping the forms usable for real people.
You can withdraw consent at any time, and withdrawing it is as easy as giving it — one link, no email to us, no reason required.
A small number of service providers process data on our behalf, each under a data processing agreement. Nobody else receives it: no advertising network, no data broker, no clinic, no agency. We do not sell or rent anything, at any price. Write to us and we will name any provider on this list.
Subscriber records are stored in EU regions, encrypted in transit and at rest. Email delivery and website hosting may route through infrastructure outside the EU; where that happens it is covered by the provider's standard contractual clauses.
Access is limited to Medically+ staff, and no part of the public website can read the subscriber list.
While you are subscribed we keep your record so we can send what you asked for.
When you unsubscribe we stop sending immediately and mark the record as unsubscribed. We keep it after that for two reasons: to prove the request was honoured, and to make sure the same address is not added again by a later import. That is a suppression record, not a mailing list, and it is never mailed.
If you would rather be erased completely, ask and we will delete the row. That means we can no longer prove you unsubscribed, so we will confirm the deletion to you in writing.
Under GDPR and KVKK you can ask us to do any of the following, free of charge.
Write to medicallyistanbul@gmail.com. We answer within thirty days, which is the limit GDPR sets, and usually much sooner. We may ask you to send the request from the address in question — that is to stop somebody else asking for your data, not to slow you down.
If our answer does not satisfy you, you can complain to a regulator without going through us first. In Türkiye that is the Personal Data Protection Authority, the KVKK Kurumu. In the EU or the UK it is the supervisory authority for the country you live in.
When this policy changes materially we will change the date at the top of this page. If the change affects how we use data you have already given us, we will email you before it takes effect. Earlier versions are available on request.
Other legal pages