Privacy Policy

Welcome to MedTalks (hereinafter referred to as “we”, “our”, or “us”). We are committed to protecting your personal data and respecting your privacy in accordance with the Law on Protection of Personal Data No. 6698 (KVKK) of Türkiye, and the General Data Protection Regulation (GDPR) globally.

1. Data Controller

In accordance with KVKK and GDPR, the entity determining the purposes and means of the processing of your personal data is:

MedTalks
Registered in: Republic of Türkiye
Email: info@medtalks.app

2. Information We Collect

A. Information You Provide Directly

When you contact us, register for courses, or apply for partnerships, we may collect:

• Full name
• Email address and Phone/WhatsApp number
• Institution, company name, and job title
• Country of residence
• Details provided in forms and applications

B. Automatically Collected Data

When you visit our website, we may collect:

• IP address and browser type
• Device information and generalized location data
• Pages visited and usage patterns
• Cookies and similar tracking technologies

3. Purpose of Processing and Legal Basis

Under KVKK and GDPR, we process your personal data based on the following legal grounds:

• Explicit Consent: For marketing, newsletters, and certain cookies.
• Performance of a Contract: To provide education services, evaluate applications, and communicate regarding services.
• Legitimate Interests: To improve website performance, ensure security, and conduct business operations.
• Legal Obligations: Commencing and complying with applicable Turkish and international laws regarding billing and record-keeping.

4. Cross-Border Data Transfers

As MedTalks operates internationally, your personal data may be transferred, stored, or processed outside Türkiye or the European Economic Area (EEA).

When transferring data, we utilize the following legal safeguards:

• Adequacy Decisions: Transferring data to countries deemed to have adequate protection.
• Standard Contractual Clauses (SCC): Binding corporate rules and standard contractual clauses for transfers requiring extra safeguards.
• Explicit Consent: Your explicit consent for global processing necessary for providing our international education services.

5. Data Breach Notification Policy

We take the security of your data seriously. We implement appropriate technical and administrative security measures including SSL encryption, access control systems, and secure servers to protect your data.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant data protection authorities (such as the KVKK Board) and affected individuals as required by applicable law without undue delay.

6. Automated Decision-Making Disclosure

MedTalks uses artificial intelligence agents for spoken medical English practice. However, we do not use automated decision-making or profiling that produces legal or significant effects concerning you. Human review is involved in all critical processes, including partnership evaluations and certification.

7. Data Retention

We retain personal data only as long as necessary for our business operations, legal compliance, and dispute resolution. After the retention period expires, your data will be securely deleted, destroyed, or fully anonymized in compliance with KVKK and international standards.

8. Your Rights Under KVKK & GDPR

Under Article 11 of KVKK and Chapter 3 of the GDPR, you have the right to:

• Request access to your personal data and learn whether it is processed.
• Request correction of incomplete or inaccurate data.
• Request deletion, destruction, or "the right to be forgotten".
• Object to or restrict unlawful data processing.
• Request data portability.
• Withdraw your explicit consent at any time.
• Request compensation for damages due to unlawful processing.

To exercise any of these rights, please contact us at: privacy@medtalks.app

9. Children / Age Restriction Clause

Our educational services, MedTalks programs, and platform are intended for healthcare professionals and adult learners. Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected such data, we will take immediate steps to delete it.

10. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be published on this page with a revised effective date. Significant changes will be communicated via email or website notice.