Privacy policy
1. Controller
Mese Medical, Istanbul, Türkiye. Email: [email protected].
2. Principles
We only process personal data as far as necessary to provide this website and to answer your enquiries. Legal bases are the GDPR, the Swiss Federal Act on Data Protection (FADP) and the Turkish Personal Data Protection Law (KVKK No. 6698).
3. Visiting the website
When you visit the website our hosting provider processes technically necessary data (IP address, time, page requested, browser type) in server log files to deliver the site securely (Art. 6(1)(f) GDPR). Logs are deleted after 14 days at the latest. [Add hosting provider and server location]
4. No cookies, no tracking
This website sets no cookies and uses no analytics or advertising services. Fonts are loaded locally from our server; no data is sent to Google Fonts or similar services.
5. Contact form and email
When you write to us via the form or by email, we process your details (name, email, optional phone, place of residence, requested treatment, message and photos) to answer your enquiry and prepare an offer. Photos and information on hair loss are health data; we process them only with your explicit consent (Art. 9(2)(a) GDPR). You receive an automatic confirmation at the address given.
Data is transmitted over an encrypted connection to our mailbox and stored only as long as required for processing and legal retention duties. Without a contract we delete enquiries after 12 months at the latest.
6. WhatsApp
When you click a WhatsApp link, WhatsApp (WhatsApp Ireland Limited, Meta) opens. Only then is data transferred to WhatsApp, whose privacy policy applies. Using it is voluntary; you can always reach us by email.
7. Transfer to Türkiye
Treatment takes place in Türkiye. To assess your enquiry medically, your details are shared with the treating medical team in Istanbul. There is no EU adequacy decision for Türkiye; the transfer is based on your explicit consent (Art. 49(1)(a) GDPR) or on pre-contractual measures (Art. 49(1)(b) GDPR).
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time with effect for the future; an informal email is enough. You may also lodge a complaint with a data protection supervisory authority.
9. Version
October 2026