Who we are. Global Medical AG (“GMC”), Dorfstrasse 49, 8037 Zurich, Switzerland. Contact: [email protected]. GMC is a facilitator: we arrange and coordinate treatment with independent clinics and doctors. We are not a clinic and do not provide medical treatment or advice.

What this notice covers. It explains the consent you are giving above to (1) our use of your health data and (2) sending it abroad. It adds to, and does not replace, our main Privacy Policy.

The health data we process. The information you give us to arrange treatment — your medical history, existing conditions, treatment goals, and the photographs you provide of your body or head. This is sensitive data, so we ask for your explicit consent (Article 9(2)(a) GDPR / Article 6 Swiss FADP).

Where it goes. To the clinic(s) and doctor(s) in Türkiye selected for your case, so they can assess your suitability and provide treatment. The clinic network is arranged through a partner organisation that sets which clinic and what information applies to your case but does not itself receive your data.

The international transfer. Türkiye is outside Switzerland, the EEA and the UK and does not have an equivalent data-protection “adequacy” status. We make this transfer on the basis of your explicit consent (Article 49(1)(a) GDPR / Article 17 FADP). This means your data may not be protected to the same legal standard, and you may have more limited rights or remedies than at home.

Voluntary but necessary. You do not have to provide this data, but without it we cannot arrange your treatment.

Withdrawing consent. You can withdraw at any time by emailing [email protected]. Withdrawal stops future processing but does not affect what was already done lawfully, and may mean we can no longer arrange your treatment.

How long we keep it. Only as long as needed to provide the service and meet legal obligations, after which it is securely deleted.

Your rights. You may request access to, correction, deletion or restriction of your data, object to processing, and request portability. You can also complain to a data protection authority — in Switzerland the FDPIC, in the UK the ICO, or your local EU authority. To exercise any right: [email protected].

Version [1.4] — 25.6.2026.