Privacy notice

Last updated: 16 August 2026 · Prepared under Turkish Personal Data Protection Law no. 6698 (KVKK).

1. Who is responsible for your data

The data controller (veri sorumlusu) is:

• Bookinhospital.com Danışmanlık ve Ticaret Limited Şirketi, trading as MOC Travel
• Travel Agency Operating Licence no. 13801 (A-group)
• Şirinevler Mah. Meriç Sok. Toyak İş Merkezi No: 11 / 612, Bahçelievler, İstanbul, Türkiye
• MERSİS 0179135604700001
• info@moctravel.com · +90 533 813 89 77

2. What we collect and why

What we deliberately do not collect

If you are travelling for medical treatment, we do not ask for and do not want your medical records, diagnosis or treatment plan. That information belongs with your medical provider. We only need the dates, so that we can book flights and a hotel around them.

Health data is a special category of personal data under KVKK and carries stricter obligations. We have deliberately structured our service so that we do not handle it.

3. Our legal basis

Under Article 5 of KVKK we process your data on the following grounds:

• Necessary for a contract — we cannot book a flight without your passport details.
• Legal obligation — invoicing, tax records, and guest information that hotels and authorities are required to collect.
• Legitimate interest — keeping records of what was agreed, and defending a claim if one arises.
• Your explicit consent — only where we ask for it separately, for example if you ask to receive occasional offers. You can withdraw consent at any time, and doing so does not affect your booking.

4. Who we share it with

Only those who need it to deliver your trip:

• Airlines — name and passport details, as required to issue a ticket
• Hotels — name and identity details, as Turkish law requires them to register guests
• Transfer companies and guides — name, flight number, arrival time
• Our accountant and bank — for invoicing and payment
• Public authorities — where we are legally required to provide information

We do not sell your data, rent it, or share it with advertisers.

BookingHospital

MOC Travel and BookingHospital belong to the same company but operate as separate services with separate records. If you came to us through BookingHospital, we receive only your travel details — never your medical information. If you ask us to introduce you to them, we will ask your permission first.

5. Sending data abroad

Booking international travel necessarily involves sending some data outside Türkiye — an airline registered elsewhere, a booking system hosted abroad. We transfer only what is required to make the booking, and only to the supplier concerned. Where KVKK requires your explicit consent for such a transfer, we will ask for it before proceeding.

6. How long we keep it

• Enquiries that do not become bookings: deleted within 12 months.
• Booking and financial records: kept for 10 years, as Turkish commercial and tax legislation requires.
• Correspondence: kept for the duration of the legal limitation period for claims.
• Marketing consent: kept until you withdraw it.

7. Your rights

Under Article 11 of KVKK you have the right to:

• Learn whether we process your data, and request information about it
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom it has been transferred, in Türkiye or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data
• Require that correction or deletion be notified to third parties who received the data
• Object to a decision made solely by automated analysis that produces a result against you
• Claim compensation for damage caused by unlawful processing

To exercise any of these, write to info@moctravel.com. We respond within 30 days at the latest and normally much sooner. If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu).

8. Cookies

This website uses a small number of cookies:

• Necessary cookies — set by WordPress so the site works and stays secure. These cannot be switched off.
• Analytics cookies — Google Analytics, which tells us how many people visited which pages. We use this to decide what to write next, not to identify you.

You can block or delete cookies in your browser settings. The site will still work. We do not use advertising or tracking cookies at present; if that changes, this notice will be updated and we will ask for your consent first.

9. Security

The site runs over an encrypted connection (HTTPS). Access to booking records is limited to the people who need it to do their work. Card details never reach us at all — they go directly to our bank's secure payment page.

10. Changes to this notice

If we change how we handle data, we will update this page and change the date at the top. Where a change is significant and affects a current booking, we will tell you directly.