Privacy Policy

‍Last updated: 13 October 2025

‍

This Privacy Policy explains how TreatmentInEurope.com (“we”, “our”, or “us”) collects, uses, and protects your personal data when you visit our website, use our services, or submit a treatment inquiry form.
We are committed to protecting your privacy and ensuring compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our website or submitting a contact form, you agree to this Privacy Policy. If you do not agree, please do not use our services.

‍

1. Interpretation and Definitions

Personal Data means any information relating to an identified or identifiable natural person.
Health Data / Special Category Data means information about your physical or mental health (e.g. height, weight, medical history, previous procedures).
Usage Data means automatically collected information generated through website usage, such as IP address, browser type, or pages visited.
You / User means the person accessing or using the website or submitting a form.

‍

2. Types of Data Collected

2.1 Personal Data

When you contact us or submit a treatment inquiry form, we may collect the following personal data:

• First name and last name
  
• Email address
  
• Phone number
  
• Country or city of residence
  
• Age or date of birth
  
• General comments or information you voluntarily provide
  

2.2 Health / Medical Data (Special Category Data)

To help assess treatment suitability and provide accurate quotations, we may also collect limited medical information, such as:

• Height
  
• Weight
  
• Previous medical procedures or treatments
  
• General health information you choose to provide (e.g., pre-existing conditions)
  

This information is considered special category data under GDPR and is processed only with your explicit consent (see Section 4).

‍

2.3 Usage Data

We automatically collect certain data when you browse our website, such as:

• Internet Protocol (IP) address
  
• Browser type and version
  
• Pages visited and time spent
  
• Device identifiers and referring URLs
  

This information helps us analyze website performance and improve user experience.

‍

3. How We Use Your Data

We process your data to:

• Provide and improve our services
  
• Assess treatment suitability and prepare personalized quotations
  
• Connect you with relevant partner clinics and medical providers
  
• Communicate with you about your inquiry or treatment options
  
• Maintain our internal records, analytics, and quality control
  
• Comply with applicable laws and protect our rights
  

We do not sell your data or use your medical data for third-party marketing purposes.

‍

4. Legal Basis for Processing

We rely on several lawful bases for processing personal data under Article 6 and Article 9 of the GDPR:

‍

4.1 General Personal Data

• Consent: when you voluntarily provide data through our forms.
  
• Contractual necessity: to respond to your inquiry and facilitate a potential treatment arrangement.
  
• Legitimate interest: to maintain and improve our services, provided your rights are not overridden.
  
• Legal obligation: when processing is required by law.
  

4.2 Special Category (Health) Data

Under GDPR Article 9, we process your health data only when you have given explicit consent, for example by checking the dedicated consent box on our form that states:

“I consent to the processing of my health information (such as height, weight, and previous medical procedures) for the purpose of assessing treatment suitability and connecting me with relevant clinics. I understand I can withdraw my consent at any time.”

You can withdraw your consent at any time by emailing info@treatmentineurope.com.

‍

5. Data Sharing and Disclosure

We may share your personal and medical data with:

• Partner Clinics and Medical Providers – to assess your inquiry and prepare quotations.
  
• Service Providers / Processors – such as CRM, email, and analytics platforms, which operate under strict confidentiality and Data Processing Agreements.
  
• Affiliates and business partners – only where relevant and under data-protection safeguards.
  
• Public authorities – when legally required (e.g. to comply with court orders or regulations).
  

All third parties receiving personal or medical data are required to use it solely for the stated purpose and to apply adequate data protection measures.

‍

6. International Data Transfers

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Transfers to countries recognized by the European Commission as providing adequate protection; or
  
• Standard Contractual Clauses (SCCs) approved by the European Commission; or
  
• Other lawful transfer mechanisms under GDPR.
  

7. Data Retention

We retain your personal and health data only as long as necessary for the purposes stated in this policy or as required by law.

Typical retention periods:

• Lead / inquiry data: up to 12 months after last contact, unless you request earlier deletion.
  
• Converted patients: retained as long as necessary for service delivery or legal compliance.
  
• Usage data: retained for analytical or security purposes for a limited time.
  

After the retention period, all data will be securely deleted or anonymized.

‍

8. Data Security

We use appropriate technical and organizational measures to protect your data, including:

• Encrypted data transmission (HTTPS / TLS)
  
• Secure databases and restricted access
  
• Data Processing Agreements with third-party providers
  
• Regular backups and security audits
  

While we take all reasonable precautions, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access.

‍

9. Your Data Protection Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data we hold
  
• Right to rectification: correct inaccurate or incomplete data
  
• Right to erasure (“right to be forgotten”)
  
• Right to restrict processing under certain conditions
  
• Right to data portability (for data you have provided)
  
• Right to object to processing based on legitimate interests
  
• Right to withdraw consent (especially for health data) at any time
  
• Right to lodge a complaint with your national Data Protection Authority
  

To exercise any of these rights, please contact info@treatmentineurope.com.

‍

10. Children’s Privacy

Our website and services are intended for adults aged 16 or older. We do not knowingly collect personal or medical data from children. If you believe a child has provided us such data, please contact us and we will delete it promptly.

‍

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a new “Last updated” date.
In case of significant changes—especially concerning the processing of health data—we may seek renewed consent from users where required.

‍

12. Contact Information

If you have any questions, requests, or complaints regarding this Privacy Policy or how we process your personal data, please contact us at: info@treatmentineurope.com