Transparent, limited and secure first-contact processing.

Data controller identity

The data controller for website inquiries and first-contact communication is Pure Group Sağlık Turizmi Ticaret Limited Şirketi, operating under the Pure Line Travel Agency brand.

• Legal title: Pure Group Sağlık Turizmi Ticaret Limited Şirketi
• Address: Zuhtupasa District, Bagdat Street 19/12 Kadikoy, Istanbul
• E-mail: info@purelinetravelagency.com
• Telephone: +90544575590

What we collect at the first-contact stage

We aim to limit first-contact collection to ordinary contact and inquiry details such as:

• Full name
• E-mail address
• Phone number
• Interface language, privacy-notice acknowledgement, and your general inquiry message

Do not include health information or other special-category data in the message.

Limited technical and security data

When the site or form is used, limited technical information may be processed to deliver the page and prevent abuse:

• Connection time, requested path, and basic browser request information processed by hosting infrastructure
• A short-lived, pseudonymous network key used only for the 15-minute form rate limit
• Privacy notice version and acknowledgement record sent with the request
• The application does not persist the message content, raw IP address, or the pseudonymous rate-limit key in its own logs

Purpose of processing

We use first-contact data to:

• Respond to your inquiry
• Manage the communication you requested and directly related pre-contract steps
• Route the request only to an authorized internal coordinator
• Establish, exercise, or protect legal rights and meet explicit legal obligations where necessary

Collection method and legal basis

Your data may reach us when you submit a website form, send an e-mail directly, call us, or contact us through another communication channel.

Data required for directly requested pre-contract steps is processed under Article 5(2)(c) of Law No. 6698; responding to a general contact request and applying proportionate security controls under Article 5(2)(f), subject to the protection of fundamental rights; records strictly necessary to establish, exercise, or protect a right under Article 5(2)(e); and explicit legal obligations under Article 5(2)(ç). This form does not obtain marketing consent and does not accept special-category data.

Possible recipients and transfers

Where necessary and proportionate, first-contact data may be shared with:

• Authorized members of the Pure Line Travel Agency team
• Contracted hosting and e-mail providers only for hosting, security, and delivery of your message
• Legally authorized public institutions and authorities when required by law
• First-contact data is not automatically transferred to hospitals or travel partners; any later referral requires a separate assessment and notice

Retention and security

The website keeps no separate form database. Each first-contact e-mail is tagged for a retention review 90 days after receipt and is deleted or anonymized when the purpose ends, unless an ongoing service relationship or a specific legal obligation requires a different period.

Transport encryption, strict field allowlisting, size limits, rate limiting, bot filtering, security headers, restricted access, and non-persistent pseudonymous abuse controls are applied to reduce unauthorized access and unlawful processing risks.