Diese Seite ist auf Französisch und Englisch verfügbar. Maßgeblich ist die französische Fassung.
Document being finalised: some legal details are still to be completed.
Contessa Med
Privacy policy
Last updated : 13 November 2026
Your trust is at the heart of what we do. This policy explains which data we process, why, who we share it with and how to exercise your rights. It takes into account the European Union General Data Protection Regulation (GDPR) and the applicable Tunisian and Turkish laws.
1. Data controller
[To be completed : company name] (trade name "Contessa Med"), [To be completed : address], [To be completed : country]. Contact for any question about your data: contact@contessa-med.com.
2. Data we process
- Contact data: name, phone / WhatsApp, email, country of residence.
- Your project: the procedure you are considering, your message, and any dates or budget you choose to share.
- Health data (only if you send it to us): photos, medical history, questionnaires and medical documents needed for the surgeon's opinion and to organise your stay.
- Travel data once you confirm a stay: ID document, dates, accommodation, transfers.
- Technical data: server logs (IP address, date, requested page), kept for website security.
The quote form on this website does not store anything on our servers: it prepares a message that you send yourself from WhatsApp. Your WhatsApp conversations are also subject to WhatsApp's (Meta) terms and privacy policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your request, preparing a quote | Pre-contractual steps taken at your request |
| Obtaining the surgeon's opinion, organising and following up your stay, aftercare and guarantee | Performance of the contract; for health data, your explicit consent |
| Invoicing, accounting, legal obligations | Legal obligation |
| Website security, abuse prevention | Legitimate interest |
| Sending you news or offers | Your consent, which you can withdraw at any time |
We never sell your data, and we never use your photos for marketing without your separate written consent.
4. Recipients
- The Contessa Med team handling your file, only as far as necessary.
- The partner surgeon and healthcare facility chosen for your project, in Tunisia or Turkey.
- The providers of your stay (accommodation, transfers), only for the data they need.
- Our technical providers (hosting: Contabo, Germany; messaging: WhatsApp / Meta), bound by confidentiality obligations.
- Authorities, where required by law.
5. Transfers outside the European Union
Your project involves sending data, including health data, to Tunisia or Turkey, countries that do not benefit from a European Commission adequacy decision. These transfers are based on their necessity for the contract you request and on your explicit consent, given after being informed of the risks (GDPR Article 49), with confidentiality commitments imposed on our partners.
6. Retention periods
- Requests not followed up: 3 years after the last contact.
- Client files: for the duration of the relationship and the guarantee period, then archived for the applicable statutory limitation periods.
- Health data: as long as needed for your care and the guarantee, then according to legal obligations, with restricted access.
- Accounting records: applicable legal period (usually 10 years).
- Server logs: a few weeks.
7. Security
Encrypted connection (HTTPS), access limited to authorised people, confidentiality commitments from our partners. Contessa Med's secure patient portal, in preparation, will let you exchange documents and photos without using consumer messaging apps.
8. Your rights
You may at any time request access to, rectification, erasure, restriction or portability of your data, object to processing and withdraw your consent, without affecting the lawfulness of prior processing. Write to contact@contessa-med.com; we reply within one month.
You may also contact the data protection authority of your country (for example the CNIL in France, the INPDP in Tunisia, the KVKK in Turkey).
9. Cookies and trackers
This website uses no advertising cookies and no audience-measurement tools. It only stores your language preference in your browser (local storage), which is necessary for the service you request. Fonts are loaded from Google Fonts: your browser then sends your IP address to Google.
10. Minors
Our services are reserved for adults. We do not knowingly process data of minors.
11. Changes
This policy may change, in particular when the patient portal opens. The date of the last update is shown at the top of the page. In case of discrepancy, the French version prevails.