1. Who we are
Değirmendere Mah. 834 Sok., Park Olivia 5G
Kuşadası / Aydın, Türkiye
Email: b2b@curebooking.com
Phone: +44 20 4577 3885 (UK & Europe) · +90 850 480 00 75 (Türkiye)
Atalante Group is the data controller for the personal data described in this policy. For any question about how we handle your data, or to exercise the rights described in section 7, write to b2b@curebooking.com.
2. What this policy covers
This policy explains how we handle personal data collected through b2bcurebooking.com — principally the details submitted by travel agencies, clinics and other businesses applying to our B2B partner programme. It does not cover the processing of patient medical data, which is governed by the separate agreements and consent forms signed before any treatment.
3. What we collect and why
| Data | Why we process it | Legal basis (GDPR Art. 6) |
|---|---|---|
| Company or clinic name, contact person, business email, phone/WhatsApp number, country, and any message you write | To evaluate your partnership application and contact you about it | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| IP address and submission timestamp | To prevent spam and abuse of the application form and to keep a record of when consent was given | Our legitimate interest in securing our systems (Art. 6(1)(f)) |
| Messages you send us by email, phone or the website assistant | To answer your questions and to keep a record of our correspondence | Legitimate interest / performance of a contract (Art. 6(1)(f), 6(1)(b)) |
We do not ask for, and you should not send us, special category data (such as health data) through the partnership application form.
4. Cookies and analytics
The partner application page does not set advertising or tracking cookies of its own. Your language preference is stored locally in your browser (local storage) so the site remembers it on your next visit; this stays on your device and is not transmitted to us. If we introduce analytics or advertising measurement in future, this policy will be updated and, where required, consent will be requested before any such cookie is set.
Some pages load fonts and icon libraries from third-party content delivery networks (Google Fonts, unpkg). These providers may receive your IP address as a technical consequence of serving the file.
5. Who we share data with
We do not sell your data and we do not share it for third-party marketing. We share application data only with:
- our own staff who assess partner applications;
- our hosting provider, which stores the website and the application records on our behalf;
- our email provider, which delivers the notification of your application;
- authorities or advisors where we are legally obliged to do so.
6. International transfers and retention
Our company and its servers are located in Türkiye. If you contact us from the European Economic Area or the United Kingdom, your data is transferred to Türkiye. We rely on the appropriate safeguards under GDPR Art. 46, or on the necessity of the transfer for the performance of pre-contractual steps you requested (Art. 49(1)(b)), as applicable.
We keep application data for as long as the partnership relationship lasts, and for a maximum of three years after the last contact if no partnership is established — after which it is deleted. You may ask us to delete it sooner at any time.
7. Your rights
If you are in the EEA or UK, you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing carried out on the basis of legitimate interest. Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, email b2b@curebooking.com. We respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.
If you are in Türkiye, the equivalent rights under Article 11 of the Personal Data Protection Law No. 6698 (KVKK) apply, and complaints may be directed to the Personal Data Protection Authority (KVKK).
8. Security
The site is served over HTTPS. Application records are stored in a location that is not accessible from the public web, and access is limited to the staff who need it. No system is completely secure, but we take reasonable technical and organisational measures to protect the data we hold.
9. Changes to this policy
If we change how we handle personal data, we will update this page and revise the date below. Material changes affecting existing applicants will be communicated by email.
Last updated: 3 August 2026