✚DR. MUHAMMAD
MAZHER SAEED, MDINTERNATIONAL MEDICAL AIR & SEA ESCORT
← Back to website

Privacy Policy

Status: September 2026

Important: This website does not use Google Fonts, Google Analytics, Meta Pixel, Google Ads, Google Maps, YouTube, Vimeo or other marketing/tracking services in the current version. The contact form is processed by this website's own PHP handler and sent to the controller's email address.

1. Privacy at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit this website or contact us in connection with a medical travel escort, patient transfer, or medical repatriation.

Personal data means any information by which you can be personally identified.

In the course of our activities, special categories of personal data may also be processed. These include in particular health data such as details of illnesses, diagnoses, medications, treatments, hospital stays, mobility, medical transport requirements, or fitness to travel or fly.

Detailed information on the processing of your data can be found in this Privacy Policy.

Data Collection on this Website

Who is responsible for data collection?

The data controller is:

Dr Muhammad Mazher Saeed, MD
International Medical Air & Sea Escort
65-77/4, Riaz-uz-Zohra Society, Shah Faisal Town, Malir Halt, Karachi 75210, Pakistan
Email: medical.air.escort@gmail.com
Telephone: +92-3220332883, +49-156-78201018

How do we collect your data?

Your data is collected in part because you provide it to us directly. This happens, for example, when you use our contact form, send us an email, contact us by telephone, contact us via WhatsApp, provide details of a planned journey or patient transfer, share medical information, provide medical records, or request a medical escort, travel assessment, or repatriation.

Other data may be collected automatically by our IT systems when you visit the website. This is primarily technical data such as IP address, browser type, operating system, time of page access, referrer URL, requested page and similar technical information in server log files.

What do we use your data for?

2. Processing of Health Data

In the context of a request for a medical travel escort or patient transfer, the processing of health data may be necessary. This may include current state of health, diagnoses, pre-existing conditions, surgeries, hospitalisations, current treatment, medications, allergies, physical or mental impairments, mobility, oxygen requirements, medical aids, special care needs, pregnancy information, psychiatric conditions, substance use disorders, medical reports and discharge summaries, clinical findings, and information on fitness to fly and travel.

Health data is processed only to the extent that a legal basis exists. Depending on the circumstances, this may include Article 9(2)(h) GDPR for healthcare/medical purposes under the responsibility of a healthcare professional or Article 9(2)(a) GDPR where explicit consent is required. Any consent given may be withdrawn at any time with effect for the future.

3. Your Rights

Subject to the statutory requirements, you have the right to access your stored personal data, rectification, erasure, restriction of processing, data portability, objection to certain processing activities, withdrawal of consent, and to lodge a complaint with a competent data protection supervisory authority.

4. Hosting

This website is hosted by Hostinger International, Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. When you access the website, the hosting provider may process IP addresses, technical connection data, server log files and other information required for operation and security.

Processing is generally based on Article 6(1)(f) GDPR for the secure, reliable operation of the website. Where consent is legally required, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.

5. General Information and Mandatory Disclosures

Data Protection

We take the protection of personal data and, in particular, medical information very seriously. Personal data is treated confidentially and processed in accordance with applicable data protection provisions and this Privacy Policy. As a physician, Dr Muhammad Mazher Saeed is additionally subject to professional duties of confidentiality to the extent applicable.

Medical information regularly constitutes particularly sensitive data. It is processed only to the extent necessary and legally permissible for the medical, organisational, or contractual handling of an enquiry.

Please note that ordinary unencrypted email communication may carry security risks. Please do not send extensive or particularly sensitive medical documents unsolicited via ordinary email unless a suitable secure transmission channel has previously been agreed.

Retention Period

Unless a more specific retention period is stated, personal data is stored only for as long as necessary for the respective processing purpose. Once the purpose ceases, data is deleted unless statutory, professional, medical, tax, commercial or legal retention obligations prevent deletion. Medical documentation may be subject to statutory or professional retention periods. Data required for legal claims may be stored until the applicable limitation periods expire.

Legal Bases for Data Processing

For health data or other special categories, an additional Article 9 GDPR basis is required, such as Article 9(2)(a) explicit consent or Article 9(2)(h) where its statutory requirements are met.

Recipients of Personal Data

Depending on the assignment, recipients may include treating physicians, hospitals and clinics, rehabilitation/care facilities, medical service providers, ambulance and patient transport companies, airlines, airport operators, air ambulance providers, shipping and ground-transfer providers, insurance or assistance companies, travel organisers, public authorities, consulates/embassies, interpreters, medical cooperation partners, and other parties necessary for the specific patient transfer.

Disclosure takes place only to the extent necessary for the specific purpose and legally permissible. For health data, only information necessary for the specific recipient and purpose should be disclosed.

International Patient Transfers and Third-Country Transfers

International patient transfers may involve countries outside Germany, the EU or EEA. Where personal data or health information must be transferred to a third country, the requirements of Articles 44 et seq. GDPR apply. Depending on the case, this may be based on an adequacy decision, appropriate safeguards such as standard contractual clauses, or a statutory exception under Article 49 GDPR. Where explicit consent is required, it will be obtained or requested beforehand as appropriate.

6. Data Collection on this Website

Server Log Files

The hosting provider may automatically collect browser type/version, operating system, referrer URL, requested page, hostname, time of server request, IP address and technical connection information. Processing is based on Article 6(1)(f) GDPR where necessary for secure, stable and error-free operation.

Contact Form

The contact form collects the information you enter, including name, email address, telephone/WhatsApp number, requested service and message. The current implementation sends the submission through the website's own PHP handler to medical.air.escort@gmail.com.

The website server necessarily receives the form data to process the request. The hosting provider may therefore process technical information and the transmission of the form as part of hosting and server operation. The form does not intentionally store submissions in a website database.

The form contains a separate optional explicit-consent checkbox for health data. Please do not use the form to upload complete medical records. A secure transmission channel should be agreed before sending extensive medical documentation.

Email Enquiries

If you contact us by email, we process the data you transmit to deal with your enquiry. The destination address is currently a Gmail address. Consequently, the content of emails sent to this address may be processed by Google as email service provider. If the controller wants to avoid Google processing, the Gmail address should be replaced by a business mailbox hosted with a suitable provider and this Privacy Policy updated before publication.

Telephone Contact

If you contact us by telephone, personal data disclosed during the conversation may be processed to the extent necessary for handling the enquiry.

WhatsApp

If you communicate with us via WhatsApp, personal data is processed by the WhatsApp/Meta service. Use is voluntary. Please do not transmit particularly sensitive medical documents via WhatsApp unless an appropriate and lawful process has been expressly agreed.

7. Special Processing in Connection with Medical Escort Services

Medical Assessment

Before accepting a medical travel escort, it may be necessary to review medical information to assess the patient's condition, required care, potential risks, medication/aids, mobility, oxygen requirements, transport conditions, coordination needs and suitability of the planned mode of travel. Only information necessary for the respective assessment should be processed.

Flight & Travel Fitness Assessment

Where a medical assessment of fitness to travel or fly is requested, relevant information may include health status, diagnoses, recent surgery/hospitalisation, medication, mobility, travel duration, oxygen requirements and airline requirements. Processing takes place within the applicable medical and legal framework.

Communication with Treating Physicians and Clinics

Where necessary for preparing or executing a patient transfer, communication may occur with treating physicians, clinics or healthcare facilities. Health information should be disclosed or requested only where an appropriate legal basis exists and, where required, consent or a waiver of medical confidentiality has been obtained.

Communication with Airlines

For medical air travel, information about fitness to travel/fly or special requirements may need to be disclosed to an airline, for example for MEDIF procedures, oxygen, wheelchair services, medical aids, seating or accompanying-person requirements. Only information necessary for the specific transport decision should be transmitted.

8. Cookies and Similar Technologies

The current website does not intentionally use analytics, advertising or tracking cookies. The language preference is not stored in a cookie or persistent browser storage in this version. Technically necessary server functions may still process connection information. If non-essential cookies or similar technologies are introduced later, the consent mechanism and this Privacy Policy must be updated before activation in accordance with Section 25 TDDDG and Article 6(1)(a) GDPR where required.

9. Analytics, Marketing and Third-Party Services

The current version of the website does not include Google Analytics, Google Ads, Google Tag Manager, Meta Pixel, YouTube, Vimeo, Google Maps, external Google Fonts or similar marketing/tracking services. If such services are added later, the technical consent management and this Privacy Policy must be updated before publication/activation.

10. SSL/TLS Encryption

This website uses SSL/TLS encryption where the site is served over HTTPS. HTTPS protects data transmitted between your browser and the web server against unauthorised interception in transit. It does not make ordinary email or third-party messaging services automatically end-to-end encrypted.

11. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Requests may be sent to medical.air.escort@gmail.com.

12. Right to Object under Article 21 GDPR

Where personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you may have the right to object on grounds relating to your particular situation. For direct marketing, you may object at any time.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. You may generally contact a supervisory authority at your habitual residence, place of work or the place of the alleged infringement.

14. Access, Rectification and Erasure

Subject to statutory requirements, you may request access to stored personal data, rectification of inaccurate data and erasure. Erasure may be restricted by statutory/professional retention obligations or other legal grounds.

15. Restriction of Processing

Under Article 18 GDPR, you may request restriction of processing in the circumstances specified by law, including where accuracy is contested, processing is unlawful and you oppose erasure, data is no longer needed for the original purpose but is required for legal claims, or an objection is pending.

16. Data Portability

Where the statutory requirements of Article 20 GDPR are met, you may receive personal data that you have provided and that is processed automatically on the basis of consent or a contract in a structured, commonly used and machine-readable format.

17. No Automated Decision-Making

Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not generally take place in connection with the medical assessment and performance of medical escort services. Medical decisions are not made solely by automated means.

18. Data Security and Confidentiality

Appropriate technical and organisational measures are used to protect personal data, particularly medical information. Measures may include access restrictions, secure passwords, multi-factor authentication, encrypted transmission, access limited to authorised persons, privacy-compliant storage, system updates, and deletion/retention procedures.

19. Medical Duty of Confidentiality

As a physician, Dr Muhammad Mazher Saeed is bound by medical confidentiality to the extent applicable. Patient-related and medical information is generally not disclosed without a legal basis, necessary consent, or a waiver of confidentiality. Where disclosure is necessary for a patient transfer, it should be limited to what is strictly required.

20. Amendments

This Privacy Policy will be updated if there are changes to legal requirements, services, technical systems, communication channels, hosting providers, analytics/marketing services, or other data-protection-relevant processes.