Privacy Notice on the Processing of Personal Data

1. Data Controller

Under the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), as the data controller:

we attach importance to the protection of your personal data.

This privacy notice has been prepared to inform you about the scope in which personal data obtained through the “Request a call back” (“Sizi Arayalım”) form on our website are processed.

2. Which Personal Data Are Processed?

If you use the “Request a call back” form, your name and surname, your phone number, any information you write in the message field, the date and time the form was submitted and, for the purpose of ensuring the security of the form and the website, your IP address and limited technical information about your browser and connection may be processed.

You are not asked to write information about your health in the message field. We recommend that you do not share detailed information about your health, diagnosis or treatment in this field.

3. For What Purposes Are Your Personal Data Processed?

Your name, surname and contact details obtained through the form are processed for the purposes of responding to your call-back request, contacting you regarding your examination or appointment request, planning the appointment process in line with your request, carrying out the communication process and, where necessary, keeping a record of your requests.

Your IP address and similar limited technical data may be processed for the purposes of ensuring the security of the website and the form and preventing misuse and automated/spam submissions.

Unless you give separate permission, your phone number obtained through this form is not used to send commercial electronic messages for advertising, campaign or marketing purposes.

4. Method of Collection and Legal Basis

Your personal data are obtained electronically, by automated means, when you fill in and submit the “Request a call back” form on the website.

Your name, surname and phone number are processed under subparagraph (c) of the second paragraph of Article 5 of the KVKK, in order to contact you upon your examination/appointment request and to carry out the necessary pre-contractual processes in line with your request for healthcare services.

Limited technical data related to the security of the website and the form are processed under subparagraph (f) of the second paragraph of Article 5 of the KVKK, within the scope of the data controller’s legitimate interest in ensuring the security of the website, provided that this does not harm your fundamental rights and freedoms.

Where necessary, your personal data may also be processed under the other relevant processing conditions set out in Article 5 of the KVKK, for the purposes of fulfilling legal obligations and establishing, exercising or protecting a right.

The Law permits certain legal processing conditions other than explicit consent; therefore, separate explicit consent is not required for every processing of personal data.

5. To Whom Are Your Personal Data Transferred?

In connection with the operation of the website’s technical infrastructure, your personal data may be processed by the information technology and infrastructure providers from which we receive services, only to the extent necessary for the provision of the relevant service.

In this context, Cloudflare, Inc. may be involved in data processing activities as a technical service provider for the purposes of hosting the website, storing form records, network security and preventing spam/bot traffic, and Google for the purposes of forwarding form submissions to the data controller’s e-mail address and storing them in that e-mail account.

Where personal data need to be transferred abroad, such transfers are carried out within the framework of the conditions set out in Article 9 of the KVKK and appropriate safeguard mechanisms.

6. Retention of Personal Data

Your personal data are kept only for as long as required by the purposes described above and to the extent of the retention obligations set out in the applicable legislation.

Submissions sent through the form are automatically deleted from the form records 6 months after the date of submission.

When the reasons requiring the processing of personal data no longer exist, the data are deleted, destroyed or anonymised in accordance with the legislation.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you may exercise your rights to learn whether your personal data are processed; to request information if they have been processed; to learn the purpose of the processing and whether the data are used in accordance with that purpose; to know the third parties to whom personal data are transferred; to request the correction, deletion or destruction of the data when the relevant conditions are met; and the other rights provided for under the Law.

You may submit your requests in this regard in writing to Uzm. Dt. Ahmet Yaşar, Cumhuriyet Mah. Balcı Sk. No:2, Ayazmalı Plaza Kat 6 D:9, Nilüfer / Bursa, or through the other application methods provided for in the legislation.

As a rule, applications made to the data controller under the KVKK must be answered as soon as possible and within 30 days at the latest.