Data Controller: Dr. Sibel Çakıtlı
Address: Caddebostan Mah. Op. Dr. Cemil Topuzlu Cad. No: 59 Park Palace Apt. Kat: 2 D: 4 Kadıköy / İstanbul
The personal data and special categories of personal data you share are processed in accordance with the Turkish Personal Data Protection Law (KVKK), in a manner that is relevant, limited and proportionate to the purposes of the services and activities we carry out under medical legislation. Please also read the Client KVKK Privacy Notice prepared for our clients.
Method and Legal Basis for Collecting Your Personal Data
Your personal data is collected electronically. When you complete the form in the appointment booking section of our website, data relevant to this purpose will also be collected there. Our website and the email account linked to the appointment form are hosted on servers in Turkey.
Your personal data relating to internet access through the website may be logged by the domain/server provider under Law No. 5651 (IP address and timestamp, traffic data, device information, time spent on each page, etc.). Our website does not use cookies for advertising purposes. The method for disabling cookies is specified in the policy. The website has been established to provide information about our address, contact details and areas of service.
The legal bases for processing your personal data are;
– Law No. 5651
– Legitimate interest
Purpose of Processing Your Personal Data
Your personal data will be processed with due regard to the principles set out in Article 4/2 of the KVKK, within the scope of activities provided for under health legislation, for the purposes of enabling you to benefit from the services provided, promoting our services, fulfilling statutory retention obligations and complying with other obligations.
After your personal data has been retained for the periods specified in legislation or, where no period is prescribed, for a period proportionate to the purpose based on legitimate interests, data in digital form is destroyed through irreversible deletion. If the data subject requests deletion, the request is fulfilled immediately, provided that it does not contravene legislation.
Retention periods are set out in detail in our personal data retention and destruction policy. Under Law No. 5651, traffic records must be retained for at least 1 year. We observe a retention period of 1 year in our practice.
Transfer of Your Personal Data
As a rule, your personal data is not transferred abroad. However, you should be aware that when you navigate from our website to social media accounts (Instagram, Facebook, Twitter, Youtube), you will have left our website and accessed these accounts provided from abroad.
As our website is hosted in Turkey, your data collected in this context is not transferred abroad. Likewise, since the email account that receives submissions from the appointment form on our website is hosted in Turkey, your personal data in the form is not transferred abroad.
Your personal data is hosted on Turhost (data processor) servers located in Turkey, in accordance with the purposes stated above and the provisions of the KVKK and other legislation.
Your Rights as a Data Subject Whose Personal Data Is Processed
Under Article 11 of the KVKK and other applicable legislation, you have the right to;
Learn whether your personal data is being processed,
- Request information about the processing of your personal data if it has been processed,
- Learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
- Know the third parties to whom your personal data is transferred in Turkey or abroad,
- Request rectification of your personal data if it has been processed incompletely or inaccurately,
- Request the erasure or destruction of your personal data under the conditions prescribed by KVKK legislation,
- Request that third parties to whom your personal data has been transferred be notified when you request the rectification of incomplete or inaccurate data or the erasure or destruction of your personal data,
- Object to a result that is detrimental to you arising from the analysis of processed data exclusively through automated systems,
- Request compensation for damage you suffer as a result of the unlawful processing of your personal data.
Procedures and Principles to Follow When Submitting Your Requests
As the data subject, you may exercise the rights stated above by submitting a request containing explanations regarding the right you wish to exercise, in writing or by other methods determined by the Personal Data Protection Board, clearly and comprehensibly stating the subject of your request, by post bearing your handwritten signature to the address provided above, in person, or from your email account registered with us.
The matters forming the basis of your application must relate to you personally, and your application must include your identity and address details. Identity verification will be limited to the information we hold about you. If you are applying on behalf of someone else, you must submit your application with a power of attorney granting specific authority. Although there is no prescribed format for applications, you may use the application form available on our website, and stating your request clearly will enable us to provide a clear response.