1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), Op. Dr. Hasan Kanyılmaz (the "Clinic"), acting as data controller, adopts the following principles for the processing and protection of the personal data of our visitors and patients.
2. Contact Details
Address: Şair Eşref Bulvarı No:61, Bahar Apt. Daire:4, Alsancak, İzmir
Email: [email protected]
Phone: 0501 321 12 13
3. Categories of Personal Data Processed
- Identity data: name, surname, date of birth, national ID number.
- Contact data: phone number, email address, postal address.
- Health data: complaints and history, examination and test findings, diagnosis, treatment applied and follow-up records, imaging and laboratory results.
- Financial data: policy and invoice details, only for procedures covered by health insurance.
- Request/complaint data: the name, email, phone, subject and message you submit through the website contact form.
4. Special Categories of Personal Data (Health Data)
Under Article 6 of the KVKK, health data is a special category of personal data. Such data may be processed without explicit consent under Article 6/3 by a physician bound by an obligation of confidentiality, for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services. Any processing beyond these purposes requires your separate explicit consent.
5. Purposes of Processing
- Carrying out medical diagnosis, treatment and care services,
- Planning and managing appointments,
- Keeping patient records and conducting post-treatment follow-up,
- Handling procedures covered by health insurance, and invoicing,
- Evaluating your requests and complaints,
- Fulfilling legal obligations arising from applicable legislation,
- General information and communication activities.
6. Method of Collection and Legal Basis
Your personal data is collected verbally and in writing during consultation, during tests and imaging procedures, through telephone and messaging channels, and through the website contact form, in both electronic and physical form.
The legal basis is Articles 5 and 6 of the KVKK: the establishment and performance of a contract, compliance with a legal obligation, the establishment and protection of a right, the provision of health services and — for any processing beyond these — your explicit consent.
7. Transfer of Personal Data
Your personal data is not transferred abroad. Within Turkey it is shared only in the following cases and limited to that purpose:
- With authorised public institutions where legislation requires it (Ministry of Health, Social Security Institution, judicial authorities),
- With the health facility, laboratory or imaging centre you are referred to, where your treatment requires it,
- With the relevant insurance company where a procedure is covered by your health insurance,
- With our legal advisers in the event of a dispute.
8. Retention Period
Patient records are kept for the minimum retention period required by health legislation. Data obtained through the contact form is kept for a reasonable period after your request has been resolved, and is then deleted or anonymized. Data whose retention period has expired is deleted, destroyed or anonymized.
9. Data Security
Appropriate technical and organisational measures are taken to prevent unlawful processing of and unlawful access to your personal data and to ensure its safekeeping. Your health data is covered by the physician's obligation of confidentiality.
10. KVKK Article 11 — Rights of the Data Subject
Under Article 11 of the KVKK, data subjects have the right to learn whether their personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties in Turkey or abroad to whom it has been transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction where the legal conditions are met; to request that correction and deletion be notified to the third parties to whom the data was transferred; to object to an adverse outcome arising solely from automated analysis; and to claim compensation for damages.
To exercise these rights, you may apply in writing to [email protected]. Applications are concluded within thirty days at the latest. Where the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
11. Changes to This Notice
This notice may be revised in line with changes in legislation and updates to clinic processes. The current text is always published on this page.
This is an English translation provided for information; the Turkish version prevails.