Personal Data Protection Notice (KVKK)

Personal Data Protection Notice

This notice has been prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the related Communiqué on the fulfilment of the disclosure obligation.

1. Data controller

Your personal data is processed by Dr. Ertuğrul İnce as data controller (practice address: Beyaz Akasya Sok. No:4, Desen Apt., Caddebostan, Kadıköy / Istanbul, Türkiye), within the scope set out below.

Contact: info@doctorertugrulince.com

2. Categories of personal data processed

Through this website and your contact with the clinic, the following categories may be processed:

• Identity data: first name, surname
• Contact data: telephone number, e-mail address
• Appointment request data: preferred date and time, service of interest, the message you submit through the form
• Transaction security data: hashed IP address, browser and device information, site usage logs
• Cookie data: data obtained through strictly necessary cookies and, where you have given explicit consent, analytics cookies

You are not required to share health data through the website forms. Please do not write details of your diagnosis, treatment or medical condition into the form fields. Health data is processed only within the physician-patient relationship during examination, in accordance with applicable health legislation.

3. Purposes of processing

• Receiving and evaluating your appointment request and contacting you
• Responding to questions and requests sent through the contact form
• Planning and delivering the services offered
• Ensuring website security and preventing misuse and automated attacks
• Fulfilling legal obligations and providing evidence in possible disputes
• Providing information where you request it

4. Legal grounds for processing

Processing is based on the following grounds set out in Article 5 of the KVKK:

• Art. 5/2-c: processing directly related to the conclusion or performance of a contract (handling your appointment request)
• Art. 5/2-ç: processing necessary for compliance with a legal obligation of the controller
• Art. 5/2-e: processing necessary for the establishment, exercise or protection of a right
• Art. 5/2-f: processing necessary for the legitimate interests of the controller, provided it does not harm your fundamental rights and freedoms (site security and log records)
• Art. 5/1: your explicit consent (for non-essential analytics and marketing cookies)

For health data, Article 6/3 of the KVKK permits processing by a physician bound by a duty of confidentiality for the purposes of diagnosis, treatment and care.

5. Transfer of personal data

As a rule your data is not shared with third parties. Transfers may occur only in the following limited cases:

• Service providers: suppliers used for website hosting and e-mail delivery, acting as data processors and only to the extent required by the service
• Competent public authorities: where a duly made request is received from an authority legally empowered to request information
• Legal advisers: for the exercise of the right of defence in the event of a dispute

Transfer abroad occurs only where the servers of the hosting or analytics services used are located outside Türkiye, and in accordance with Article 9 of the KVKK.

6. Retention periods

Your data is retained for as long as necessary for the purpose of processing, taking into account statutory limitation periods:

• Appointment and contact form records: 2 years from conclusion of the request
• Website security logs: 1 year
• Patient file records: for the periods prescribed by applicable health legislation

At the end of these periods, data is deleted, destroyed or anonymised.

7. Your rights (Article 11 of the KVKK)

By applying to the data controller, you have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred at home or abroad; to request rectification if it is incomplete or inaccurate; to request erasure or destruction under the conditions in Article 7; to request that such action be notified to third parties to whom the data was transferred; to object to a result against you arising solely from automated analysis; and to claim compensation for damage arising from unlawful processing.

8. How to apply

You may submit your requests, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• by e-mail to info@doctorertugrulince.com from the address registered with us, or
• in writing, by delivering a signed petition with documents establishing your identity to the clinic address.

Your application will be concluded free of charge within 30 days at the latest, depending on the nature of the request. Where the process entails an additional cost, a fee may be charged according to the tariff set by the Board.

This notice may be updated; the version in force is always published on this page. Turkish law applies to this notice and to any dispute arising from it.