Privacy Notice (KVKK)

1. Data Controller

Under the KVKK, your personal data is processed by Op. Dr. Işıl Akgün Demir as data controller, within the scope described below.

Address: Harbiye Mah. Abdi İpekçi Cad. No:1 Park Apartmanı D:14 Şişli / Istanbul · Phone: +90 552 661 80 09

2. How This Website Works

This website exists only to inform. Accordingly:

• There is no form, account or field of any kind where you could enter information; the site asks you for nothing.
• No cookies are used, and no analytics, advertising or visitor-tracking tool or third-party code is run.
• All content, including fonts and images, is served from the site’s own server; opening a page sends no request to any other company.
• So that the opening animation does not replay during the same visit, a single marker containing no personal data is written to your browser’s session storage (sessionStorage). It is never sent anywhere, and your browser deletes it when you close the tab.

3. Personal Data Processed

When you visit the site, as with any website, the following technical records are created automatically on the hosting infrastructure:

• IP address
• Date and time of access
• Address of the page viewed
• Browser and device information (user-agent)
• Address of the page you came from (referrer)

These records are not used to identify you, recognise you or build a profile.

When you contact us by phone, WhatsApp or Instagram, only the information you choose to share is processed:

• Identity: name and surname
• Contact: phone number and the profile name shown in the app you use
• Request: your preferred appointment, the procedure you are interested in and the content of your message
• Health: only health information and photographs you share of your own accord

You do not need to send detailed health information or photographs before your consultation; your health is assessed during the examination.

4. Purposes of Processing

• Publishing the site and keeping it available and secure; preventing abuse and attacks (technical records)
• Receiving, scheduling and answering appointment and consultation requests
• Answering your questions and communicating with you
• Meeting obligations under the applicable legislation and requests from competent authorities

Personal data processed during examination and treatment falls outside the scope of this notice; you will be informed about it separately at the clinic.

5. Legal Grounds

Your personal data is processed on the following legal grounds listed in Article 5(2) KVKK:

• Technical records: processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5(2)(f))
• Appointments and communication: processing is necessary, provided it is directly related to the establishment or performance of a contract, for the personal data of the parties to that contract (Art. 5(2)(c))
• Legal obligations: processing is necessary for the data controller to comply with a legal obligation (Art. 5(2)(ç)) and for the establishment, exercise or protection of a right (Art. 5(2)(e))

Health information you share of your own accord is processed under Article 6(3) KVKK by a physician bound by professional secrecy, for the purpose of medical diagnosis, treatment and care. Where this ground does not apply, your health data is processed only with your explicit consent.

6. Transfers

Your personal data is never shared with third parties for marketing. Limited to the purposes above:

• Hosting: the site is served on the infrastructure of Cloudflare, Inc. (USA). Because technical records may also be processed on this provider’s servers outside Turkey, this processing constitutes a transfer abroad within the meaning of Article 9 KVKK.
• WhatsApp and Instagram: when you write to us on these channels, your messages travel over Meta Platforms’ infrastructure and are subject to those platforms’ own privacy policies. Using them is your choice; you can always reach us by phone instead.
• Authorities: to competent public institutions, upon request and within the limits of the law.

The address link opens Google Maps. When you follow it, or any other external link on the site, the site passes on nothing about you beyond its own domain name; the service that opens is subject to its own privacy policy.

7. Method of Collection

Technical records are collected automatically when you visit the site; all other data is collected electronically, from your own statements, when you contact us by phone, WhatsApp or Instagram.

8. Retention

Technical records are kept for the limited period the hosting provider sets for security and operation. Appointment and contact correspondence is kept, once your request has been handled, for as long as its purpose requires and for the limitation periods in the applicable legislation; it is then erased, destroyed or anonymised.

9. Your Rights under Article 11 KVKK

As a data subject, you have the right to:

• Learn whether your personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties in Turkey or abroad to whom your personal data is transferred
• Request correction if it is incomplete or inaccurate
• Request erasure or destruction under the conditions in Article 7 KVKK
• Request that third parties to whom your data was transferred be notified of any correction, erasure or destruction
• Object to an outcome against you arising from analysis of your data exclusively by automated systems
• Claim compensation for damage suffered from unlawful processing

10. Applications

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests concerning your rights by a signed written petition delivered in person or by post to the address above, or by registered electronic mail (KEP), secure electronic signature or mobile signature.

Your application must include your name, surname and signature; your Turkish ID number, or for foreign nationals your nationality and passport or ID number; your residential or business address for notification; your email address and phone number, if any; and the subject of your request.

Your request will be concluded free of charge as soon as possible and within thirty days at the latest; if the action involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient, or no response is given in time, you may lodge a complaint with the Board within thirty days of learning of the response, and in any case within sixty days of your application.