Information Notice on the Processing of Personal Data (KVKK)

1. Introduction and Identity of the Data Controller

This notice has been prepared by ÖZEL SEÇİL SÖNMEZ AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ LTD. ŞTİ., acting as data controller, under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, healthcare legislation and related regulations.

You may contact the data controller through the following channels: Address: Akdere Mah. Mehmet Ali Altın Cd. No: 85/D 06630 Mamak / Ankara | Email: Dtsecilsonmez@gmail.com

2. Within What Scope Is Your Personal Data Processed?

Your personal data is processed in line with the principles of lawfulness and fairness, accuracy and currency where necessary, processing for specified, explicit and legitimate purposes, and processing that is relevant, limited and proportionate to those purposes.

2.1. Patient Registration and Appointment Processes: When you contact the clinic or are accepted as a patient, your identity, contact, appointment, financial and health data may be processed for appointment planning, creating the patient record, identity verification, service delivery, invoicing and compliance with legal obligations.

2.2. Provision of Healthcare Services: Your health data processed during examination, diagnosis, treatment, care and follow-up is handled by authorized persons who are under confidentiality obligations and who rely on the legal bases set out in KVKK and healthcare legislation.

2.3. Communication and Information Processes: Information that you share as part of contact by phone, email, appointment request, the mailto links (mailto:Dtsecilsonmez@gmail.com and mailto:sonmezsecil17@gmail.com), the WhatsApp link at https://wa.me/905519771313?text=Merhaba%20%C3%96zel%20Se%C3%A7il%20S%C3%B6nmez%20A%C4%9F%C4%B1z%20ve%20Di%C5%9F%20Sa%C4%9Fl%C4%B1%C4%9F%C4%B1%20Poliklini%C4%9Fi%2C%20randevu%20ve%20tedavi%20bilgisi%20almak%20istiyorum., the Instagram profile at https://www.instagram.com/secilsonmezdis/, or the information you enter into the contact form may be processed to answer your request, confirm appointments, run service processes and comply with legal obligations. The contact form does not send the message through the website; it only prepares a mailto draft in the email application you choose. If you complete the send action, the relevant content may also be processed by your chosen mail client or email provider. Optional commercial electronic communications remain subject to a separate consent where required.

2.4. Website Use and Cookies: The name, email address and request content that you enter into the contact form are used in your browser only to prepare a mailto draft for your chosen email application; the message is not sent by the website. If you continue with sending, that information may be transmitted to your chosen mail client or email provider. Non-essential services are activated only according to your consent choice or active click. The live third-party flows currently present on the website are the Google Maps map / directions link (https://maps.google.com/?q=Mehmet%20Ali%20Alt%C4%B1n%20Cad.%20No%3A85%20Akdere%20Mamak%20Ankara), the Umami analytics script served from https://analytics.artesdijital.com/stats.js, WhatsApp via wa.me, Instagram, and the mailto email-draft flows that run through the user’s chosen mail client or email provider.

2.5. Images and Special Uses: Patient photographs, videos or similar materials are processed only where a separate, specific and revocable explicit consent is legally required. Health data is not used for advertising, promotion or demand generation.

2.6. Physical Premises Security: If a camera system is used in the clinic’s physical premises, on-site information is provided separately and the recordings are managed in accordance with the applicable legislation.

3. To Whom and for What Purpose May Your Personal Data Be Transferred?

3.1. Competent Authorities and Institutions: Your personal data may be transferred to the Ministry of Health, provincial or district health directorates, tax authorities, judicial or administrative authorities and other authorized public bodies where required by law.

3.2. Parties Supporting Service Delivery: Data may be transferred, only to the extent necessary and with an appropriate legal basis and safeguards, to persons or organizations supporting healthcare delivery, laboratory processes, accounting, information technology and infrastructure, communications, legal support, usage measurement and external content services. The website’s live third-party services that may become involved depending on your consent or action include Google Maps, Umami (https://analytics.artesdijital.com/stats.js), WhatsApp / wa.me, Instagram, and the mailto email-draft flows that run through the user’s chosen mail client or email provider.

3.3. International Transfers: If an international data transfer is involved, no transfer is made without one of the transfer conditions foreseen under Article 9 of KVKK, such as an adequacy decision, an appropriate safeguard (for example a standard contract), explicit consent or another legal ground recognized by law.

4. Data Security and Retention Periods

The clinic adopts technical and administrative measures appropriate to the nature of the data in order to prevent unlawful processing or access and to ensure the preservation of personal data.

Your personal data is retained for the period required by the processing purpose and for the retention periods mandated by law. Once the retention period expires or the processing reason ceases to exist, the data is deleted, destroyed or anonymized in line with the applicable legislation and the clinic’s retention and destruction procedures.

5. Your Rights as a Data Subject

Under Article 11 of KVKK, you have the following rights as the data subject:

To learn whether your personal data is being processed,

To request information if your personal data has been processed,

To learn the purpose of processing and whether the data is used in accordance with that purpose,

To learn the third parties to whom your personal data is transferred domestically or abroad,

To request correction if your personal data is incomplete or inaccurate,

To request deletion, destruction or anonymization of your personal data under Article 7 of KVKK,

To request notification of correction or deletion to the third parties to whom your personal data has been transferred,

To object to a result against you that arises exclusively through the automated analysis of processed data,

To request compensation if you suffer damage due to the unlawful processing of your personal data.

6. Application Procedure

To exercise the rights set out above, you may submit your request in writing in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, through a notary, by using a secure electronic signature or mobile signature, or by sending it from the email address previously notified to the clinic and registered in our systems to Dtsecilsonmez@gmail.com.

Applications are finalized free of charge as soon as possible and no later than 30 (thirty) days, depending on their nature. If the transaction requires an additional cost, the tariff determined by the Board may be charged.

This notice was updated on May 1, 2026.