Personal Data Protection Law

Introduction

This information notice has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“LAW”) in order to inform data subjects regarding the processing of personal data collected under the legal entity of Prof. Dr. Hakan Demirci (“DATA CONTROLLER”). The DATA CONTROLLER shows the utmost care and diligence in the processing, protection, and security of personal data. Within this scope and in accordance with the LAW, personal data of the relevant persons may be processed in the capacity of DATA CONTROLLER.

Purpose of Processing Personal Data

Personal data are processed within the framework of the personal data processing conditions specified in Articles 5 and 6 of the LAW and for the purposes set out therein, including but not limited to the purposes listed below. The DATA CONTROLLER takes all necessary legal, technical, and administrative measures at the highest level to prevent unlawful processing and access to personal data and to ensure their secure storage.

Types of Personal Data Collected

The following personal data are collected from relevant individuals through our contact forms:

• Identity Information: Name, Surname
• Contact Information: Phone number, email address
• Message Content: Requests and explanations submitted via the form
• Health Information (optionally shared by patients): Test results, reports, MRI images, X-ray images, and other health data voluntarily uploaded or submitted by users for preliminary evaluation by our doctors.

These data are processed solely for the purposes of communication, request management, providing preliminary information to the relevant doctor when necessary, and evaluating healthcare service processes.

Sharing and Transfer of Personal Data

Personal data collected from employees, service recipients, suppliers, and citizens may be shared with the DATA CONTROLLER’s suppliers, service providers, and legally authorized public institutions and organizations within the framework of relevant legislation and in accordance with Articles 8 and 9 of the LAW, limited to the purposes and conditions of personal data processing. The DATA CONTROLLER takes all necessary administrative and technical measures and security precautions when sharing personal data and attaches importance to the security of your data.

Method and Legal Basis for Collecting Personal Data

The DATA CONTROLLER collects personal data through all kinds of verbal, written, visual, and electronic methods within the scope of the purposes stated in this information notice; based on legal grounds such as ensuring that the services provided comply with applicable laws and regulations and fulfilling contractual and legal obligations completely. Personal data are processed, shared, and transferred in accordance with the conditions set forth in the LAW.

Cookies and Analytics

Mandatory and analytical cookies are used on our website to improve user experience and analyze site traffic.

• Mandatory Cookies: Required for the basic functions of the website.
• Analytical Cookies (Google Analytics): Analyze site usage data anonymously.

Users have the right to manage their cookie preferences through browser settings. Explicit consent will be obtained upon first visit for non-essential cookies.

Rights of Personal Data Subjects

Personal data subjects, pursuant to Article 11 of the LAW, have the right to:

• Learn whether their personal data are processed,
• Request information if their personal data have been processed,
• Learn the purpose of processing and whether they are used in accordance with that purpose,
• Know the third parties to whom personal data are transferred domestically or abroad,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction of personal data within the framework of Article 7 of the LAW,
• Request notification of transactions made pursuant to Articles 5 and 6 of the LAW to third parties to whom data are transferred,
• Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• Request compensation for damages in case of unlawful processing of personal data.

Applications will be concluded within 30 days at the latest, depending on the nature of the request.

Explicit Consent

The processing of special categories of personal data (health data, test and imaging reports) is only possible with the explicit consent of the data subject. Users give consent by checking the explicit consent box when filling out forms or uploading data. Explicit consent can be withdrawn at any time, and upon request, data processing will be stopped or the data will be deleted.

Contact

Detailed information regarding the matters covered in this information notice can be found in the Personal Data Protection and Processing Policy. To exercise your rights arising from the LAW, you may send your identity information, the right you wish to exercise, and a detailed explanation of your request to the contact address.

Identity of the Data Controller

• Data Controller: Prof. Dr. Hakan Demirci
• Phone: +90 533 573 25 24
• Website: https://drhakandemirci.com/en
• Email: info@drhakandemirci.com
• Address: Bostancı, Havacı Binbaşı Mehmet St. No:1 Floor: 2 Apt:4, 34744 Kadıköy / Istanbul / Turkey