1. Data controller
Data controller: [TO BE COMPLETED] (legal name) · MERSIS/Tax No: [TO BE COMPLETED] · Address: Bağdat Avenue No:354, Floor 4, Unit 14, Caddebostan, 34728 Kadıköy, Istanbul · Email: info@cempayasli.com · Phone: +90 549 904 81 09
Your personal data is processed, within the scope described below, by the clinic whose details are given above, acting as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK").
2. Personal data processed
| Category | Example data |
|---|---|
| Identity | First name, last name, date of birth, Turkish ID / passport number |
| Contact | Phone, email, address, WhatsApp correspondence |
| Health (special category) | Examination findings, medical history, procedure records, photographs and images |
| Financial | Invoice and payment information |
| Visual / audio | Clinic security camera recordings, before/after images taken with explicit consent |
| Transaction security | Website visit and cookie data (see Cookie Policy) |
3. Purposes of processing
- Scheduling appointments; planning and delivering consultation and treatment services
- Providing medical diagnosis, treatment and care services; keeping patient records
- Fulfilling notification and record-keeping obligations arising from health legislation
- Invoicing, payment and accounting processes
- Patient satisfaction, information and — if you have given explicit consent — promotional communications
- Coordinating travel and accommodation for international patients
- Ensuring the security of the clinic
4. Legal grounds
Under Articles 5 and 6 of the KVKK, your personal data is processed on the following legal grounds: it is expressly provided for by law; it is necessary for the conclusion and performance of a contract; it is necessary to fulfill legal obligations; legitimate interest; and — for health data — processing by persons under a duty of confidentiality for the purposes of protecting public health and carrying out medical diagnosis, treatment and care services. In all other cases, it is processed based on your explicit consent.
5. Transfers
Your personal data may be transferred to the Ministry of Health and authorized public institutions where legally required; to partner hospitals, laboratories and anesthesia teams to the extent required by your treatment; to accounting and legal advisors; and to IT infrastructure providers ([TO BE COMPLETED]). Transfers abroad are made only when the conditions in Article 9 of the KVKK are met.
6. Method of collection
Your data is collected by automated or non-automated means through paper forms at the clinic, examination records, phone, WhatsApp, email, website contact channels and security cameras.
7. Retention period
Health records are retained for the period prescribed in the relevant legislation ([TO BE COMPLETED]); other data is retained for as long as the purpose of processing requires and for the applicable statutory limitation periods. At the end of that period, it is deleted, destroyed or anonymized.
8. Your rights (KVKK Art. 11)
- To learn whether your personal data is processed and, if so, to request information about it
- To learn the purpose of processing and whether it is used in line with that purpose
- To know the third parties to whom it is transferred
- To request correction if it is incomplete or inaccurate
- To request its deletion or destruction
- To object to a result against you arising from analysis by automated systems
- To claim compensation if you suffer damage due to unlawful processing
You may submit your requests in writing to our clinic address, to info@cempayasli.com from your registered email address, or to our registered electronic mail (KEP) address ([TO BE COMPLETED]). Requests are resolved free of charge within 30 days at the latest.
9. Explicit consent statement
I give my explicit consent for my before/after images and images relating to my treatment process to be used for promotional purposes on the clinic's website and social media accounts, with my identity concealed, and for informational and promotional communications to be sent to me. I understand that I may withdraw this consent at any time.
Full name / Date / Signature: [TO BE COMPLETED]