Privacy Policy

1. Who Are We?

This website has been created to provide information about the professional activities, treatment areas and dental services offered by aykutkosun.com.

The relevant healthcare services are provided through AK 212 Bayrampaşa Diş Sağlığı Hizmetleri Sanayi ve Ticaret Limited Şirketi.

In relation to the processing of personal data, AK 212 Bayrampaşa Diş Sağlığı Hizmetleri Sanayi ve Ticaret Limited Şirketi acts as the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), depending on the nature of the relevant data processing activity.

The European Union General Data Protection Regulation (“GDPR”) may also be taken into consideration where it applies to the relevant data processing activity and the applicable conditions are met.

2. What Information May We Collect?

Different categories of personal data may be processed when you use the website, contact us or receive healthcare services.

Information You Provide Directly

• First and last name
• Email address
• Telephone and WhatsApp contact details
• Appointment and contact requests
• Your treatment preferences and requests
• Photographs, X-rays or other health records where provided by you
• Other information you provide to us through forms or messages

Information That May Be Processed When You Use the Website

• IP address
• Browser and device information
• Pages visited
• Technical data relating to time spent on the website
• Referring website or traffic source
• Information obtained through cookies and similar technologies

For detailed information about our use of cookies, please see our Cookie Policy.

3. For What Purposes Do We Use Your Information?

Depending on the nature of the relevant activity, your personal data may be processed for the following purposes:

• Responding to your enquiries and requests for information
• Creating and managing your appointment requests
• Providing information about treatment options
• Facilitating treatment planning and the provision of relevant healthcare services
• Providing pricing information relating to treatment where requested
• Managing patient communications and post-treatment follow-up processes
• Maintaining medical records and patient files as required under healthcare legislation
• Assessing requests and complaints
• Maintaining the security of the website
• Analysing website usage and performance
• Improving services and the user experience
• Complying with legal and regulatory obligations

The sending of electronic communications for marketing or promotional purposes is subject to the requirements of applicable legislation and, where required, obtaining the consent of the relevant individual.

4. Legal Grounds for Processing Personal Data

Depending on the nature of the data processing activity, your personal data may be processed on the basis of one or more of the conditions specified in Articles 5 and 6 of the KVKK.

• Where processing is expressly provided for by law
• Where processing is necessary to comply with legal obligations
• Where processing is directly related to the establishment or performance of a contract
• Where processing is necessary for the establishment, exercise or protection of a right
• Where processing is necessary for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the individual concerned
• Where the conditions specified by applicable legislation for processing special categories of personal data are met
• Where your explicit consent has been obtained in circumstances in which the processing activity is required to be based on explicit consent

Completing a contact form on the website or contacting us does not, by itself, mean that you have given explicit consent to every data processing activity. Each processing activity is assessed according to its own legal basis.

5. With Whom May Your Information Be Shared?

We do not sell your personal data to third parties for commercial purposes. Where the relevant legal requirements are met and only to the extent necessary for the purpose of the transfer, your data may be shared with the following parties:

• Relevant healthcare professionals and authorised employees within Diş 212 where necessary for the provision of treatment and healthcare services
• Relevant service providers for the provision of technical infrastructure, information technology, communications or similar services
• Third parties providing support services such as transport or accommodation where requested by you or required for the relevant service
• Legal advisers, accountants and relevant professional service providers for the purpose of complying with legal, financial or contractual obligations
• The Ministry of Health and other authorised public authorities and institutions where required by law

Appropriate technical and administrative measures are taken in accordance with applicable legislation when personal data is transferred.

6. Data Relating to International Patients

If you contact us while residing outside Türkiye or receive healthcare services in Türkiye, the personal data you provide to us may be processed and stored in Türkiye.

Where personal data is transferred across borders, the conditions and necessary safeguards prescribed by applicable data protection legislation are taken into consideration.

7. How Long Is Personal Data Retained?

Your personal data is retained for the periods prescribed by applicable legislation or for as long as necessary for the purposes for which it is processed.

When the applicable retention period expires and there is no other legal basis requiring the continued processing of the data, personal data is deleted, destroyed or anonymised in accordance with applicable legislation.

For detailed information about retention periods by data category and process, please see our Personal Data Retention and Disposal Policy.

8. Your Rights in Relation to Your Personal Data

Under the KVKK and EU GDPR, you may have the following rights in relation to your personal data:

• To access your personal data and request a copy
• To request the correction of inaccurate or incomplete information
• To request the deletion of your personal data
• To restrict or object to the processing of your data
• To withdraw your explicit consent at any time
• To lodge a complaint with the relevant data protection authority

Despite our efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security; however, we take all reasonable measures to protect your data.

For detailed information about your rights and how to exercise them, please see our Personal Data Processing Notice.

9. Data Security

Appropriate technical and administrative measures are implemented to prevent the unlawful processing of or access to personal data and to ensure that personal data is stored securely.

Depending on the nature of the relevant systems and data processing activities, these measures may include:

• Access and authorisation controls
• Firewalls and system security measures
• Encryption and secure data transfer methods where appropriate
• Data backup and recovery processes
• Staff confidentiality and data security obligations
• Security measures relating to physical records and working environments

It is not possible to guarantee the absolute security of any data transmission over the internet. Nevertheless, reasonable technical and administrative measures appropriate to the nature of the risk are implemented to protect personal data.

10. Cookies and Similar Technologies

The website may use cookies and similar technologies for purposes such as providing essential functionality, maintaining security, remembering preferences and, where the necessary consent has been obtained, analysing website usage.

For detailed information about the categories of cookies used, their purposes and how you can manage your preferences, please see our Cookie Policy.

11. Children's Personal Data

The website is not designed specifically for children. Where it is necessary to process children's personal data, we act in accordance with the requirements of applicable legislation, including any requirements relating to a parent or legal representative where applicable.

If you believe that a child's personal data has been provided to us unlawfully or inadvertently, you may contact us so that we can carry out the necessary assessment.

12. Third-Party Websites

Our website may contain links to social media platforms, mapping services or other external websites.

Third-party websites accessed through these links have their own privacy policies and data processing practices. We therefore recommend that you review the privacy policies of the relevant third parties separately.

13. Changes to This Privacy Policy

This Privacy Policy may be updated if there are changes to the services provided through the website, personal data processing activities or applicable legislation.

The current version of this Policy will be published on this page, and the date of the latest update will be stated at the top of the page.