Privacy policy

Who is responsible

The practice named in the legal notice is the controller for the personal data processed through this website. Requests concerning your data can be sent to the practice using the contact details published in the legal notice.

What we collect, and when

Visiting the website: our hosting provider processes technical connection data such as IP address, request time, requested resource, referrer and browser identification. This is necessary to deliver the site and to protect it against abuse. These server logs are not used to build a profile of you.

Sending a consultation enquiry: we process the details you enter — name, email address, telephone or WhatsApp number, country, preferred language, treatment interest, preferred contact method and time, any free-text message, and any files you attach: photographs, a panoramic radiograph, a CBCT study and any other medical documents.

Attribution data: when you arrive through a campaign or referring website, the enquiry may carry the campaign parameters and the page you landed on. This tells us which channels bring patients to us. It is not used to track you across other websites.

Health data

Photographs of your teeth, panoramic radiographs, CBCT studies and anything you write about your medical history are health data — a special category of personal data under Article 9 GDPR and special-category personal data under Turkish law (KVKK Art. 6).

We process them only on the basis of your explicit consent, given when you submit the form, and only to assess your case and prepare a treatment plan. They are not used for marketing, are not published, and are not passed to anyone outside the practice without a further, specific consent from you.

Legal bases

Delivery and security of the website: legitimate interests, Art. 6(1)(f) GDPR.

Processing your consultation enquiry: steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR.

Photographs, radiographs, CBCT studies and medical details: your explicit consent, Art. 9(2)(a) GDPR and the corresponding provision of Turkish data protection law.

Optional updates about treatments and patient guides: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.

International transfer

The practice is located in Türkiye. If you send an enquiry from the European Economic Area, your data is transferred to Türkiye so that the dentist can assess your case. This transfer is based on your explicit consent to the transfer under Art. 49(1)(a) GDPR, given together with your consent to the processing of your health data.

You should know that Türkiye is not covered by an EU adequacy decision. Your consent is what makes the transfer lawful, and you can withdraw it at any time with effect for the future.

How long we keep it

Enquiries that do not lead to treatment are deleted once it is clear no treatment will follow, and at the latest twelve months after your last contact with us.

Where treatment takes place, patient records are retained for the period required by Turkish law governing the retention of medical records.

Server logs are retained by the hosting provider for a short period for security and troubleshooting purposes.

Processors

The website is hosted by an infrastructure provider that processes data on our instructions under a data processing agreement. Enquiry notifications are delivered by an email service provider on the same basis.

We do not use advertising networks, social media pixels or third-party analytics on this website.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict processing, to data portability, and to object to processing based on legitimate interests. Where processing rests on consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, contact the practice using the details in the legal notice. If you believe your data has been handled unlawfully, you may lodge a complaint with a supervisory authority — in the EEA, the authority in your country of residence; in Türkiye, the Personal Data Protection Authority (KVKK).

Sending photographs safely

Only send what is needed to assess your case. Photographs of your teeth and mouth are enough; there is no need to include documents containing an identification number, insurance number or address.