Privacy Notice / Disclosure Text

PERSONAL DATA PROCESSING DISCLOSURE NOTICE

UZM. DR. ECEM CANTÜRK NAZLI PRIVATE PRACTICE

This Disclosure Notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”) in order to inform data subjects about the procedures and principles regarding the processing of personal data belonging to patients/clients who apply to UZM. DR. ECEM CANTÜRK NAZLI PRIVATE PRACTICE (“UZM. DR. ECEM CANTÜRK NAZLI”).

The security of personal data of patients/clients is a top priority for UZM. DR. ECEM CANTÜRK NAZLI. Accordingly, necessary technical and administrative measures are implemented in compliance with applicable legislation to ensure the secure processing of personal data and to prevent unlawful access.

DATA CONTROLLER

Your personal data are processed by UZM. DR. ECEM CANTÜRK NAZLI PRIVATE PRACTICE, acting as the “data controller” within the scope of KVKK.

Address: Kültür Mah., Bedia Muhavit Sok., Martı Apt. No:2 Floor:3 Flat:5 Konak/İzmir, Türkiye
Phone: +90 530 399 40 30
WhatsApp: +90 538 699 40 31
E-mail: [email protected]
Website: www.drecemcanturknazli.com

Within the scope of GDPR, UZM. DR. ECEM CANTÜRK NAZLI is deemed to be the “data controller”. Compliance processes under KVKK and GDPR are carried out under the responsibility of the data controller, with support from legal and information security experts when necessary.

PERSONAL DATA TO BE PROCESSED

Your personal data and special categories of personal data listed below are processed in accordance with the fundamental principles set forth in Article 4 of KVKK and Article 5 of GDPR; within the processing conditions specified in Articles 5–6 of KVKK and Articles 6–9 of GDPR; for the purposes stated in this Disclosure Notice; in a lawful, relevant, limited, and proportionate manner, and with appropriate security measures.

1. Identity Data

Name, surname, Turkish ID number / passport number / temporary ID number, identity or passport details, place and date of birth, marital status, gender, profession, signature, and similar identifying information.

2. Contact Data

Residential or business address, phone numbers, e-mail address, IP address, social media user information, and other communication data.

3. Health Data

Medical history, complaints, diagnosis, treatment and follow-up records; allergies, chronic diseases, regular medications, prescription data; laboratory and imaging results; dermatological evaluations; records related to medical aesthetic and dermatology procedures; and other health data necessary for treatment.

4. Visual / Audio Records

Photographs and/or videos taken before, during, or after medical procedures; image data obtained through security cameras; and audio data where necessary.

5. Financial Data

Bank account / IBAN details, invoicing and billing information, payment records, and similar financial data.

6. Transfer / Travel / Accommodation Data

Flight, transfer, and accommodation information for patients within the scope of health tourism services (if applicable).

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data are processed for purposes including but not limited to: creating and maintaining patient records; performing medical examinations; preventive medicine; medical diagnosis, treatment, and care services; managing follow-up and control processes; monitoring possible complications; communicating with you and managing appointment processes; patient satisfaction and request management; fulfillment of legal and contractual obligations; compliance with statutory record-keeping obligations; obtaining consultation services when required; fulfilling administrative obligations within the scope of health tourism; planning transfer, accommodation, and translation services; planning and managing healthcare services and financing; ensuring workplace safety; ensuring technical and commercial security; and fulfilling public legal obligations.

• Contact Data: Managing appointment and follow-up processes; sending information and notifications regarding medical services subject to your explicit consent.

• Health Data: Conducting diagnosis and treatment processes, consultations, maintaining patient files, and fulfilling statutory retention obligations.

• Photo/Video/Audio Data: Monitoring treatment processes and ensuring workplace security; promotional and informational activities subject to explicit consent.

• Financial Data: Fee collection, invoicing, and refund procedures.

• Transfer/Accommodation Data: Planning health tourism-related organizational processes (if applicable).

Failure to provide the relevant data may prevent the proper fulfillment of legal obligations and the effective execution of medical processes.

METHOD OF COLLECTION OF PERSONAL DATA

Your personal data may be collected through medical examination and treatment processes; completed forms and declarations; laboratory and imaging results; contact forms on www.drecemcanturknazli.com; messages sent to the practice’s corporate e-mail addresses; photo and video recordings taken before, during, or after medical procedures; remote communication and tele-health tools where necessary (within the privacy and data transfer policies of relevant service providers); messages and applications sent via social media; mandatory traffic logs related to guest Wi-Fi usage; and workplace security camera systems. Such data may be processed in physical and electronic environments in compliance with KVKK and GDPR.

PURPOSE, METHOD, AND LEGAL BASIS OF PROCESSING

Your data are processed verbally, in writing, or electronically; through automated or non-automated means; by the data controller or authorized data processors; with appropriate technical and administrative safeguards. The legal bases for processing are Articles 5/2 and 6/3 of KVKK and Articles 6–9 of GDPR. Explicit consent is obtained where required.

CASES REQUIRING EXPLICIT CONSENT

• Sending information and updates regarding medical services via SMS or e-mail and establishing mobile communication.

• Publishing photographs and/or videos related to treatment processes on the corporate website and/or social media accounts.

• Data sharing and international data transfers involving service providers whose servers are located abroad.

By sharing data through platforms such as messaging applications, online meeting tools, social media platforms, or foreign e-mail providers, you acknowledge that such sharing may result in international data transfers and that you have provided explicit consent accordingly.

CASES WHERE DATA MAY BE PROCESSED WITHOUT EXPLICIT CONSENT

• KVKK Art. 6/3 & GDPR Art. 9/2(h): Processing of health data within the scope of medical diagnosis, treatment, and care services conducted under the obligation of confidentiality.

• KVKK Art. 5/2(c) & GDPR Art. 6/1(b): Managing appointment and follow-up processes and communicating with you.

• KVKK Art. 5/2(f) & GDPR Art. 6/1(f): Patient satisfaction and request management based on legitimate interest.

• KVKK Art. 5/2(a), 5/2(ç) & GDPR Art. 6/1(c): Fulfillment of legal obligations including patient record keeping, statutory retention, invoicing and tax obligations, Ministry of Health and health tourism regulations, data security, and judicial or administrative proceedings.

TRANSFER OF PERSONAL DATA

In accordance with KVKK Articles 8–9 and GDPR Articles 45–49, your personal data may be transferred, in a limited and proportionate manner and subject to confidentiality commitments, for purposes such as diagnosis and treatment, consultation services, health tourism processes, appointment/communication/financial operations, fulfillment of legal obligations, and ensuring security, to the following recipients:

• Relevant specialist physicians, laboratories, and imaging service providers for consultation purposes.

• Financial, accounting, and audit advisors; legal advisors; IT infrastructure and clinical software providers; translators; health tourism agencies (if applicable).

• Authorized public institutions and judicial authorities when legally required.

DATA RETENTION PERIOD

Your personal data are retained for the periods stipulated by applicable legislation and are deleted, destroyed, or anonymized upon expiration of such periods. Unless otherwise required by law, the following retention periods apply:

AGE LIMIT OF DATA SUBJECTS

Under KVKK, transactions involving individuals under the age of 18 are carried out through their legal representatives. Under GDPR, the age of consent is generally 16 for EU citizens or residents (subject to national variations); parental or legal guardian consent is required below this age.

WITHDRAWAL OF CONSENT

Where processing is based on explicit consent pursuant to KVKK Art. 5/1 and GDPR Art. 6/1(a), you may withdraw your consent at any time. Withdrawal shall take effect prospectively from the date the withdrawal request reaches the data controller.

RIGHTS OF DATA SUBJECTS UNDER GDPR

• Right of access (Art. 15)

• Right to rectification (Art. 16)

• Right to erasure (Art. 17)

• Right to restriction of processing (Art. 18)

• Right to data portability (Art. 20)

• Right to object (Art. 21)

RIGHTS OF DATA SUBJECTS UNDER KVKK

• To learn whether personal data are processed

• To request information if personal data have been processed

• To learn the purpose of processing and whether data are used in accordance with such purpose

• To know the third parties to whom data are transferred domestically or abroad

• To request correction of incomplete or inaccurate data and notification of such correction to third parties

• To request deletion or destruction of data under applicable conditions and notification thereof

• To object to results arising against you from analysis conducted exclusively through automated systems

• To claim compensation for damages arising from unlawful processing

APPLICATION PROCEDURE AND RESPONSE TIME

You may submit your requests regarding your rights by clearly stating the scope of your request and providing documents verifying your identity, either in person or by mail to the practice address below, or via the communication channels on our website:

Address: Kültür Mah., Bedia Muhavit Sok., Martı Apt. No:2 Floor:3 Flat:5 Konak/İzmir, Türkiye

Requests are finalized as soon as possible and no later than 30 days, depending on their nature. Fees may be charged in accordance with the tariff determined by the Personal Data Protection Authority if the process incurs additional costs.

CONSENT AND ACKNOWLEDGMENT

By reading and accepting this Disclosure Notice, you acknowledge that you have been informed about data processing activities, learned your rights under KVKK and GDPR, and freely consent to the processing of your personal data in accordance with this Notice. You reserve the right not to accept this Disclosure Notice.

Data Controller: UZM. DR. ECEM CANTÜRK NAZLI PRIVATE PRACTICE
Address: Kültür Mah., Bedia Muhavit Sok., Martı Apt. No:2 Floor:3 Flat:5 Konak/İzmir
Phone: +90 530 399 40 30 — WhatsApp: +90 538 699 40 31
E-mail: [email protected]
Website: www.drecemcanturknazli.com

Respectfully.

İçerik Sorumlusu ve Tıbbi Denetim

TIBBİ UZMAN

Uzm. Dr. Ecem Cantürk Nazlı — Dermatoloji Uzmanı – Medikal Estetik

Uzm. Dr. Ecem Cantürk Nazlı, Hacettepe Üniversitesi Tıp Fakültesi İngilizce programından mezun olmuş; dermatoloji, lazer uygulamaları ve medikal estetik alanlarında 10 yılı aşkın mesleki deneyim edinmiştir.

Ulusal ve uluslararası eğitimlerle mesleki çalışmalarını sürdüren Dr. Ecem, 2022 yılından bu yana İzmir Alsancak’taki özel muayenehanesinde hastalarını kabul etmektedir.

Hakkımda →

Privacy Notice / Disclosure Text içeriği Uzm. Dr. Ecem Cantürk Nazlı tarafından hazırlanmış ve tıbbi doğruluk açısından incelenmiştir.

Yayınlanma: June 2025. Bu sayfa bilgilendirme amaçlıdır, tıbbi tavsiye yerine geçmez.