Data Protection Notice

1. Data controller

Your personal data is processed by Dr. Sevinç Ümit (Cennet Mah., Ziya Gökalp Cd. No:6, 34290 Küçükçekmece/Istanbul, Turkey; info@uzmdrsevincumit.com) as data controller under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

2. Data we process

• Identity and contact data: name, phone number, email address, country, preferred language
• Request data: the service you are interested in and the content of your message
• Health data: symptoms or medical information you choose to share (special category data)
• Security data: submission time and IP address, kept briefly to prevent abuse
• Cookie data: visitor statistics, only with your consent

3. Purposes

• Replying to your appointment or information request
• Planning consultations, tests and treatment
• Pre-assessment and visit planning for international patients
• Keeping the website secure and preventing spam
• Producing visitor statistics, if you consent
• Complying with legal obligations

4. Legal bases

We process your data to take steps at your request before providing a medical service, to comply with legal obligations and for our legitimate interest in operating a secure website (KVKK Art. 5; GDPR Art. 6(1)(b), (c), (f)). Health data is processed on the basis of your explicit consent and for the purposes of medical diagnosis and treatment by persons subject to professional secrecy (KVKK Art. 6; GDPR Art. 9(2)(a), (h)).

5. How data is collected

Data is collected electronically when you use the appointment form, WhatsApp, email or phone. If you choose “Send via WhatsApp”, your message is sent through the WhatsApp app on your own device and WhatsApp’s (Meta Platforms) privacy terms also apply.

6. Recipients and transfers

Your data may be shared only as necessary with our website hosting and email providers, with healthcare facilities involved in your tests or treatment at your request, and with authorities where required by law. Where providers’ servers are located abroad, transfers are carried out in accordance with KVKK Art. 9 and, for EU data, with appropriate safeguards.

7. Retention

Form submissions are not stored in a database on the web server; they are delivered by email. Correspondence is kept for as long as needed to handle your request and as required by law, and is then deleted or anonymised.

8. Your rights

You may request information about whether and how your data is processed, ask for correction, deletion or restriction, object to processing, request data portability (GDPR) and withdraw consent at any time. You may also lodge a complaint with the Turkish Personal Data Protection Authority or, if you are in the EU, with your local supervisory authority.

Please send requests to info@uzmdrsevincumit.com. We respond within 30 days free of charge.