KVKK information notice
This is our information notice under Article 10 of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK). It explains how we process your personal data. It does not ask for your consent: consent to the use of health information is requested separately.
Last updated:
Data controller
Uzm. Dr. Bilgehan İlker Muayenehanesi, the private medical practice of Op. Dr. Bilgehan İlker ('we', 'us').
- Address: Ataköy 7-8-9-10. Kısım Mah., Çobançeşme E-5 Yanyol Cad. No:22, Nef 22 Ataköy D Blok Kat 1 Daire 36, 34158 Bakırköy/İstanbul, Türkiye
- Phone and WhatsApp: +90 542 280 27 51
- E-mail: [e-mail address to be added]
- Data Controllers' Registry (VERBİS): [VERBİS registration status to be confirmed]
Personal data we process
| Category | Data |
|---|---|
| Identity | Your name |
| Contact | Phone number, e-mail address, country, how you prefer to be contacted |
| Health (special category) | The procedure you are interested in and what you write about your health in our forms, only with your explicit consent; messages and photos you choose to send us on WhatsApp |
| Customer transaction | Your enquiry, the form and page you used, the language version, our notes on the status of your enquiry |
| Consent records | Your consent choices, the version and exact wording of the consent text you agreed to, the date and time |
| Marketing | Your choice about receiving updates; the referring page and any campaign parameters in the link that brought you to the website |
| Transaction security | A salted hash of your IP address, your browser's user-agent string, web server logs |
Purposes of processing
- replying to your enquiry and arranging an examination;
- assessing your enquiry and preparing a personal treatment plan, if you have given explicit consent;
- contacting you through the channel you choose;
- sending you information about treatments and news, if you have asked for it;
- keeping proof of your consent choices;
- keeping the website secure and preventing misuse;
- understanding which pages and links lead people to contact us;
- meeting our legal obligations, and establishing, exercising or protecting our rights.
How we collect data and on what legal basis
We collect personal data electronically: through the forms on bilgehanclinic.com, through WhatsApp, phone and e-mail, and automatically through our web server when you use the website.
| Processing | Legal basis under KVKK |
|---|---|
| Replying to your enquiry and arranging the next steps | Article 5(2)(c): necessary for steps towards a contract with you |
| Health information sent through our forms | Article 6(3)(a): your explicit consent |
| Health information you share on WhatsApp, by phone or by e-mail | [legal basis to be confirmed] |
| Updates about treatments and news | Article 5(1): your explicit consent; your approval for commercial electronic messages under Law No. 6563 |
| Proof of consent choices; legal obligations and claims | Article 5(2)(ç): compliance with a legal obligation; Article 5(2)(e): establishing, exercising or protecting a right |
| Website security, preventing misuse, understanding how people find us | Article 5(2)(f): our legitimate interests, provided your fundamental rights and freedoms are not harmed |
Who we transfer data to, and why
- Op. Dr. Bilgehan İlker's medical team, who are bound by professional secrecy, to answer and assess your enquiry.
- The licensed hospital where treatment would take place, if treatment is planned and as your explicit consent allows: [hospital name to be confirmed].
- Our website hosting provider, which stores the website and enquiries on our behalf: [hosting provider to be confirmed], [server country to be confirmed].
- A customer-relationship management (CRM) system, if we connect one, to keep track of enquiries: [CRM provider and location to be confirmed].
- WhatsApp (Meta), when you choose to contact us there. Meta processes data under its own terms, including outside Türkiye.
- Public authorities and courts, when the law requires it.
Where personal data is transferred abroad, we rely on the safeguards set out in Article 9 of the Law: [transfer safeguards to be confirmed].
Your rights under Article 11
You have the rights listed in Article 11 of the Law. In summary, you can ask whether we process your data and for information about it, why we process it and whether it is used for that purpose, and who has received it in Türkiye or abroad. You can ask for incomplete or inaccurate data to be corrected, for data to be deleted or destroyed under the conditions in Article 7, and for the recipients to be told of these steps. You can object to a result against you that comes solely from automated analysis, and you can claim compensation for damage caused by unlawful processing.
Our privacy notice explains all your rights, including those under the GDPR where it applies.
How to apply
Send your application to us in writing at our postal address, by registered electronic mail (KEP), with a secure electronic signature or a mobile signature, or from an e-mail address you have already given us and that is registered with us. Our e-mail address: [e-mail address to be added].
Your application must include your name and surname, and your signature if it is on paper; your T.R. identity number if you are a Turkish citizen, or otherwise your nationality and your passport number or identity number; your address for correspondence; your e-mail address, phone or fax number, if you have one; and what you are asking for.
We reply as soon as possible and within 30 days at the latest, free of charge. If replying involves a separate cost, we may charge the fee set by the Personal Data Protection Board.
If we reject your application, our answer is inadequate or we do not reply in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 30 days of learning our answer, and in any case within 60 days of your application: kvkk.gov.tr.
Information notice and consent are separate
In our forms we ask you only to confirm that you have read and understood this notice. That confirmation is not consent. Consent to the use of your health information is asked separately, and you are free to refuse it: see our explicit consent text.