KVKK Disclosure Notice
Identity of the Data Controller
This disclosure notice has been prepared under Article 10 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, “the Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Disclosure Obligation (Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ). Data controller: AD İnovasyon Sağlık Limited ŞirketiAddress: Prof. Dr. Bülent Tarcan Sk. No:6, Fulya, Şişli / İstanbul 34394
Telephone: +90 212 288 34 61
E-mail: info@akcadis.com
Contact person: Tuğçe Kocaoğlu
Personal Data Processed
Depending on the channel you use and the nature of your request, the following data is processed: a) Identity and contact data: first name, surname, telephone number, e-mail address. b) Transaction security data: the IP address generated when you visit the website, browser and device information, the date and time of the visit, and the form submission record. c) Health data (special category personal data): only where you send it yourself through the form — intra-oral photographs, panoramic films or other radiographic images, and the information you write in the free-text field about your current complaints and medical history. You are not required to share health data. For an appointment request and for contact, your first name, surname and one contact detail are sufficient.Appointment Request Form — Personal Data Collected
Through the appointment request form, the following personal data is processed for the purpose of evaluating your appointment request and contacting you: full name, phone number; (optional) your preferred appointment date and/or time of day; (optional) the reason for your appointment request / treatment area of interest; (optional) your statement on whether you have been examined at our clinic before; (optional) any additional note you wish to add. All fields marked (optional) above are optional; not filling them does not prevent your appointment request from being processed. The information you provide is not used for any purpose other than appointment scheduling, is not shared with third parties, and is retained for 3 months after the appointment process is completed.Note: The information shared through this form does not constitute a confirmed appointment; the appointment date and time will be finalised after you are contacted by our clinic.
Purposes of Processing
- Receiving, assessing and responding to your appointment and preliminary-consultation requests
- Making a preliminary assessment of the images and information you send at your request, and providing information before an examination
- Answering your questions and communicating with you
- Planning and carrying out the health service
- Fulfilling our legal obligations and exercising our right of defence in any dispute
- Ensuring the security and functioning of the website
Legal Bases
| Data | Legal basis |
|---|---|
| Identity and contact data | m.5/2-(f) of the Law: legitimate interest — so that we can respond to your request |
| Transaction security data | m.5/2-(ç) of the Law: legal obligation, and m.5/2-(f): legitimate interest |
| Health data | m.6/3 of the Law: your explicit consent; and, if you become a patient, also the carrying out of medical diagnosis, treatment and care services by health personnel under a duty of confidentiality within the scope of m.6/3 |
| All data in the event of a dispute | m.5/2-(e) of the Law: establishment, exercise or protection of a right |
Method of Collection
Your data is collected by electronic means and automated methods, through the contact and appointment form on our website, e-mail, telephone and WhatsApp.Transfers
Your personal data is transferred only in the following cases and limited to the stated purpose:- To our IT service providers (website hosting, e-mail infrastructure) — solely so that the service can be provided technically, in the capacity of data processor and under a contractual confidentiality obligation
- To authorised public institutions and organisations — where there is a request or obligation arising from legislation
- To our legal advisers — in the event of a dispute, limited to the exercise of the right of defence
Transfers Abroad
Some of the services we use on our website have their servers outside Türkiye. For this reason, the personal data you send through the site is transferred abroad. The transfer is made solely so that the following services can be provided, and is limited to that purpose:- Notification e-mail — Resend (USA): When you submit the appointment request or contact form, the information you enter (full name, telephone, e-mail address, subject and message; on the appointment form, your preferred date, time of day, reason for the appointment and note) is sent to the clinic by e-mail. This e-mail is sent through the Resend service, which is based in the United States of America.
- The clinic’s e-mail account — Google (USA): The notification e-mail is delivered to, and stored in, the clinic’s e-mail account on Google’s infrastructure.
- Website hosting — Railway (servers in the Netherlands): Our website and the records received through the forms, including the photographs and radiographs you upload, are stored on the Railway service’s servers in the Netherlands (Amsterdam).
Retention Period
- Appointment and contact requests that do not become a patient record: for 3 months from the conclusion of the request
- If you become a patient, your health data: for the patient-file retention period under the Kişisel Sağlık Verileri Hakkında Yönetmelik (Regulation on Personal Health Data) and related legislation
- Website security logs: 3 months