Potential Patient Information Notice

Patient Contact Form Information Notice under Law No. 6698 on the Protection of Personal Data (“KVKK”) and the General Data Protection Regulation (GDPR)

At Elegance Clinic, as the Data Controller, we value the privacy and security of your personal data in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”). For this reason, we have prepared this Information Notice to explain the purposes for which your personal data is processed, the methods by which it is collected, and your rights.

Principles of Personal Data Processing

Your personal data is processed in line with the following principles:

In compliance with the law and principles of good faith,
Accurate and kept up to date when necessary,
For specific, explicit, and legitimate purposes,
Relevant, limited, and proportionate to the purpose,
Stored for the period stipulated in applicable legislation or required for processing purposes.

Purposes and Legal Grounds for Processing Personal Data

When you use the contact form on our website, the following personal data may be processed:

Your First and Last Name
Your Email Address
Your Phone Number
Your Photograph (if submitted)

These data are processed for the following purposes:

Management of patient relations,
Planning and execution of diagnosis and treatment processes,
Planning and execution of service processes,
Carrying out service activities within the scope of international health tourism.

Transfer of Personal Data

With your explicit consent, your personal data may be transferred within the scope of processes carried out jointly with our group companies and business partners, through clinical automation systems, domestically or abroad, in accordance with Articles 8 and 9 of the KVKK.

Method of Collecting Personal Data

Your data is collected electronically via our website and processed into our clinical automation system.

Retention of Personal Data

Your personal data is retained for at least 3 years under the relevant legislation (Turkish Commercial Code, Code of Obligations, Law on the Regulation of Electronic Commerce, etc.) and is securely deleted or anonymized once the legal retention periods expire.

Your Rights as a Data Subject

Under Article 11 of the KVKK, you have the following rights:

To learn whether your personal data has been processed,
If processed, to request information about it,
To learn the purpose of processing and whether it is used in accordance with its purpose,
To know the third parties to whom it is transferred domestically or abroad,
To request the correction of incomplete or inaccurate data,
To request the deletion or destruction of your data,
To request notification of correction/deletion to third parties to whom the data was disclosed,
To object to decisions made solely through automated systems if it results in a negative outcome for you,
To request compensation in case you suffer damage due to unlawful processing of data.

Application Method

You may submit your requests regarding your rights, together with documents verifying your identity, in writing or via notary in accordance with the “Communiqué on the Principles and Procedures of Application to the Data Controller.” Your applications will be finalized free of charge within 30 days at the latest. However, if the process requires additional cost, the tariff set by the Personal Data Protection Board may apply.