Privacy Policy & Data Protection Notice
Last updated:
1. Who we are (Data Controller)
For the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU/UK General Data Protection Regulation (“GDPR”), the data controller is:
- Dr. Yusuf İşler, practising at Adil Dent, Akşemsettin Mah., Akdeniz Cd. No:101a, 34080 Fatih, İstanbul, Türkiye.
- Contact: +90 538 215 71 54 (phone / WhatsApp) · info@dryusufisler.com
2. What personal data we process
- Identity & contact data: name, email, phone/WhatsApp number, country of residence.
- Special-category health data: dental history, X-ray and CBCT images, treatment plans, clinical photographs, and medical information you share for a remote or in-person consultation.
- Technical data: see our Cookie Policy.
3. Why we process it and our lawful basis
- To respond to your enquiry and provide a consultation or quote: performance of a (pre-)contract.
- To plan and deliver dental treatment: explicit consent for special-category health data under KVKK Art. 6 and GDPR Art. 9(2)(a)/(h).
- To meet medical record-keeping and tax/legal obligations: legal obligation.
Explicit consent for health data
Because dental health data is a special category of personal data, we process it only with your explicit, freely given consent, obtained separately (e.g. before a remote WhatsApp assessment of your X-ray/CBCT). You may withdraw consent at any time; withdrawal does not affect processing already carried out.
4. Sharing and international transfers
We may share data with our clinical team, dental laboratories, and payment/booking service providers strictly as needed. As we serve international (e.g. UK) patients, data may be transferred between your country and Türkiye. International transfers are carried out in accordance with the conditions of KVKK Art. 9 — where required, on the basis of your explicit consent — and, for EU/UK-origin data, under the safeguards of GDPR Chapter V where applicable.
5. Retention
We keep clinical records for the statutory periods required by Turkish health and medical-records legislation. Other personal data is kept only as long as necessary for the purposes above, after which it is deleted, destroyed or anonymised in accordance with the KVKK.
6. Your rights
Under KVKK Art. 11 and, where applicable, the GDPR, you may request access, rectification, erasure, restriction, objection, and data portability, and lodge a complaint with the Turkish Data Protection Authority or your local supervisory authority (e.g. the UK ICO). To exercise a right, email info@dryusufisler.com or contact us on +90 538 215 71 54.
7. Security
We apply reasonable technical and organisational measures to protect your data. No transmission method is fully secure.