KVKK Privacy Notice
1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 (the “KVKK”), your personal data may be processed by Op. Dr. Havva Gül Yıldız Clinic, acting as the data controller, within the scope described below.
Data Controller: Op. Dr. Havva Gül Yıldız
Address: 1453 Maslak, C9 Blok, Kat: 1, Daire: 7, Sarıyer / İstanbul
Email: contact@opdrhavvagulyildiz.com
Telephone: +90 532 457 9333
2. Purposes of Processing Personal Data
Your personal data collected by our clinic are processed for the following purposes:
- Carrying out appointment creation, follow-up and reminder procedures
- Managing treatment planning, application and follow-up processes
- Carrying out patient registration and filing procedures
- Providing healthcare services in compliance with applicable legislation
- Fulfilling legal obligations (Ministry of Health notifications, tax legislation, etc.)
- Responding to communication requests and providing information
- Evaluating and improving service quality
- Carrying out billing and accounting processes
3. Personal Data Processed
Our clinic processes your personal data in the following categories:
3.1 Identity Information
First name, surname, Turkish Republic identity number, date of birth and sex
3.2 Contact Information
Telephone number, email address and address information
3.3 Health Data
Medical history, examination findings, diagnosis and treatment information, operation notes, laboratory and imaging results, medication and allergy information, and photographs taken before and after treatment
3.4 Financial Data
Invoice information and payment records
3.5 Digital Data
Website usage data, cookie information, IP address and contact-form records
4. Method and Legal Grounds for Collecting Personal Data
Your personal data are collected through the following methods:
- Applications you make to our clinic (in person, by telephone, email or website)
- Through the online appointment form
- Through WhatsApp and other communication channels
- During examination and treatment processes
- Through website cookies (by automated means)
The legal grounds for processing your personal data are:
- KVKK Article 5/1: Your explicit consent
- KVKK Article 5/2(a): Processing being expressly provided for by law (health and tax legislation)
- KVKK Article 5/2(c): Processing being directly related to the establishment or performance of a contract
- KVKK Article 5/2(ç): Processing being necessary for the data controller to fulfil a legal obligation
- KVKK Article 5/2(e): Processing being necessary for the establishment, exercise or protection of a right
- KVKK Article 6/3: Processing of health data by persons under a duty of confidentiality for the purposes of protecting public health and carrying out preventive medicine, medical diagnosis, treatment and care services
5. Transfer of Personal Data
Your collected personal data may be transferred, for the purposes stated above and in accordance with Articles 8 and 9 of the KVKK, to the following parties:
- The Ministry of Health and its affiliated bodies (legal obligation)
- The Social Security Institution (SGK)
- Judicial authorities and regulatory bodies (upon a lawful request)
- Contracted laboratories and imaging centres (for treatment purposes)
- The financial consultancy firm (for tax and accounting obligations)
- Information-technology service providers (within the scope of data-security measures)
6. Retention Period for Personal Data
Your personal data are retained for as long as required by the purposes of processing and for the limitation periods prescribed by applicable legislation:
- Health data: 20 years from the date of the last procedure (Patient Rights Regulation)
- Financial data: 10 years (Tax Procedure Law)
- Contact-form data: 2 years after the request has been fulfilled
- Cookie data: For the periods stated in our Cookie Policy
After the retention period expires, your personal data are erased, destroyed or anonymised in accordance with the KVKK and applicable legislation.
7. Your Rights as a Data Subject
Under Article 11 of the KVKK, you have the following rights as a personal data subject:
- To learn whether your personal data are processed
- To request information if your personal data have been processed
- To learn the purpose of processing your personal data and whether they are used in accordance with that purpose
- To know the third parties to whom your personal data are transferred in Türkiye or abroad
- To request correction if your personal data have been processed incompletely or inaccurately
- To request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK
- To request that correction and erasure operations be notified to third parties to whom your personal data have been transferred
- To object to a result arising against you through analysis of processed data exclusively by automated systems
- To claim compensation if you suffer damage because your personal data have been processed unlawfully
8. Application Method
You may use one of the following methods to exercise the rights listed above:
- Written application: In person, with identity verification, or through a notary to 1453 Maslak, C9 Blok, Kat: 1, Daire: 7, Sarıyer / İstanbul
- Email: To contact@opdrhavvagulyildiz.com by registered electronic mail (KEP) or secure electronic signature
Your application must include your first name, surname, signature if the application is in writing, Turkish Republic identity number, residential or workplace address for service, email address for notification if available, telephone number and the subject of your request.
Your applications will be concluded free of charge as soon as possible and no later than 30 (thirty) days, depending on the nature of the request. If the procedure requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.
9. Amendments to the Privacy Notice
This privacy notice may be updated in line with changes in legal regulations and our clinic’s policies. The current text will always be published on our website.
Last updated: 07.02.2026