KVKK Privacy Notice

Under Turkish Personal Data Protection Law No. 6698 (the “KVKK”), Op. Dr. Havva Gül Yıldız Private Practice, acting as the data controller, may process your personal data within the scope described below.

Data Controller: Op. Dr. Havva Gül Yıldız
Address: 1453 Maslak, C9 Blok, Kat: 1, Daire: 7, Sarıyer / İstanbul
Email: contact@opdrhavvagulyildiz.com
Telephone: +90 532 457 9333

Our private practice processes the personal data it collects for the following purposes:

  • Carrying out appointment creation, follow-up and reminder procedures
  • Managing treatment planning, application and follow-up processes
  • Carrying out patient registration and filing procedures
  • Providing healthcare services in compliance with applicable legislation
  • Fulfilling legal obligations (Ministry of Health notifications, tax legislation, etc.)
  • Responding to communication requests and providing information
  • Evaluating and improving service quality
  • Carrying out billing and accounting processes

Our private practice processes your personal data in the following categories:

First name, surname, Turkish Republic identity number, date of birth and sex

Telephone number, email address and address information

Medical history, examination findings, diagnosis and treatment information, operation notes, laboratory and imaging results, medication and allergy information, and photographs taken before and after treatment

Invoice information and payment records

Website usage data, cookie information, IP address and contact-form records

Our private practice collects your personal data through the following methods:

  • Applications you make to our private practice (in person, by telephone, email or website)
  • Through the online appointment form
  • Through WhatsApp and other communication channels
  • During examination and treatment processes
  • Through website cookies (by automated means)

The legal grounds for processing your personal data are:

  • KVKK Article 5/1: Your explicit consent
  • KVKK Article 5/2(a): Processing being expressly provided for by law (health and tax legislation)
  • KVKK Article 5/2(c): Processing being directly related to the establishment or performance of a contract
  • KVKK Article 5/2(ç): Processing being necessary for the data controller to fulfil a legal obligation
  • KVKK Article 5/2(e): Processing being necessary for the establishment, exercise or protection of a right
  • KVKK Article 6/3: Processing of health data by persons under a duty of confidentiality for the purposes of protecting public health and carrying out preventive medicine, medical diagnosis, treatment and care services

Our private practice may transfer the personal data it collects to the following parties. Any such transfer serves the purposes stated above and complies with Articles 8 and 9 of the KVKK:

  • The Ministry of Health and its affiliated bodies (legal obligation)
  • The Social Security Institution (SGK)
  • Judicial authorities and regulatory bodies (upon a lawful request)
  • Contracted laboratories and imaging centres (for treatment purposes)
  • The financial consultancy firm (for tax and accounting obligations)
  • Information-technology service providers (within the scope of data-security measures)

Our private practice retains your personal data for as long as the processing purposes require and for the limitation periods that applicable legislation prescribes:

  • Health data: 20 years from the date of the last procedure (Patient Rights Regulation)
  • Financial data: 10 years (Tax Procedure Law)
  • Contact-form data: 2 years after we fulfil the request
  • Cookie data: For the periods stated in our Cookie Policy

After the retention period expires, our private practice erases, destroys or anonymises your personal data in accordance with the KVKK and applicable legislation.

Under Article 11 of the KVKK, you have the following rights as a personal data subject:

  • To learn whether your personal data are processed
  • To request information if your personal data have been processed
  • To learn the purpose of processing your personal data and whether they are used in accordance with that purpose
  • To know the third parties to whom your personal data are transferred in Türkiye or abroad
  • To request correction if your personal data have been processed incompletely or inaccurately
  • To request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK
  • To request that correction and erasure operations be notified to third parties to whom your personal data have been transferred
  • To object to a result arising against you through analysis of processed data exclusively by automated systems
  • To claim compensation if you suffer damage because your personal data have been processed unlawfully

You may use one of the following methods to exercise the rights listed above:

  • Written application: In person, with identity verification, or through a notary to 1453 Maslak, C9 Blok, Kat: 1, Daire: 7, Sarıyer / İstanbul
  • Email: To contact@opdrhavvagulyildiz.com by registered electronic mail (KEP) or secure electronic signature

Your application must include your first name, surname, signature if the application is in writing, Turkish Republic identity number, residential or workplace address for service, email address for notification if available, telephone number and the subject of your request.

Our private practice will conclude your application free of charge as soon as possible and no later than 30 (thirty) days, depending on the nature of the request. If the procedure requires an additional cost, our private practice may charge the fee in the tariff determined by the Personal Data Protection Board.

Our private practice may update this privacy notice in line with changes in legal regulations and its policies. We will always publish the current text on our website.

Last updated: 07.02.2026