Privacy Notice

This is a translation for information purposes. In case of any discrepancy, the Turkish text prevails.

1.Data controller

Under Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by Nilhair Clinic İzmir, whose details are given below, as data controller and within the scope described in this notice.

2.Personal data we process

Identity data: first name, surname
Contact data: phone number, email address
Special category data (health data): complaints, photos, medications and medical history you share via the form, WhatsApp, phone or email
Customer transaction data: the treatment you are interested in, your request and message
Transaction security data: IP address, browser information, time of submission
Marketing data: your preference for offers and news, only if you opt in

3.Purposes of processing

Responding to your request, scheduling appointments and contacting you
Carrying out a pre-assessment and determining the suitable technique and treatment plan
Providing medical diagnosis, treatment and care services and post-procedure follow-up
Fulfilling record-keeping and reporting obligations under health and other legislation
Running information security processes and keeping the website secure
Informing you of offers and news if you give explicit consent

4.Legal grounds and method of collection

Your personal data is collected through the forms on our website, WhatsApp, phone, email and face-to-face meetings at the clinic, by automated or partly automated means.

Identity, contact and transaction data is processed on the legal grounds in Article 5(2) KVKK: necessity for establishing or performing a contract (c), compliance with a legal obligation (ç) and legitimate interest (f).

Health data is processed under Article 6 KVKK by persons bound by professional secrecy for the protection of public health, preventive medicine, medical diagnosis, treatment and care, or on the basis of your explicit consent.

Marketing communication relies solely on your explicit consent, which you may withdraw at any time.

5.Transfer of personal data

Within the purposes above, your personal data may be shared with competent public authorities as required by law and with the hosting, email and software providers we work with.

When you use communication services with servers abroad, such as WhatsApp, your data is transferred abroad. Such transfers comply with Article 9 KVKK or rely on your explicit consent.

6.Retention period

Your personal data is kept for the period required by law or by the purpose of processing. When that period ends, the data is deleted, destroyed or anonymised.

7.Your rights under Article 11 KVKK

To learn whether your personal data is processed
To request information if it has been processed
To learn the purpose of processing and whether it is used accordingly
To know the third parties in Türkiye or abroad to whom it is transferred
To request correction if it is incomplete or inaccurate
To request deletion or destruction under the conditions of Article 7 KVKK
To request that corrections, deletions or destructions be notified to third parties to whom data was transferred
To object to a result against you arising solely from automated analysis
To claim compensation for damage caused by unlawful processing

8.How to apply

You can submit requests regarding your rights in writing to our address or to the email address below, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your request will be answered free of charge within 30 days at the latest; if it requires additional cost, the fee set by the Board may apply.

9.Cookies

Our website only uses essential cookies that remember your language preference and keep the admin session secure. No advertising or tracking cookies are used.