This English notice is provided for international visitors. It explains processing under Turkish Personal Data Protection Law No. 6698 (“KVKK”). If an inconsistency arises, the applicable Turkish legislation and the Turkish notice prevail. Last updated: 25 July 2026.
1. Data Controller
The data controller is Dr Kamran Efendioğlu MD, Plastic, Reconstructive and Aesthetic Surgeon, operating at Libadiye Cad. 82/E, Emaar Heights 2606, Üsküdar, Istanbul, Türkiye.
Contact: contact@drkamranefendioglu.com · +90 545 745 78 78
2. Data We May Process
- Identity and contact data, including name, age, country, telephone number and e-mail address.
- Consultation and appointment details, including the procedure requested and messages sent to the clinic.
- Health and medical data voluntarily provided for preliminary evaluation, such as medical history, medications, allergies, previous operations, height, weight, lifestyle information, photographs, reports or other medical documents.
- Technical data such as IP address, browser/device information, access time, referring page and security logs where generated by the hosting service.
- Communication records created through telephone, e-mail or WhatsApp when you choose those channels.
3. Purposes and Legal Grounds
Data may be processed to respond to enquiries, arrange consultations, conduct preliminary medical evaluation, deliver and document healthcare, meet legal and regulatory obligations, maintain information security, establish or defend legal claims, and manage clinic operations.
Depending on the activity, processing is based on the legal grounds in Articles 5 and 6 of KVKK, including performance of or steps toward a contract, compliance with legal obligations, establishment or protection of a right, legitimate interests where fundamental rights are not harmed, healthcare-related processing by persons under a confidentiality obligation, and explicit consent where the law specifically requires it.
Receiving healthcare or submitting an appointment request is not conditional on consenting to advertising, marketing, or publication of photographs.
4. Collection Methods
Data may be collected through website forms, telephone, e-mail, WhatsApp, face-to-face meetings, medical documentation, browser storage, server logs and third-party services that you choose to activate.
5. Recipients and Transfers
Where necessary and legally permitted, data may be disclosed to authorised clinic personnel, hospitals and healthcare professionals involved in care, laboratories, translators, authorised health-tourism service providers, information technology and hosting providers, professional advisers, insurers, and competent public authorities.
Using providers such as WhatsApp/Meta, Google services, overseas e-mail or cloud infrastructure may involve an international transfer. Such transfers must rely on an applicable mechanism under Article 9 of KVKK. The clinic does not treat publication of this notice as consent to international transfer.
6. Retention and Security
Data is retained only for the period required by the processing purpose, healthcare record-keeping rules, limitation periods and other legal obligations, after which it is deleted, destroyed or anonymised in accordance with applicable procedures.
Reasonable administrative and technical safeguards are used according to the sensitivity of the data. Please do not send unnecessary medical information or images through unsecured channels. No method of internet transmission can be guaranteed to be completely secure.
7. Your Rights
Under Article 11 of KVKK, subject to applicable conditions, you may ask whether your data is processed; request information; learn the purpose of processing and recipients; request correction; request deletion or destruction; request notification of correction or deletion to recipients; object to a result produced exclusively through automated analysis; and claim compensation where unlawful processing causes damage.
To exercise these rights, use the Data Subject Application page. We may request proportionate information to verify identity. Do not send passports or identity documents through an unsecured public form unless specifically and securely requested.
8. Cookies and Third-Party Features
See our Cookie Policy and use “Cookie Preferences” in the footer to control optional third-party features.