Skip to content
TR · Türkçe sürüm

Privacy Policy

Information notice for patients and service recipients under the Turkish Personal Data Protection Law No. 6698

This Privacy Policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (PDPL/KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

Purpose and scope of this policy

As Dentist Can Sağlat's dental practice and https://www.cansaglat.com, we take measures to protect your personal data under the Personal Data Protection Law No. 6698 (referred to as "KVKK" or the "Law"). We process your personal data, in our capacity as "data controller", under KVKK and the related legislation, for the reasons and by the methods explained below.

This Privacy Policy has been prepared under Article 10 of KVKK, "The Data Controller's Obligation to Inform", to inform you as transparently as possible about the identity of the data controller, how and on what legal basis your personal data are collected, the purposes for which they are processed, to whom and for what purposes they may be transferred, how long they are processed and your rights listed in Article 11 of KVKK. Statements made in this policy about "your personal data" also cover "your special categories of personal data".

Data controller

Name
Can Sağlat (Dentist Can Sağlat Dental Practice)
Address
Bitez Mah. Cumhuriyet Cad. No:72/1 Bodrum / Muğla, Türkiye
Email
info@cansaglat.com
Phone
+90 252 363 73 07

(Referred to in this Privacy Policy as "Dentist Can Sağlat Dental Practice".)

How your personal data are collected and the legal basis

Your personal data may be collected by automated or non-automated means, verbally, in writing or electronically, through the units of Dentist Can Sağlat Dental Practice, https://www.cansaglat.com, social media channels, WhatsApp, phone and email, the software used to carry out the practice's activities, and camera recordings. Your personal data may be created, updated and processed for as long as your relationship with Dentist Can Sağlat Dental Practice continues, and kept securely in both digital and physical form.

Your personal data are processed for the purposes set out under "Purposes for which your personal data are processed", either on the basis of your explicit consent under Article 5(1) of Law No. 6698, or under the following conditions for processing personal data listed in Article 5(2):

  • a) it is expressly provided for by law;
  • b) it is necessary to protect the life or physical integrity of the person, or of another person, who is unable to give consent because of actual impossibility or whose consent is not legally valid;
  • c) processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract;
  • ç) it is necessary for the data controller to fulfil its legal obligation;
  • d) the data have been made public by the data subject;
  • e) processing is necessary for the establishment, exercise or protection of a right;
  • f) processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Your special categories of personal data relating to your health are processed for the purposes set out under "Purposes for which your personal data are processed", under Article 6(3)(e) of Law No. 6698, by persons under a duty of confidentiality, for the protection of public health, preventive medicine, medical diagnosis, the provision of treatment and care services, and the planning, management and financing of health services. Where this condition does not apply, they are processed on the basis of your explicit consent under Article 6(3)(a).

Personal data we process

Your personal data are processed securely and in accordance with the Personal Data Protection Law, as required by law or to provide a better service in the work of our practice. In this context, the following personal data are collected:

Identity
Name, surname, date and place of birth, Turkish ID number, gender, social security (SGK) number, nationality, marital status.
Contact
Phone number, home address, email address.
Physical premises security
Data such as camera recordings.
Transaction security
Data such as IP address, website access records and log records.
Finance
Bank account number, IBAN.
Visual and audio records
Photographs, audio recordings, camera recordings; intraoral photographs, X-rays and digital impression (scan) records.
Health information
Blood group, medical history, consultation reports, information on operations, treatment methods applied, type of illness, medicines used, medical values, test results.
Travel data
Flight information, travel itinerary, accommodation data (for planning visits by international patients).
Message content
The content of correspondence and conversations you send us by WhatsApp, email or phone.

Purposes for which your personal data are processed

Your personal data will be processed for the following purposes:

  • carrying out the work needed for real and/or legal third persons, institutions and organisations connected with Dentist Can Sağlat Dental Practice (employees, visitors, patients, suppliers, business partners, etc.) to benefit from the practice's services;
  • ensuring the safety of life and property and the legal and commercial security of real and/or legal third persons, institutions and organisations present at the practice;
  • storing camera footage to ensure order, security and inspections when you are physically present at the practice;
  • responding to requests for information sent by WhatsApp, phone and email, and planning appointments;
  • informing our patients about their appointments, providing information and sending appointment reminders;
  • planning and managing the internal workings and daily operations of the practice and obtaining medicines;
  • meeting the legal and regulatory requirements arising, or that may arise, from the Turkish Commercial Code No. 6102, the Turkish Code of Obligations No. 6098, the Consumer Protection Law No. 6502, the Personal Data Protection Law No. 6698, the Tax Procedure Law No. 213, the Social Insurance and General Health Insurance Law No. 5510, the Basic Law on Health Services No. 3359, Decree-Law No. 663 on the Organisation and Duties of the Ministry of Health and its Affiliated Institutions, the Regulation on Improving and Assessing Quality in Healthcare, the Regulation on Private Health Institutions Providing Oral and Dental Health Services, the Regulation on the Processing of Personal Health Data and the Protection of Privacy, the Regulation on International Health Tourism and Tourist Health, the Regulation on Archive Services and all related laws and secondary legislation, and taking the necessary measures in this context;
  • enabling the supervisory and/or regulatory duties of competent public institutions and professional organisations with public institution status;
  • meeting requests for information and documents from judicial bodies and/or administrative authorities;
  • listing, reporting, verification and analysis of how our services are used, improving our services and increasing satisfaction with them;
  • assessing complaints and suggestions and contacting you directly through the contact channels you have shared with the practice;
  • planning and managing the financing of all services provided, and invoicing;
  • carrying out risk management and quality improvement activities;
  • taking all technical and administrative measures needed for systems and applications as part of data security;
  • planning the visit, accommodation and treatment stages of international patients;
  • protecting public order and public health;
  • providing and managing health services such as medical diagnosis, treatment and care, and obtaining medical supplies.

To whom and for what purposes your personal data may be transferred

Having taken all technical and administrative measures needed to ensure an appropriate level of security under KVKK and the related health legislation, we may transfer your personal data, for the purposes set out above and within the conditions for processing personal data in Articles 8 and 9 of KVKK, to:

  • legally authorised public institutions and organisations, upon their request and limited to the purpose of the request (including the systems of the Ministry of Health and its affiliated institutions);
  • private insurance companies and banks, to provide financial services and ensure their continuity;
  • lawyers or law firms, to follow up legal matters;
  • dental laboratories and imaging centres we work with during treatment, only to the extent the treatment requires;
  • organisations in Türkiye or abroad from which we receive services under contract and/or to which we provide services or with which we cooperate to carry out our activities.

Transfers abroad: WhatsApp and website infrastructure

When you message us on WhatsApp, the information you share (your name, phone number, message content and any photos you send) may be processed on servers abroad belonging to the company that provides the WhatsApp service. Our website is published through a hosting and content delivery service with servers abroad; when you visit the site, technical information such as your IP address may be processed on this service's servers. These transfers are made within the conditions set out in Article 9 of KVKK.

We recommend sharing your health information on WhatsApp only to the extent necessary; we can discuss the details of your examination at the practice.

Website and cookies

There are no forms on our website, and no personal data are collected through it. A measurement tool that does not use cookies is used for visitor statistics. For details, please see ourCookie Policy. The Instagram, YouTube and Google Maps links on our website are subject to the privacy policies of those platforms.

Processing and retention period

Your personal data will be processed only for the purposes set out in this Privacy Policy, in compliance with the processing and limitation periods in all relevant laws and other legislation to which the practice is subject. If the laws on processing periods change, the new periods will apply.

In line with the principle of purpose limitation, your personal data are processed only for as long as necessary to fulfil the purposes explained in this Privacy Policy, and are deleted, destroyed or anonymised once these periods have expired.

Your rights

Under Article 11 of KVKK, by applying to our practice you have the right to:

  • a) learn whether your personal data are processed;
  • b) request information about it if your personal data have been processed;
  • c) learn the purpose of processing your personal data and whether they are used in line with that purpose;
  • ç) know the third parties in Türkiye or abroad to whom your personal data are transferred;
  • d) request correction of your personal data if they are incomplete or processed incorrectly;
  • e) request deletion or destruction of your personal data under the conditions set out in Article 7 of KVKK;
  • f) request that the actions taken under (d) and (e) be notified to third parties to whom your personal data have been transferred;
  • g) object to a result against you arising from the analysis of the processed data exclusively by automated systems;
  • ğ) claim compensation for damage if you suffer damage because your personal data were processed unlawfully.

How to apply

You can submit requests about your rights by completing the request form in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, and sending it in person or through a notary to Bitez Mah. Cumhuriyet Cad. No:72/1 Bodrum / Muğla, Türkiye, or by email toinfo@cansaglat.com from the email address you previously gave our practice and that is registered in our system.

Your application will be concluded free of charge as soon as possible, depending on the nature of the request, and within 30 days at the latest. If the action requires an additional cost, a fee may be charged in line with the tariff set by the Personal Data Protection Board. If your application is rejected, you find the reply insufficient, or no reply is given in time, you may file a complaint with the Personal Data Protection Board.

You can access the request form about your personal data via the linkKVKK Application Form (PDF, in Turkish).