KVKK Privacy Notice
This is a translation provided for information. In case of discrepancy, the Turkish version prevails.
What does this notice cover?
This notice explains who processes the personal data you share when you browse this website, fill in the contact form or contact us by phone, email or WhatsApp, for what purpose and on what legal basis. It has been prepared in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
Data controller
- Data controller: Practice of Assoc. Prof. Dr. Senad Kalkan (Assoc. Prof. Dr. Senad Kalkan, Urologist)
- Address: Teşvikiye Mah. Hakkı Yeten Cad. Doğu İş Merkezi No:15 İç Kapı No:10 Kat:4, Şişli / İstanbul
- Email: info@drsenadkalkan.com
- Phone / WhatsApp: 0532 247 46 79
- Website: https://drsenadkalkan.com
Assoc. Prof. Dr. Senad Kalkan also sees patients part-time at the Medicana hospital in Sarajevo (Bosnia and Herzegovina). The data of patients examined and treated at that hospital is processed by the hospital in its own name, as a separate data controller and under the legislation that applies to it. This notice covers only this website and the contact channels of the practice in Istanbul.
What data do we process?
Contact form
Your full name, phone number, email address, subject and message. The date and time you submit the form and your answers to the tick boxes on the form are also recorded.
Information you choose to write in the message field, such as symptoms, previous diagnoses or medicines you take, is health data and counts as special category personal data under the KVKK. You do not need to write more than we need to understand your request. You can bring test results, reports or imaging documents to your consultation or send them by a method we agree on with you.
If you have allowed marketing cookies in the cookie panel, the Google Ads click identifier (gclid) and UTM parameters, which show which advert or link brought you to the website, are also stored with the form record. If you have not given permission, this information is not recorded.
Phone, email and WhatsApp
When you use the phone, email or WhatsApp links on the website, any information you send us (your name, number, email address, messages) reaches us through that channel. The WhatsApp link takes you to the WhatsApp app, where messages are transmitted under WhatsApp's (Meta's) own terms and privacy policy. We use the messages we receive only to reply to you and to arrange your appointment. We recommend that you do not send detailed medical documents via WhatsApp.
Technical logs
When you visit the website, the server automatically records your IP address, browser information, the date and time of your visit, the pages you view and the page that referred you to the website.
Cookie and consent records
The choices you make in the cookie panel are recorded with a consent ID, the categories you selected and the date. In this record your IP address is not stored in plain form but as an irreversible hash. The data collected by the analytics, marketing and external media tools you allow is described in the Cookie Policy.
For what purposes and on what legal basis do we process your data?
- To respond to your request, call you back and arrange appointments: processing is directly related to the formation of a contract (KVKK Art. 5/2-c) and is in our legitimate interest in answering your questions (Art. 5/2-f).
- To assess any health information in your message: processing is necessary for medical diagnosis, treatment and care by a physician bound by professional secrecy (KVKK Art. 6/3-e). For this reason we do not ask for your separate explicit consent for health information in your message.
- To meet legal obligations (Law No. 5651, health legislation, requests from competent authorities): processing is expressly provided for by law and is a legal obligation (Art. 5/2-a and 5/2-ç).
- To keep the website secure and prevent misuse and unauthorised access: legitimate interest (Art. 5/2-f).
- To record your cookie preferences and be able to prove the consent you gave when needed: legal obligation and legitimate interest (Art. 5/2-ç and 5/2-f).
- To protect rights in a possible dispute: processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e; for health data Art. 6/3-d).
- Visitor statistics, advertising measurement, showing adverts and loading external content (YouTube, Google Maps, the Instagram feed, Google reviews): your explicit consent (Art. 5/1). These tools do not run until you allow them in the cookie panel. Their scope is explained in the Explicit Consent Form.
How do we collect data?
Your data is collected from you through the contact form, phone, email and WhatsApp messages, and automatically through server logs and cookies.
Who may your data be shared with?
- Our service providers: website hosting, the email (SMTP) service that delivers form notifications, and technical maintenance of the website. These providers process data only on our behalf and on our instructions.
- Analytics, advertising and external content providers (only for the categories you allow): Google Ireland Limited / Google LLC (Google Tag Manager, Google Analytics 4, Google Ads, YouTube, Google Maps, Google reviews), Meta Platforms Ireland Limited (Meta Pixel) and, where active on the website, TikTok Pixel, Microsoft Clarity and Elfsight (Instagram feed). Some of these providers may also use the data they collect for their own purposes, in which case they are the data controller for that part.
- Competent public authorities and courts: where required by law and limited to the scope requested.
- The Medicana hospital in Sarajevo: only if you tell us that you would like to be seen there, and only to the extent needed to arrange your appointment.
We do not sell your data or rent it to others for advertising or marketing purposes.
Transfers abroad
Some of the service providers listed above process data on servers outside Turkey. These transfers are made in accordance with Article 9 of the KVKK: if the Personal Data Protection Board has issued an adequacy decision for the destination country, the transfer relies on that decision; if not, it relies first on appropriate safeguards, in particular standard contractual clauses notified to the Board within five working days of signature.
Where these safeguards are not in place, only incidental transfers, meaning transfers that are not regular or repeated, may be made. For example, sharing your details with the hospital in Sarajevo when you want to be seen there falls into this category, as it depends on your request and is a pre-contractual step. It may also rely on your explicit consent, given after you have been informed of the possible risks. We do not use explicit consent as the basis for regular transfers to service providers.
How long do we keep data?
- Contact form and correspondence: until your request has been dealt with, and afterwards for as long as needed in case of a possible dispute. Where an enquiry leads to a consultation or treatment, the information becomes part of your patient record and is kept for the periods set out in health legislation.
- Technical logs: for as long as needed for security and for obligations under Law No. 5651, up to a maximum of two years.
- Cookie consent record: your preference is valid for 12 months; the record is kept for as long as we may need to prove your consent.
Data whose retention period has expired is deleted, destroyed or anonymised.
Your rights
Under Article 11 of the KVKK you have the right to:
- find out whether your personal data is processed and, if so, request information about it,
- find out the purpose of processing and whether the data is used in line with that purpose,
- know the third parties in Turkey or abroad to whom the data has been transferred,
- ask for incomplete or inaccurate data to be corrected,
- ask for the data to be deleted or destroyed under the conditions in Article 7 of the KVKK,
- ask for any correction, deletion or destruction to be notified to third parties to whom the data has been transferred,
- object to an outcome against you that results solely from analysis by automated systems,
- claim compensation if you suffer damage because of unlawful processing.
You can withdraw your consent at any time for processing based on explicit consent. You can change your cookie permissions using the "Cookie Preferences" link at the bottom of the website.
How can you contact us?
You can send your request, together with information that allows us to verify your identity,
- in writing to the address above (as a petition with a wet-ink signature),
- via your registered electronic mail (KEP) address, secure electronic signature or mobile signature,
- from an email address you have previously given us and which is in our records, to info@drsenadkalkan.com
We will deal with your request free of charge within thirty days at the latest. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your request is refused, if you find our reply insufficient or if you do not receive a reply in time, you may complain to the Personal Data Protection Board within thirty days of learning of the reply and in any case within sixty days of the date of your request.
Visitors in the European Union
If you are in the European Union and the General Data Protection Regulation (GDPR) applies to your data, please see the relevant section of the Privacy Policy for your rights under the Regulation.
