Privacy Notice and Data Protection

This is an English translation provided for information only. In case of any discrepancy, the Turkish version of this notice prevails.

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Fzt. Aydın Ali, at Kelebek Sk. No: 12DA, Fethiye Mahallesi, 16140 Nilüfer/Bursa. Contact: 0538 698 45 15 — aydinsaatli@gmail.com.

2. What data do we collect through this website?

The appointment form on this site is deliberately designed not to collect health data. Only the following is taken through the form:

• First and last name
• Phone number
• Email address (optional)
• Your preferred appointment date and time
• The service you are requesting
• An optional short note (you are asked not to write health information)
• The date and time of the request and of your explicit consent

Special categories of personal data — the details of your complaint, your diagnosis or your medical history — are not collected through the website. Those are discussed only by phone or face to face at the clinic.

3. Why do we process your data?

• To record your appointment request and contact you
• To schedule, confirm or, if necessary, change your appointment
• To send you an email confirming that your request was received
• To measure and improve the quality of our service
• To meet obligations arising from applicable legislation

4. Legal basis

Data from the appointment form is processed on the basis of your explicit consent (KVKK art. 5/1). You must tick the consent box before the form can be sent; without consent the form cannot be submitted. Depending on the situation, performance of a contract and compliance with legal obligations may also apply.

5. Who is your data shared with?

Your data is never sold or transferred to third parties for marketing. Only the following service providers are used to run the site:

• Vercel — publishing and serving the website
• Supabase — the database where appointment records are kept
• Resend — delivery of notification emails
• Google Maps — the map on the contact page (a request is sent to Google only when the map is displayed)

[PLACEHOLDER] The servers of these providers may be located abroad; add your statement on international data transfer here.

6. Retention period

[PLACEHOLDER — e.g. appointment requests are kept for ...... months from the date of the request and are then deleted or anonymised.] Where legislation requires a longer retention period, that period applies.

7. Your rights

Under KVKK art. 11, by applying to the data controller you have the right to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose and whether it is used in line with that purpose,
• Know the third parties to whom it is transferred, in Turkey or abroad,
• Request correction if it is incomplete or inaccurate,
• Request its deletion or destruction,
• Request that such action be notified to third parties it was transferred to,
• Object to an outcome against you produced by analysis through automated systems,
• Claim compensation if you suffer loss due to unlawful processing.

You can send your requests to aydinsaatli@gmail.com or in writing to Kelebek Sk. No: 12DA, Fethiye Mahallesi, 16140 Nilüfer/Bursa. Applications are concluded within 30 days at the latest.

8. Cookies

This site places no cookies on its visitors. No advertising, tracking or analytics cookies (such as Google Analytics) are used. The only cookie is the session cookie created when clinic staff log in to the management panel; that cookie is strictly necessary for the service to work and does not require consent.

Fonts, icons and all files on the site are served from our own server; opening a page sends no request to any third-party server.

Map: The Google Maps component on the contact page does not load automatically. It loads only when you press "Show map"; from that moment Google's own cookie and privacy policy applies. If you choose not to load the map, no connection with Google is made. This is why the site has no cookie consent banner.

Note: if Google Analytics, Meta Pixel or a similar tracking tool is added later, this changes; a cookie consent banner would then be required and this section would need updating.

9. Security

The site is served entirely over HTTPS. Appointment records can be viewed only by authorised clinic staff through a password-protected management panel.

10. Changes

This notice may be updated when necessary. The current version is always published on this page. Last updated: [UPDATE DATE].