Information Text on the Protection and Processing of Personal Data
1. Introduction
1.1. In order to protect the fundamental rights and freedoms of individuals in the processing of personal data, particularly the privacy of private life, and to determine the obligations of natural and legal persons who process personal data, we, as DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ, acting as the Data Controller, are providing information in accordance with Article 10 of the Law on the Protection of Personal Data (KVKK) No. 6698, published in the Official Gazette dated April 7, 2016, and numbered 29677, titled “Obligation of the Data Controller to Inform”.
1.2. As DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ, this document has been prepared to ensure that the personal data of our citizens are processed in accordance with the Constitution of the Republic of Turkey, international agreements on human rights to which our country is a party, and primarily the Law on the Protection of Personal Data (KVKK) No. 6698, and to enable the relevant persons whose data is processed to effectively exercise their rights. All personal data shared with our company may be processed in accordance with the law and in connection with our operational and service purposes, in a limited and measured manner.
2. Definitions
2.1. The concepts of personal data, special categories of personal data, and data processing used in the information text have been used based on the definitions made in KVKK. In KVKK;
2.1.1. Law on the Protection of Personal Data (“KVKK”): The Law on the Protection of Personal Data No. 6698, which entered into force by being published in the Official Gazette on April 7, 2016,
2.1.2. Personal Data: Any information relating to an identified or identifiable natural person,
2.1.3. Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority given by the data controller,
2.1.4. Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system,
2.1.5. Processing of personal data: Any operation performed on personal data, whether by automatic means or otherwise, without being a part of any data recording system, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, takeover, making available, classification, or preventing the use of the data.
3. Principles of Processing Personal Data
3.1. The personal data belonging to the data subject mentioned in Article 4 of KVKK will be processed by the Company, which is the data controller, for the purposes stated below, in accordance with the principles of being processed in accordance with the law and rules of good faith, being accurate and up-to-date when necessary, being processed for specific, clear, and legitimate purposes, being connected, limited, and measured with the purpose for which they are processed, and being kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
4. Purpose of Processing Your Personal Data
4.1. In accordance with Articles 4, 5, and 6 of KVKK, your personal data;
4.1.1. In a manner befitting the law and the principle of good faith,
4.1.2. In a manner that is connected, limited, and measured with the processing purposes,
4.1.3. In an accurate and current manner,
4.1.4. Will be processed for specific, clear, and legitimate purposes and for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
4.2. Your personal data will be processed within the framework of personal data processing conditions and purposes stated in Articles 8 and 9 of Law No. 6698 for the purposes of enabling our business units to carry out the necessary work to benefit you from the products and services offered by our company; recommending the products and services offered by our company to you and your company according to your needs; planning and/or execution of market research activities for the sale and marketing of products and services; planning and/or execution of after-sales support service activities; tracking contract processes and/or legal claims; ensuring the legal, technical, and commercial security of relevant persons in a business relationship; ensuring the execution of our company’s human resources policies, evaluation if you apply for a job, fulfilling our legal and legal obligations if you are our employee; ensuring quality tracking; tracking the supplied products; determining your identity and security when you visit our establishment; contacting you if you request information from our company; execution of this contract if you purchase a product; planning, auditing, and execution of information security processes; creation and management of information technology infrastructure; tracking of finance and/or accounting operations; tracking of legal affairs; planning and execution of business activities; planning and execution of corporate communication activities; determination and implementation of our company’s commercial and business strategies.
5. Transfer of Personal Data
5.1. Your personal data may be transferred to our business partners, suppliers, shareholders, subsidiaries, legally authorized public institutions, and private persons within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, for the purposes of enabling our business units to carry out the necessary work to benefit you from the products and services offered by our company; recommending the products and services offered by our company to you and your company according to your needs; ensuring the execution of our company’s human resources policies; ensuring the legal and commercial security of our company and those who have a business relationship with our company; determining and implementing our company’s commercial and business strategies.
6. Method and Legal Basis for Collecting Personal Data
6.1. Personal data is collected, used, recorded, stored, and processed by our company verbally, in writing, and/or electronically by informing the personal data owners clearly and understandably verbally, in writing, and/or electronically and, when necessary, obtaining their explicit consent, in accordance with the law and rules of good faith, in connection with and limited to the legitimate purposes clearly stated above, within the framework of the principle of proportionality.
6.2. In addition, we assure you that your personal data will not be processed by our company for purposes other than those stated in this information document, will not be transferred to third parties in Turkey and abroad, and will not be stored.
7. Storage and Deletion of Data
7.1. Our company stores the personal data it processes for the periods determined by the legislation, and in cases where no period is specified in the legislation; personal data is stored for the period required by our company’s applications and commercial life customs in connection with the services provided by our company while processing that data, and after this period, only for the period proven to be necessary in practice for the purpose of constituting evidence in possible legal disputes. After the end of the specified periods, the relevant personal data is deleted, destroyed, or anonymized.
8. Rights of the Data Subject
8.1. Data subjects may apply to the Company, which acts as the data controller, and;
8.1.1. Learn whether their personal data is being processed,
8.1.2. Request information about themselves if their personal data has been processed,
8.1.3. Learn the purpose of processing their personal data and whether they are used in accordance with their purpose,
8.1.4. Know the third parties to whom their personal data is transferred domestically or abroad,
8.1.5. Request correction of their personal data in case of incomplete or incorrect processing,
8.1.6. Request the deletion or destruction of their personal data within the framework of the conditions provided for in Article 7 of KVKK No. 6698,
8.1.7. Request notification of the operations carried out pursuant to subparagraphs (d) and (e) of Article 11 of KVKK to third parties to whom their personal data has been transferred,
8.1.8. Object to the occurrence of a result against themselves by analyzing the data processed exclusively through automated systems,
8.1.9. Request compensation for the damage they suffer if the personal data is processed unlawfully.
8.2. To exercise your rights mentioned above, you can send your written request with the necessary information to identify you and your explanations regarding the right you want to use to “turkhairinstitute.com” with a wet signature on the Personal Data Information and Transaction Request Form or to our registered e-mail address “info@drozdemirclinic.com” with a secure electronic signature, mobile signature, or by using the e-mail address previously notified to DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ by the relevant person and registered in the data controller’s system. Applications must be made in Turkish.
8.3. In applications, name, surname and signature if the application is written, T.C. identity number for citizens of the Republic of Turkey, nationality, passport number/identity number for foreigners, residence or workplace address for notification, e-mail address for notification if any, telephone or fax number, and subject of the request must be included.
8.4. In the application you will make to use your rights as a personal data owner and which are mentioned above; the subject you request must be clear and understandable, the subject you request must be related to you or if you are acting on behalf of someone else, you must be specially authorized in this regard and your authority must be documented, the application must include identity and address information, and documents proving your identity must be attached to the application.
8.5. In this context, your applications will be finalized as soon as possible and at the latest within 30 days. If the response to the relevant person’s application is to be given in writing, no fee is charged for up to ten pages. A transaction fee of 1 TL may be charged for each page exceeding ten pages. If the response to the application is given on a recording medium such as a CD or flash memory, the fee that can be requested by DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ cannot exceed the cost of the recording medium.
Privacy Policy
Last Update Date: 19-February-2025
Effective Date: 19-February-2025
This Privacy Policy is about the collection, use, and disclosure of your information when you use our website (https://drozdemirclinic.com/) by DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ, Mecidiyeköy Mah. Kervan Geçmez Sk. Osman Keçeli İş Merk. No:3 İç Kapı No:23 Şişli İSTANBUL, e-mail: info@drozdemirclinic.com, phone: +90 545 115 57 23. (“Service”). By accessing or using the Service, you consent to the collection, use, and disclosure of your information in accordance with this Privacy Policy. Similarly, if you do not consent, please do not access or use the Service.
We may change this Privacy Policy at any time without prior notice to you and will publish the revised Privacy Policy on the Service. The revised Policy will take effect 180 days after the publication of the revised Policy on the Service, and your continued access to or use of the Service after this period will constitute your acceptance of the revised Privacy Policy. Therefore, we recommend that you review this page periodically.
Information We Collect:
We will collect and process the following personal information about you:
- Name
- Mobile
How We Use Your Information:
We will use the information we collect about you for the following purposes:
- Marketing/Promotion
- Collecting customer feedback
- Support
If we want to use your information for any other purpose, we will ask for your consent and will use your information only after receiving your consent and then, only for the purpose(s) for which consent was given, unless otherwise required by law.
Storage of Your Information:
We will store your personal information for 365 Days or as long as we need it to fulfill the purposes detailed in this Privacy Policy. We may need to keep certain information for longer in accordance with applicable laws for record-keeping/reporting purposes or for other legitimate reasons such as enforcement of legal rights, fraud prevention, etc. Anonymous information that no longer identifies you (directly or indirectly) and aggregated information may be stored indefinitely.
Your Rights:
Subject to applicable laws, you may have the right to access and correct or delete your personal data, or obtain a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information with another organization, withdraw any consent you’ve given us to process your personal information, file a complaint with a legal authority, and other rights that may be relevant under applicable laws. To exercise these rights, you can write to us at info@drozdemirclinic.com. We will respond to your request in accordance with applicable laws.
Please note that if you do not allow us to collect or process the required personal information or if you withdraw permission to process the same information for the required purposes, you may not be able to access or use the services for which your information was requested.
Cookies etc.
For more information on how we use these and your choices regarding these tracking technologies, please refer to our Cookie Policy.
Security:
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse, or unauthorized alteration of your information under our control. However, given inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.
Complaint / Data Protection Officer:
If you have any questions or concerns regarding the processing of your information that we hold, please contact our Complaint Officer at DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ, Mecidiyeköy Mah. Kervan Geçmez Sk. Osman Keçeli İş Merk. No:3 İç Kapı No:23 Şişli İSTANBUL, email: info@drozdemirclinic.com. We will address your concerns in accordance with applicable laws.
GDPR Policy
Effective Date: 19.02.2025
DROZDEMİR CLİNİC SAĞLIK TURİZM TİCARET LİMİTED ŞİRKETİ values the privacy of its users. This policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) of the European Union.
1. Collection and Use of Personal Data
DROZDEMİR CLİNİC collects personal data only as necessary to provide our services. We collect the following types of data:
- Personal Information: Name, email address, phone number, and billing details when making a booking or inquiry.
- Usage Data: Information on how you interact with our website, such as browsing activity and pages visited, collected through cookies and other tracking technologies.
Your personal data is used for the following purposes:
- To process bookings and provide our services
- To communicate with you about your bookings, inquiries, and promotions
- To improve our services based on user feedback and behavior
2. Legal Basis for Processing
Under GDPR, we rely on the following legal bases for processing your personal data:
- Contractual necessity: The processing is required for the performance of a contract with you (e.g., booking a treatment).
- Legitimate interests: We process data for improving our services and communicating offers, where we have a legitimate interest to do so.
- Consent: We may ask for your consent to process certain data, and you can withdraw this consent at any time.
3. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. When personal data is no longer needed, it will be securely deleted.
4. Data Sharing
DROZDEMİR CLİNİC does not sell or share your personal data with third parties, except in the following cases:
- Service providers: We may share data with trusted third parties (such as payment processors) who assist us in delivering our services.
- Legal obligations: If required by law, we may disclose personal data to legal authorities or regulatory bodies.
5. Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. While we make every effort to protect your data, no method of data transmission over the Internet is 100% secure.
6. Your Rights under GDPR
As a data subject, you have the following rights under the GDPR:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request corrections to inaccurate or incomplete data.
- Right to erasure: You have the right to request that we delete your personal data, subject to certain conditions.
- Right to object: You have the right to object to the processing of your personal data in certain circumstances.
- Right to data portability: You can request your personal data in a structured, commonly used, and machine-readable format.
- Right to withdraw consent: If you have given us consent to process your data, you may withdraw it at any time.
If you wish to exercise any of these rights, please contact us using the contact details below.
7. International Data Transfers
Your personal data may be transferred and stored in countries outside the European Economic Area (EEA). In such cases, we ensure that your data is protected by appropriate safeguards, such as using the Standard Contractual Clauses (SCCs) for data transfers.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your user experience, analyze site usage, and offer personalized services. You can manage cookie preferences through your browser settings.
9. Contact Information
If you have any questions, concerns, or requests regarding this policy or our data processing practices, please contact us at:
- Email: info@drozdemirclinic.com
- Phone: +90 545 115 57 23
- Address: Mecidiyeköy Mah. Kervan Geçmez Sk. Osman Keçeli İş Merk. No:3 İç Kapı No:23 Şişli İSTANBUL
This GDPR Privacy Policy was last updated on 19.02.2025. We may update this policy from time to time to reflect changes in our practices or legal requirements.
