Kurt Clinic values the privacy of visitors to its website and the protection of their personal data. This Privacy Policy explains what information is collected, why and how this information is used, and what choices users have.
1. Scope and Data Controller
This policy applies to the Kurt Clinic website and to the contact and callback request services offered through this website.
Data controller for personal data:
Op. Dr. Mehmet Durmuş Kurt — Kurt Clinic
Yeni Mahalle Mah. Abdülhalik Renda Cd. Hacı Nazım Apt. No:24/1, 34893 Pendik/İstanbul
Email: [email protected]
Phone: +90 555 081 71 65
Health data processed in the course of clinical examination, diagnosis, treatment and patient file processes is subject to broader obligations than this website policy and is addressed separately in the patient privacy notice provided.
2. Information We Collect
When you simply visit the website or contact us, the following information may be processed:
- Your first name, last name, phone number and, optionally, the email address you provide;
- Your callback, contact or appointment request and any correspondence with us;
- IP address, connection time, browser/device information, security and error logs;
- Your cookie preference;
- Analytics or advertising interaction data, only where you have given consent and the relevant tools are active.
Callback form: The callback form on the website collects only your full name and phone number; this information is used solely to respond to your callback request. Form data is not additionally stored in a database on the website.
The callback form on the website is not intended for diagnosis, medical assessment or the submission of health documents. Please do not send test results, reports, prescriptions, medical photographs or detailed health data through the form.
3. Why Do We Use Information?
Purposes for which we may use your information:
- to respond to your contact and callback requests;
- to receive your appointment request and make the necessary arrangements;
- to keep the website secure, stable and accessible;
- to detect misuse, unauthorized access and technical problems;
- to fulfill legal obligations and protect our rights;
- where you have given explicit consent, to measure website use and evaluate advertising/communication performance.
We may use your information for any of these purposes.
Your data is not used in any manner incompatible with the purpose for which it was collected. Non-essential technologies for advertising or analytics purposes are not enabled without your required consent.
4. Legal Bases
Personal data may be processed for the purposes of preparations for, or the performance of a contract relating to, the service you request; the fulfillment of legal obligations; the establishment, exercise or protection of a right; and, provided that your fundamental rights are not harmed, legitimate interests.
For non-essential cookies and tags used for analytics or advertising purposes, we rely on your explicit consent unless another legal processing condition applies. You can later withdraw the consent you have given via the “Cookie Preferences” link.
5. Sharing of Information
Your information is not sold or shared for the purpose of data trading. Data may be shared with:
- server/hosting, email, form, maintenance, backup and information security providers;
- authorized clinic staff and service providers supporting appointment/communication processes;
- legal and financial advisors;
- public institutions or judicial authorities legally authorized to request it.
only to the extent necessary.
The access of these parties to the data is limited to the scope required by their duties and services.
6. Cross-Border Data Transfers
Tools from providers based abroad, such as Google Analytics, Google Ads or Meta Pixel, are not run in the current release as long as no IDs have been entered. If these tools are enabled in the future:
- tags will not be loaded without the required consent;
- the cookie table will be updated with the actual tools and retention periods;
- no data transfer will begin until the required transfer mechanism has been established under the KVKK’s provisions on cross-border transfers.
The full name and phone number submitted through the callback form are processed on the website’s server at the time of submission and forwarded to the clinic’s email account via the Google Workspace email infrastructure. Since the servers of the Google Workspace service provider may be located outside Türkiye, this transmission is carried out within the framework of a transfer mechanism that complies with the KVKK’s provisions on cross-border transfers.
Where hosting, email or other service providers used in the technical infrastructure process data outside Türkiye, the same rules also apply to these providers.
7. Retention Period
Personal data is retained for as long as necessary for the purpose for which it was collected and for the period required by the applicable legislation. Once the purpose and the legal basis cease to exist, it is deleted, destroyed or anonymized, taking into account statutory retention, limitation and evidentiary periods.
Personal data obtained through the callback form is kept for no more than 365 days from the date of the request, for the purposes of responding to the request, handling the communication and, where necessary, being able to demonstrate that the request was recorded. At the end of this period, it is deleted or destroyed, unless a separate legal obligation requires it to be kept for longer.
If a contact or appointment request leads to the establishment of a patient relationship, the related records may be subject to different retention periods that apply to patient records under health legislation.
If a visitor who used the callback form later goes on to have an examination, appointment or treatment, the resulting medical and patient records are kept separately from the form email and are retained in accordance with the retention periods set out in the applicable health legislation; the 365-day period stated for the form email does not apply to these records.
8. Information Security
Kurt Clinic implements technical and administrative measures proportionate to the risk in order to prevent the unlawful processing of and access to personal data and to ensure that data is kept securely. These may include restricting access rights, using secure connections, updates, backups, logging and service provider controls.
To prevent misuse of the callback form, a one-way digest (hash) value derived from the IP address is kept for no more than 24 hours; no third-party CAPTCHA service or tracking cookie is used on the form.
It should be borne in mind that no transmission over the internet is entirely free of risk. For this reason, users should not send sensitive information or documents through the callback form.
9. Cookies and Similar Technologies
The types of cookies, their purposes, retention periods and how to manage your preferences are explained on the Cookie Policy page.
If non-essential analytics or advertising technologies are active, they are disabled by default and run only after the visitor selects “Accept”. Selecting “Decline” does not prevent basic use of the website.
10. Third-Party Links
The website may link to maps, social media, WhatsApp or other third-party websites. The relevant third party is responsible for the data processing practices of services visited through these links. We recommend that you review the privacy information of the relevant service before opening a link.
YouTube videos: The video on the Doctor and MDK Method pages is not loaded from YouTube when the page opens; instead, an image hosted on the website’s own server is displayed. YouTube content is loaded via YouTube’s privacy-enhanced mode (youtube-nocookie.com) only when you press the “Watch Video” button. From that moment, a connection is established with YouTube; your IP address and browser information are transmitted to YouTube (Google), and YouTube’s privacy terms apply.
11. Children’s Privacy
The website is not directed at children. If you believe that a child’s personal data has been submitted without authorization, you can contact us to have it deleted or for any other necessary action.
12. Your Rights and Contact
Your rights under Article 11 of the KVKK and how to submit a request are explained on the KVKK Privacy Notice page.
For general questions about privacy, you can reach us at [email protected] or by phone at +90 555 081 71 65. Formal requests under the KVKK must be submitted using the methods set out in the Privacy Notice.
13. Changes to This Policy
This policy may be updated when the website’s features, the service providers used or the legislation change. The current version and its effective date are published on this page.