Last updated: 25 October 2026
This notice has been prepared to inform you, under Article 10 of the Republic of Türkiye’s Law No. 6698 on the Protection of Personal Data (“the Law”), of the purposes for which your personal data are processed, the legal grounds for processing and how they are processed.
1. Data controller
Your personal data are processed by Op. Dr. Süleyman Kumbasar as data controller.
- Address: Bahçelievler Mah. D-100 Yan Yol Cad. No: 14/B, Metroport Busidence, Kat 8, No: 810, 34180 Bahçelievler / Istanbul (Türkiye)
- Email: drsuleymankumbasarkbb@gmail.com
- Phone and WhatsApp: +90 545 774 64 84
2. Personal data processed
- Identity and contact: first name, surname, phone number, email address.
- Health data (special category): the symptoms, photos and test and report information you share when requesting an appointment or information; records created during consultation and treatment.
- Visual records: before and after photos. These images are only published on the site with your written consent.
- Transaction security: IP address, browser and device information, server logs.
- Marketing and measurement: only if you consent, information about visits and ad interactions obtained through cookies.
3. Purposes of processing
- Receiving and responding to your appointment and information requests,
- Carrying out consultation, medical diagnosis, treatment and follow-up processes,
- Contacting you and sending appointment reminders,
- Meeting legal obligations to keep records, provide information and retain data,
- Ensuring the site operates securely,
- If you consent, statistically measuring use of the site and the effectiveness of ads.
4. Legal grounds
Your personal data are processed on the legal grounds set out in Article 5(2) of the Law: that processing is directly related to the formation or performance of a contract, that it is necessary for the data controller to comply with a legal obligation, and the data controller’s legitimate interest, provided that it does not harm your fundamental rights and freedoms.
Under Article 6(3) of the Law, your health data are processed by the physician, who is bound by professional confidentiality, for the purpose of providing medical diagnosis, treatment and care services. Your explicit consent is obtained for any processing outside this scope.
Analytics and marketing cookies are only used on the basis of your explicit consent. You can withdraw your consent at any time using the “Cookie preferences” link at the bottom of the page.
5. How data are collected
Your personal data are collected, wholly or partly by automated means, through the appointment form on the site, WhatsApp, phone and email, in person at the practice and through the cookies used on the site.
6. Transfers
Your personal data may be transferred, limited to the purposes above and to the extent necessary:
- to public institutions and organisations authorised by law to request information,
- to the healthcare facility where your treatment will take place,
- to the hosting, customer relationship management (appointment form) and communication service providers we use.
As the servers of some of the providers we use (e.g. Google, Meta / WhatsApp, Kommo) are located outside Türkiye, data processed through these services may be transferred abroad. These transfers are made in accordance with Article 9 of the Law: on the basis of appropriate safeguards where these exist and, where the transfer is occasional, on the basis of your explicit consent. Transfers made through analytics and marketing cookies only take place if you accept those cookies.
7. Retention period
Your personal data are retained for the periods set out in the applicable legislation and, where no period is set, for as long as the purpose of processing requires. When the period ends, your data are deleted, destroyed or anonymised.
8. Your rights
Under Article 11 of the Law, you have the right to:
- find out whether your personal data are processed,
- request information about this if they have been processed,
- find out the purpose of processing and whether data are used in line with that purpose,
- know the third parties, in Türkiye or abroad, to whom they have been transferred,
- request correction if they have been processed incompletely or incorrectly,
- request their deletion or destruction under the conditions in Article 7 of the Law,
- request that correction, deletion or destruction be notified to the third parties to whom the data were transferred,
- object to an outcome against you resulting from analysis exclusively by automated systems,
- claim compensation for damage suffered as a result of processing in breach of the Law.
9. Applications
You can send requests concerning these rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to the address above or to drsuleymankumbasarkbb@gmail.com with information that allows us to verify your identity. Your request will be resolved free of charge within 30 days at the latest. If the process involves an additional cost, the fee set by Türkiye’s Personal Data Protection Authority may be charged.