This notice explains, in line with Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK), how İstanbul Burun Estetiği processes the personal data you share when you contact us, request an appointment or attend a consultation.
Data controller
The data controller is İstanbul Burun Estetiği. [Add legal entity name / tax office and number]
- Address: Yalı Ataköy Sitesi C Blok, Bakırköy, Istanbul, Türkiye
- Phone: 0507 623 25 25
- Email: info@istanbulburunestetigi.com
Personal data we process
- Identity and contact data: name, phone number, email address
- Request and service data: your message in the contact form, preferred contact method, appointment request, consultation notes
- Security data: a hashed value of your IP address, used only to prevent misuse of the contact form
- Health data (special category): processed only during consultation and treatment, to provide the healthcare service, with separate explicit consent and a separate notice. Please do not share health information, photographs or ID numbers through the website contact form.
Purposes of processing
- Replying to your contact and appointment requests and following them up
- Planning and providing consultations and healthcare services
- Meeting legal obligations (patient records, retention required by law)
- Protecting information security and the contact form against misuse
Legal grounds
Your data is processed under Article 5/2 of the KVKK where it is directly related to establishing or performing a contract, necessary to meet a legal obligation, necessary to establish, exercise or protect a right, or necessary for our legitimate interests provided your fundamental rights are not harmed; and on the basis of the explicit consent you give when submitting the contact form. Health data is processed under Article 6 of the KVKK on the basis of your explicit consent or the cases set out in law, by healthcare staff bound by a duty of confidentiality.
How data is collected
Data is collected through the website contact form, phone, WhatsApp, email and face-to-face meetings, by automated and non-automated means.
Transfers
Your personal data is not sold and is not shared with third parties for advertising. It may be transferred, only for the purposes above and as far as necessary, to hosting and email service providers, to public authorities authorised by law (for example the Ministry of Health or courts) and to healthcare institutions we cooperate with where the service requires it. [If the hosting or email provider is located abroad, add the cross-border transfer information and its legal basis under Article 9 of the KVKK]
Retention
Contact form messages are kept for as long as needed to answer and follow up your request. Patient records are kept for the period required by health legislation. At the end of that period data is deleted, destroyed or anonymised. [Add the periods from the clinic's retention and destruction policy]
Your rights under Article 11 of the KVKK
As a data subject you have the right to:
- learn whether your personal data is processed
- request information if it has been processed
- learn the purpose of processing and whether it is used accordingly
- know the third parties to whom data is transferred in Türkiye or abroad
- request correction of incomplete or inaccurate data
- request deletion or destruction under Article 7 of the KVKK
- request that corrections and deletions be notified to third parties to whom data was transferred
- object to a result against you arising from analysis of data exclusively by automated systems
- claim compensation if you suffer damage from unlawful processing
How to apply
You can send your requests, together with information that verifies your identity, in writing to Yalı Ataköy Sitesi C Blok, Bakırköy, Istanbul, or by email to info@istanbulburunestetigi.com. Applications are concluded as soon as possible and within thirty days at the latest, depending on their nature. If the process requires a separate cost, the tariff set by the Personal Data Protection Board may apply. If you are not satisfied with the reply, you may lodge a complaint with the Personal Data Protection Board.
Updates
This notice is updated when needed. Last updated: 5 November 2026. See also our Cookie Policy and Privacy Policy.
This page is general information and should be reviewed by a legal adviser before publication.