1. Data Controller

Within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller responsible for personal data processed through this website and within the activities of the private medical practice is:

Dr. Alem Sultan Bayındır
Private Medical Practice
Konyaaltı, Antalya, Türkiye
Address: Liman Mahallesi 32 Sokak No 2 Peker İş Merkezi Kat 4 Daire 12
Email: sultan@sudeya.com
Telephone / WhatsApp: +90 533 740 1968

This notice explains the purposes and legal grounds for processing personal data, the methods by which personal data may be collected, the circumstances in which data may be transferred, and your rights under applicable personal data protection legislation.

2. Personal Data That May Be Processed

Depending on your interaction with our website and private medical practice, the following categories of personal data may be processed:

• Identity and contact information: name, surname, telephone number, email address and other contact information voluntarily provided by you.
• Appointment and communication information: appointment requests, communication preferences, enquiries and message content.
• Patient and health information: where necessary for the provision of healthcare services, medical history, information relating to planned or completed procedures, physician assessments and relevant medical records.
• Website and transaction security information: IP address, technical logs, security records, cookie preferences and information relating to website use.
• Feedback information: comments, suggestions and feedback voluntarily provided through patient satisfaction surveys or contact forms.

Health information constitutes special category personal data under the KVKK and is processed subject to the applicable requirements governing special category personal data.

3. Purposes of Processing Personal Data

Depending on the relevant processing activity, personal data may be processed for purposes including:

• Receiving and managing appointment requests;
• Managing patient communications;
• Planning and providing healthcare services;
• Conducting medical assessment, treatment and follow-up processes;
• Creating and maintaining patient records;
• Providing information concerning requested services;
• Fulfilling applicable legal and regulatory obligations;
• Responding to lawful requests from authorized public authorities;
• Maintaining website and information security;
• Operating necessary website functionality;
• Evaluating patient feedback and improving service processes.

Personal data is processed only to the extent necessary for the relevant purpose and in accordance with applicable legislation.

4. Legal Grounds for Processing

Personal data is processed on the basis of the applicable legal grounds set out under Articles 5 and, where special category personal data is concerned, Article 6 of the KVKK.

Depending on the relevant processing activity, these grounds may include processing expressly provided for by law, compliance with legal obligations, establishment, exercise or protection of a legal right, legitimate interests where applicable and where the fundamental rights and freedoms of the data subject are not adversely affected, and explicit consent where legally required.

Health data and other special category personal data are processed in accordance with the specific conditions applicable to such data under Article 6 of the KVKK.

5. Methods of Collecting Personal Data

Personal data may be collected electronically or physically through:

• Contact and feedback forms available on this website;
• Telephone communications;
• Email communications;
• WhatsApp communications;
• Face-to-face consultations;
• Appointment and patient admission processes;
• Medical examination and treatment processes;
• Cookies and necessary technical website records.

6. Transfer of Personal Data

Where permitted by applicable legislation and where necessary for the relevant processing purpose, personal data may be transferred to authorized public institutions and authorities, legally authorized recipients and service providers used for the operation of the private medical practice.

Any transfer of personal data is limited to the extent required for the relevant purpose and is carried out in accordance with applicable personal data protection legislation.

7. International Transfer of Personal Data

Certain information technology, hosting, communication, analytics or other third-party services used in connection with this website or our communication processes may involve systems or service providers located outside Türkiye.

Where personal data is transferred outside Türkiye, such transfers are carried out subject to the requirements and safeguards applicable under Article 9 of the KVKK and other applicable legislation.

8. Retention of Personal Data

Personal data is retained for the periods required under applicable legislation or for as long as necessary for the purposes for which the data was processed.

Where the conditions requiring processing cease to exist, personal data is deleted, destroyed or anonymized in accordance with applicable legislation and relevant retention and disposal requirements.

9. Data Security

Appropriate administrative and technical measures are implemented according to the nature of the personal data processed in order to help prevent unlawful processing, unauthorized access and unlawful disclosure, and to support the secure storage of personal data.

Additional safeguards are applied where appropriate to special category personal data, including health information.

10. Cookies and Website Technologies

Our website may use cookies and similar technologies that are necessary for website operation and security and, where permitted by your preferences, for functionality and statistical or analytical purposes.

You can manage optional cookie preferences through the consent management panel available on this website.

For further information, please review our Cookie Policy .

11. WhatsApp and Electronic Communications

If you contact us through WhatsApp, email or another electronic communication channel, the information you voluntarily provide may be processed for the purpose of responding to your enquiry, managing your appointment request and maintaining necessary communication with you.

12. Patient Feedback

Information voluntarily provided through our patient satisfaction or feedback forms may be used to evaluate patient experience and improve our service processes.

Please do not include diagnoses, detailed medical history, identification numbers, financial information or other sensitive personal information in general feedback forms unless specifically required.

13. Your Rights Under the KVKK

Subject to the conditions set out in Article 11 of the KVKK, you may apply to the data controller regarding your personal data and exercise the rights provided under applicable legislation, including:

• Learning whether your personal data is being processed;
• Requesting information if your personal data has been processed;
• Learning the purpose of processing and whether your personal data is being used in accordance with that purpose;
• Learning the third parties to whom your personal data has been transferred domestically or internationally;
• Requesting correction of incomplete or inaccurate personal data;
• Requesting deletion or destruction of personal data where the applicable legal conditions are satisfied;
• Requesting notification of applicable correction, deletion or destruction operations to third parties to whom the data has been transferred;
• Objecting to a result arising against you through analysis of processed data exclusively by automated systems;
• Requesting compensation where you suffer damage as a result of unlawful processing of personal data.

14. Applications and Contact

Requests concerning your rights under the KVKK may be submitted to the data controller in accordance with the procedures prescribed under applicable legislation.