PERSONAL DATA PROTECTION NOTICE

1. DATA CONTROLLER

Under the Personal Data Protection Law No. 6698 ("PDPL"), your personal data is processed by Dt. Emrah Çuçanlar / Diş Tabibi Clinic as the data controller, for the purposes described below.

2. PERSONAL DATA PROCESSED

The personal data processed by our clinic includes:

• →Identity information (name, surname, date of birth, ID number)
• →Contact information (phone number, email address, address)
• →Health data (medical history, treatment information, laboratory results)
• →Appointment and visit information
• →Payment and billing information
• →Website usage data (via cookies)

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed for the following purposes:

• →Provision of dental health services and management of treatment processes
• →Creating, tracking, and reminding appointments
• →Fulfillment of legal obligations (Social Security, health legislation)
• →Patient safety and medical emergency management
• →Communication activities (appointment notification, information)
• →Accounting and billing processes
• →Improving the website experience

4. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to relevant public institutions and health authorities (Ministry of Health, Social Security Institution), software and infrastructure providers we receive services from (as data processors), and other health institutions for medical reference and consultation purposes, within the framework of legal obligations. These transfers are carried out in accordance with Articles 8 and 9 of the PDPL.

5. METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION

Your personal data is collected through clinic registration forms, the appointment system, the website contact form, phone calls, and email. The legal bases for processing are: performance of a contract, legal obligation, legitimate interest, and your explicit consent (especially for special categories of personal health data).

6. YOUR RIGHTS

Under Article 11 of the PDPL, you have the following rights:

• ✓To learn whether your personal data is being processed
• ✓To request information if it is being processed
• ✓To learn the purpose of processing and whether it is used in accordance with its purpose
• ✓To know the third parties to whom data is transferred domestically or abroad
• ✓To request correction if data is incomplete or incorrectly processed
• ✓To request deletion under the conditions stipulated in Article 7 of the PDPL
• ✓To object if processing is carried out exclusively by automated systems
• ✓To request compensation for damages

To exercise your rights, you may apply in writing to dt.emrahcucanlar@gmail.com

7. DATA SECURITY

As a clinic, we take technical and administrative measures to ensure the security of your personal data. Your data is protected against unauthorized access, modification, disclosure, or destruction.