Personal Data Protection & Processing Clarification Text

1. Data Controller

In accordance with KVKK, the data controller is:

StudiÖzgür Ağız ve Diş Sağlığı Polikliniği Tic. Ltd. Şti.
Halaskargazi Caddesi, Selamet Apartmanı
No: 93, Kat: 7, Daire: 13
Şişli / İstanbul 34380
KVKK contact: studiozgur@proton.me
Website: www.studiozgur.com

2. Categories of Personal Data Processed

Depending on the healthcare service provided, the following categories of personal data may be processed:

a) Identity Data

Name, surname, nationality, ID or passport number, date and place of birth.

b) Contact Data

Telephone number, email address, physical address.

c) Health Data (Sensitive Personal Data)

Medical history, diagnosis, treatment plans, radiographic images, laboratory results, intraoral photographs, clinical records, prescriptions, appointment data, and treatment follow-up documentation.

d) Financial Data

Billing records and payment information strictly limited to service execution.

e) Digital Data

IP address, website usage logs, cookie data (non-identifying unless required by law).

3. Purposes of Processing Personal Data

Personal data is processed for purposes including but not limited to:

  • Delivery of healthcare services
  • Medical diagnosis, treatment, and follow-up
  • Legal and regulatory compliance
  • Appointment management
  • Patient communication and continuity of care
  • Protection of public health
  • Fulfillment of professional and ethical obligations

Marketing-driven, pressure-based, or unrelated use is strictly excluded.

4. Legal Grounds for Processing Personal data is processed based on:

Personal data is processed based on:

  • Explicit consent where legally required
  • Legal obligations under healthcare regulations
  • Necessity for medical diagnosis, treatment, and follow-up
  • Legitimate interests that do not override fundamental rights and freedoms

5. Data Retention

Personal data is retained only for the period required by:

  • Applicable healthcare legislation
  • Professional liability requirements
  • Legitimate operational needs

Upon expiration, data is securely deleted, destroyed, or anonymized.

6. Rights of Data Subjects

Rights of Data Subjects

  • Learn whether their data is processed
  • Request access and correction
  • Request deletion where legally applicable
  • Object to unlawful processing
  • Request compensation for damages

Requests are accepted exclusively via:
studiozgur@proton.me