Privacy Notice (KVKK Information Text)

Data Controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Uzm. Dt. Emre Karakaya as the data controller within the scope described below.

Contact: Sırakapılar Mah. Saltak Cad. No:29, Merkezefendi / Denizli · Email: info@dtemrekarakaya.com

Personal Data Processed

Identity and contact data: the full name, phone number and (optional) email address you share on the contact form or when you write to us.

Request data: the treatment you are interested in and the content of the message you send. Your interest in a particular treatment may be sensitive in nature to the extent that it may indicate a health condition; you are not obliged to share this information in the form, and if you do, it is processed on the basis of the explicit consent you give via the consent box in the form.

Oral and dental health and treatment data (special-category health data): should you attend our clinic — examination, diagnosis, the dental and periodontal treatments performed, your oral-dental health history and, where needed, radiographic/imaging records. These clinical records are kept at our practice within the scope of the relevant health legislation and the KVKK.

Website data: only the contact and request information above is processed through this site. It is recommended that you share detailed health information during your examination rather than via the website form.

Technical data: when you visit the site, information such as IP address, date-time and browser type may be kept in the standard server logs of the hosting infrastructure.

Analytics data (only with your explicit consent): when you accept, the addresses of the pages you view, time spent on the site, on-site interaction events, the referring source, device and browser type, your IP address (transmitted to Google in order to derive approximate location) and the pseudonymous visitor/device identifier stored in a cookie on your device are processed via Google Analytics 4. If you do not consent, this data is never collected. The server logs mentioned under technical data are independent of this.

Purposes of Processing Personal Data

Responding to and managing your contact and appointment requests.

Providing oral-dental health, dentistry and periodontology services, planning and following up treatment processes, and keeping patient records.

Providing information about the treatments offered and the process.

Fulfilling legal obligations and keeping clinical records in line with legislation.

If you consent, measuring statistics about how the site is used and improving the content.

Legal Basis and Method of Collection

Responding to your contact and appointment requests and conducting the related correspondence relies on the establishment or performance of a contract and the data controller's legal obligation under Article 5(2) of the KVKK.

Special categories of health data concerning oral and dental health are processed under Article 6(3) of the KVKK for the protection of public health and the conduct of medical diagnosis, treatment and care services, by the dentist who is bound by a duty of confidentiality. Health information you send voluntarily through the website, and the treatment of interest you select in the form, rely on the explicit consent you give by ticking the consent box in the form.

Fulfilling legal obligations and keeping clinical records in line with legislation relies on the legal obligation basis under Article 5(2) of the KVKK.

Measuring statistics about the use of the site and improving the content relies SOLELY on your explicit consent under Article 5(1) of the KVKK. No legitimate interest basis is relied upon for this purpose; if you do not consent, this processing never takes place and you can continue using the site with all its features.

Method of collection: your data is collected through the information you enter voluntarily on the site (contact form) and the messages you send via WhatsApp or email; if you consent, through cookies and similar automated means; and, if you visit the clinic, verbally and in writing during the examination.

Transfer of Data

When you send your request through channels such as WhatsApp or email, your message is transmitted through the infrastructure of the relevant service providers (e.g. WhatsApp/Meta or your email provider). As the servers of these providers may be located abroad, your data may be processed abroad.

Your clinical records may be transferred, only where your treatment requires it and in accordance with legislation, to authorised health institutions and laboratory/imaging (e.g. pathology, radiology) service providers, as well as to authorised public bodies within the scope of legal obligations.

The Google Maps service embedded on the site loads Google's infrastructure when the map is displayed. Your personal data is not shared with third parties for marketing purposes, apart from the operation of the stated channels and legal obligations.

If you consent to analytics cookies, Google Analytics 4 is loaded and measurement data is transferred to the infrastructure of Google Ireland Limited (Ireland) and its group company Google LLC (United States of America). This transfer abroad relies on the explicit consent you give for analytics cookies; a single consent covers both the measurement itself and the transfer of data abroad. Information on possible risks: the data is processed abroad under a legal regime different from the protection in Türkiye; it may be subject to requests from competent authorities under the legislation of that country, and exercising your rights may become more difficult compared with processing within Türkiye. If you do not consent, this transfer never takes place.

Cookies and Analytics Tools

This site is published as static pages; since there is no sign-in, cart or profile functionality, no essential cookie is used for marketing or tracking purposes. Only your cookie preference is stored on your device in the browser's local storage (localStorage, `dtk-cookie-consent`); this record is functional in nature, is written even if you decline so that your preference is remembered, and contains no data identifying you. When you visit, the hosting infrastructure also keeps standard server logs.

Analytics cookies are loaded only with your explicit consent. When you accept, Google Analytics 4 is activated; the addresses of the pages you view, time spent on the site, on-site interaction events, the source you arrived from, device and browser type, and approximate location derived from your IP address (country/city level) are processed. Your IP address is transmitted to Google for this derivation. These tools also place cookies on your device containing a pseudonymous visitor/device identifier that distinguishes you across sessions. Unless you consent, THESE TOOLS are never loaded and no request is sent from your browser to Google for these tools. For embedded map and video content, see the paragraph below.

Cookies used: `dtk-cookie-consent` (first party, browser local storage, stores your cookie preference, remains until you delete it); `_ga` and `_ga_*` (Google, analytics, visitor/device distinction, typical lifetime 2 years); third-party cookies placed by Google Maps in its own context when you choose to display the map. Event data collected on Google's side is kept for the retention period defined in the Google Analytics property, which is 14 months; at the end of this period it is deleted automatically by Google.

The legal basis for analytics cookies is your explicit consent under Article 5(1) of the KVKK. Because these tools run on Google infrastructure, measurement data is transferred abroad; the details and recipients of the transfer are set out in the "Transfer of Data" section. Measurement covers page addresses, and on this site page addresses may reflect which treatment you are interested in. For that reason no identifying user identifier (User-ID) is used in measurement, the data is not linked to your name or contact details, no profiling for advertising or marketing is carried out and no advertising cookies are used.

Embedded map and video content also works on a click-to-load basis: Google Maps and YouTube infrastructure is loaded only when you choose to open that content. When you open it, your IP address is shared with the relevant provider; as long as you do not open it, no such sharing takes place. Video cover images are served from our own server, so simply viewing a page does not by itself cause data sharing with YouTube. Your choice for this content is not stored: you must open it again on each page view, so consent applies only to the session in which you pressed that button and only to that content.

You can change your decision at any time: use the "Cookie Preferences" link at the bottom of the page to withdraw or grant consent again. When you withdraw consent, the analytics tools are stopped, analytics cookies placed on this site's domain are deleted and the page reloads. Withdrawal applies going forward: data collected and transferred to Google before withdrawal is not deleted by this action; you may request its deletion under your rights below via info@dtemrekarakaya.com. For records Google keeps on its own domains you need to use your browser settings.

Retention Period

This website does not use a server-side database. When you submit the form, your information is not collected or stored on the site's servers; the generated message is sent by you through your own WhatsApp or email application.

The oral-dental health and treatment records kept at our clinic are retained for the minimum periods stipulated by the relevant health legislation.

After you get in touch, the data you share with us is processed for the period required by the purpose of processing and within the retention periods stipulated in the relevant legislation; when the purpose no longer exists, it is deleted, destroyed or anonymised.

Analytics cookies are stored persistently on your device: the typical lifetime of the `_ga` and `_ga_*` cookies is 2 years. When you withdraw your consent, analytics cookies on this site's domain are deleted; you can also delete them at any time via your browser settings. Event data collected on Google's side is kept for the retention period defined in the Google Analytics property, which is 14 months; at the end of this period it is deleted automatically by Google. The local storage record holding your cookie preference remains on your device until you delete it.

Your Rights as a Data Subject (KVKK Art. 11)

Under KVKK Art. 11, you have the right to: learn whether your personal data is processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with that purpose, know the third parties to whom it has been transferred, request its correction if it has been processed incompletely or incorrectly, request its deletion or destruction, and demand compensation if you suffer damage due to unlawful processing.

To exercise your rights, you can send your requests to info@dtemrekarakaya.com. You also reserve the right to lodge a complaint with the Personal Data Protection Board (Kurul).

You have the right to request the correction of your personal data if it has been processed incompletely or inaccurately, its erasure or destruction if it has been processed contrary to the relevant legislation, and to request that the actions taken in this respect be notified to the third parties to whom your data has been transferred.

You have the right to object to a result against you arising from the analysis of your processed data solely through automated systems. The analytics measurement on this site is an automated analysis; it is not used to produce any individual decision about you.

You may submit your request via info@dtemrekarakaya.com or, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to our clinic address. Your application should include your name and surname, your signature if it is in writing, your contact details and the subject of your request. Your request will be concluded as soon as possible and within thirty days at the latest. If you do not find the response satisfactory, you may lodge a complaint with the Personal Data Protection Board (Kurul).