This policy explains how your personal data is processed when you visit akifaksoy.com and when you contact us through the site.
1. Data controller
The data controller for your personal data is Op. Dr. Akif Aksoy. Contact details are available on the Contact page.
2. What data is processed?
| Category | Examples | How it is obtained |
|---|---|---|
| Contact data | Name, telephone number, e-mail address | When you provide it (phone, WhatsApp, e-mail) |
| Voluntarily shared health data | Your complaint, previous operations, photographs you send | Only when you share it yourself |
| Technical data | IP address, browser type, pages visited, time of visit | Automatically, through server logs |
| Cookie data | Strictly necessary cookies and any third-party cookies | Through your browser |
Note: This site has no registration, membership or payment function. Card and payment details are never collected.
A warning about health data: health data is special category personal data under the Turkish Personal Data Protection Law (KVKK). Messaging channels (WhatsApp, e-mail, social media) are not secure medical record systems. We recommend sharing detailed health information and clinical photographs during your examination rather than through these channels.
3. Purposes of processing
- Receiving and scheduling your appointment request
- Answering your questions and providing orientation
- Carrying out examination and treatment processes
- Meeting legal obligations, including the keeping of medical records
- Operating the site technically and keeping it secure
Your data is never sold or rented to third parties for marketing purposes.
4. Legal basis
Processing is carried out under the Turkish Personal Data Protection Law No. 6698 (KVKK). For visitors from the European Union, the GDPR (EU 2016/679) is also taken into account.
| Data type | KVKK basis | GDPR equivalent |
|---|---|---|
| Contact data | Art. 5/2-c — performance of a contract; Art. 5/2-f — legitimate interest | Art. 6(1)(b), 6(1)(f) |
| Health data | Art. 6/3 — public health, medical diagnosis and treatment; otherwise explicit consent | Art. 9(2)(h), 9(2)(a) |
| Technical data / server logs | Art. 5/2-ç — legal obligation; Art. 5/2-f — legitimate interest | Art. 6(1)(c), 6(1)(f) |
5. Sharing with third parties
Your personal data is shared only in the following circumstances:
- Hosting provider — to the extent technically necessary to host the site
- Healthcare institutions and laboratories — where your treatment requires it
- Competent public authorities — where there is a legal obligation or a court order
- Messaging platforms — if you correspond via WhatsApp, your messages are also subject to that platform's own privacy policy
6. International transfers
Correspondence conducted through WhatsApp and social media platforms may constitute an international transfer, because those platforms' servers are located outside Turkey. Using these channels is your choice; you may share sensitive information during your examination instead.
7. Retention periods
| Data | Retention period |
|---|---|
| Appointment and contact correspondence | Deleted once the purpose has ended; two years at most |
| Patient medical records | For the period required by applicable health legislation |
| Server logs | For the period required by law |
At the end of the period, data is deleted, destroyed or anonymised.
8. Your rights
Under Article 11 of the KVKK and under the GDPR, you may:
- Learn whether your personal data is being processed
- Request information about such processing
- Learn the purpose of processing and whether the data is used accordingly
- Know the third parties to whom the data is transferred, in Turkey or abroad
- Request correction if the data is incomplete or inaccurate
- Request erasure or destruction
- Request that any correction or erasure be notified to third parties to whom the data was transferred
- Object to an outcome adverse to you arising from automated analysis
- Claim compensation for loss suffered as a result of unlawful processing
You can send your requests to the e-mail address on the Contact page. Requests are answered within the period prescribed by law.
If you consider that your request has not been satisfied, you retain the right to complain to the Turkish Personal Data Protection Authority.
9. Data security
The site is published over HTTPS. Access to personal data is limited to those who need it. That said, no transmission over the internet can be guaranteed to be entirely secure.
10. Children's data
This site is not directed at persons under 18. Applications on behalf of a minor must be made by a parent or legal guardian.
11. Changes
This policy may be updated from time to time. The date it took effect appears in the "last updated" line at the top of the page.