Data controller
The data controller is Op. Dr. Onur Serin. Address: Güzeloba Mahallesi, 2107 Sokak No:3, Tugay Apartmanı, Daire:3, 07230 Muratpaşa / Antalya, Türkiye. Email: bilgi@onurserin.com. Telephone: .
Data and collection methods
Website requests may generate technical records containing an IP address, request time, requested page and browser/connection information. When you contact the practice, the data received includes the name, telephone number, email, appointment request and correspondence you provide, and health information or photographs if you send them. Collection occurs electronically through the server, telephone, email and messaging, by wholly or partly automated means and within the relevant record systems. The current pages have no contact form or file-upload field.
Purposes and legal grounds under Turkish law
- Website operation and security: Necessary technical connection and log data is assessed under the legitimate-interest condition in KVKK Article 5(2)(f), subject to protecting your rights.
- Requests and appointments: Contact and request details are processed to answer your request and plan a healthcare service insofar as directly necessary to enter into or perform a contract, under Article 5(2)(c).
- Clinical assessment and follow-up: Necessary health information and clinical photographs are processed for diagnosis, treatment and care by persons under a duty of confidentiality, under Article 6(3)(e).
- Legal obligations or claims: Mandatory records and disclosures are assessed under Articles 5(2)(a), 5(2)(ç) and, where applicable, 6(3)(b); data necessary for specific legal claims under Articles 5(2)(e) and 6(3)(d).
These grounds are not general permission for advertising, publishing images or optional recording of a consultation. Where separate consent is necessary for another purpose, it must be considered separately from this notice.
Recipients and providers
The website and business email use hosting services. The hosting/email provider processes data needed for technical operation and delivery of messages. Access within the practice must be limited to duties and necessity. Necessary data may be shared with the relevant doctor or healthcare institution for healthcare, and with competent public or judicial/administrative authorities where a legal basis and necessity exist. Each disclosure requires its own purpose and legal basis.
WhatsApp and international transfers
WhatsApp is a third-party service separate from this website. Its messaging infrastructure and any cloud backup may involve processing or access outside Türkiye. Before sending health information or photographs, clarify the appropriate sharing method with the practice. Do not send unnecessary identity documents or information about other people.
Where a transfer abroad occurs, the conditions applicable to that specific transfer under KVKK Article 9 must be met and relevant information must be provided. Visiting this site, clicking a WhatsApp link or reading this notice does not provide general consent to international transfers.
WhatsApp messages and photographs received by the practice are stored in the memory of the phone used for communication. If cloud backup is enabled, a copy of these data may also be stored in the cloud. The cloud service, storage location and backup settings require separate assessment; storage on a phone does not mean that no copy exists elsewhere.
The platform’s privacy information applies to WhatsApp’s own data processing activities. This does not remove the practice’s statutory duties concerning transparency, data security and other obligations for the personal data it obtains and processes. This information does not waive patients’ statutory rights or exclude the practice’s legal responsibility.
Retention and deletion
The need to retain data is assessed by data category, service purpose, applicable record-keeping obligations and specific legal claims. Data should not be retained indefinitely merely because it might be useful later. Where the grounds for processing and legal retention obligations have ended, deletion, destruction or anonymisation applies. This website and communications notice does not replace the detailed information required for clinical patient records.
Rights and requests
For your rights under KVKK Article 11, see the Turkish authority’s explanation. Send a written request to the address above, or email bilgi@onurserin.com from an address previously notified to and registered with the practice. Necessary, proportionate identity verification may be requested. Other statutory application methods remain available.
Requests are handled as soon as possible and within 30 days under Turkish law, generally free of charge. Statutory charges for additional costs and your right to complain to the competent authority remain available. Other rights under legislation applicable to you are not restricted by this notice.