
Effective Date:[01/10/2025]
Dr. Ferit Bayakır Clinic (“Clinic”, “we”, “our”) values your privacy and is committed to protecting your personal data in compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the European General Data Protection Regulation (GDPR).
This policy explains how we collect, use, and protect your personal data when you contact us through our website, social media, or lead forms.
1. Data We Collect
We may collect the following categories of personal data:
-
Identity information : name, surname, date of birth, nationality
-
Contact details : phone number, WhatsApp, email, country of residence
-
Medical information : health-related notes voluntarily shared for consultation purposes (eg aesthetic preferences, surgery history)
-
Visual data : photographs, videos provided for medical evaluation
-
Technical data : IP address, browser information, cookies (see Cookie Policy)
2. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
-
Providing medical consultation and treatment planning
-
Contacting you regarding your requests and questions
-
Preparing and presenting medical tourism packages (surgery, accommodation, transfer)
-
Compliance with legal obligations (health authorities, Ministry of Health, tax authorities)
-
Conducting marketing, promotion, and communication activities (with explicit consent)
3. Legal Basis
Your personal data is processed based on the following legal grounds:
-
Performance of medical services
-
Fulfillment of legal obligations under Turkish law and GDPR
-
Protection of public health and medical service delivery
-
Your explicit consent (for marketing activities, sharing before/after visuals, cross-border data transfers)
4. Data Transfer
We may share your data with:
-
Authorized public institutions (Ministry of Health, tax authorities)
-
Insurance companies (if relevant)
-
Our business partners are involved in providing accommodation, transportation, and technical support
-
International patient coordinators (with your consent)
Your personal data may be transferred abroad in compliance with GDPR and KVKK, provided that adequate security measures are taken and your explicit consent is obtained.
5. Data Security
We apply technical and administrative measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.
6. Data Retention
We retain your personal data only for as long as necessary to provide our services and comply with applicable legal obligations. When no longer needed, your data will be securely deleted or anonymized.
7. Your Rights
According to GDPR (Articles 12–23) and KVKK (Article 11), you have the following rights:
-
To learn whether your personal data is being processed
-
To request access, correction, or deletion of your data
-
To object to the processing of your personal data
-
To withdraw your consent at any time
-
To request restriction of processing or data portability
You can exercise these rights by contacting us via the information below.
8. Contact
For any questions or requests regarding your personal data, please contact:
