Personal Data Protection Notice (KVKK)
This privacy notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") by Dr. Ismail Metin Hoser in the capacity of data controller, to inform you about the processing of your personal data.
1. Data Controller
Your personal data is processed by Dr. Ismail Metin Hoser as the data controller, whose details are provided below:
- Data Controller: Dr. Ismail Metin Hoser
- Address: Acıbadem Mah., Şeyh Galip Sk., Elysium Elit Konutları, Block B, Apartment 29, Koşuyolu, Kadıköy / Istanbul
- Phone: +90 543 478 88 74
- Email: info@drismailmetinhoser.com
2. Categories of Personal Data Processed
We may process the following categories of personal data:
- Identity Information: First name, surname, Turkish national identity number, date of birth and gender.
- Contact Information: Phone number, email address and postal address.
- Health Information (Special Categories of Personal Data): Medical history, medications, allergy status, examination and procedure records, before-and-after photographs, and diagnosis and treatment information.
- Visual and Audio Recordings: Photographs, videos and promotional images (only with your explicit consent).
- Patient Transaction Information: Appointment records, treatment history, and records of requests and complaints.
- Transaction Security Information: IP address, cookie records and website usage data.
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Planning and providing healthcare services and medical aesthetic treatments,
- Managing patient assessments, diagnosis and treatment processes,
- Scheduling appointments and conducting communication activities,
- Fulfilling legal obligations and ensuring compliance with applicable legislation,
- Assessing and responding to requests and complaints,
- Improving service quality and managing patient satisfaction processes,
- Using visual content for promotional and informational purposes, with your explicit consent,
- Operating the website and ensuring its security.
4. Legal Grounds for Processing Personal Data
Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:
- Processing is expressly provided for by law,
- Processing is directly related to the establishment or performance of a contract,
- Processing is necessary for the data controller to fulfill a legal obligation,
- Processing is necessary for the data controller's legitimate interests, provided it does not harm the fundamental rights and freedoms of the data subject,
- For health data, processing by persons under an obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, or your explicit consent.
5. Methods of Collecting Personal Data
Your personal data is collected by automated or non-automated methods through website forms, appointment requests, phone, email, social media channels, and in-person consultations and procedures at the clinic.
6. Transfer of Personal Data
Your personal data may be transferred to the following parties, limited to the purposes stated above and subject to the conditions set out in Articles 8 and 9 of the KVKK:
- Legally authorized public institutions and organizations (the Ministry of Health, judicial authorities, etc.),
- Suppliers, laboratories and business partners involved in providing the service,
- Providers of IT, accounting, legal and consultancy services.
Your personal data will not be transferred abroad without your explicit consent.
7. Your Rights as a Data Subject
Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:
- Learn whether your personal data is being processed,
- Request information if your data has been processed,
- Learn the purpose of processing and whether your data is used in accordance with that purpose,
- Know the third parties to whom your data is transferred within Turkey or abroad,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction of your data under the conditions set out in the KVKK,
- Request that correction, deletion and destruction be notified to third parties to whom the data has been transferred,
- Object to a result against you arising from the analysis of your data exclusively through automated systems,
- Claim compensation for damage caused by unlawful processing of your personal data.
8. How to Apply
You may submit requests concerning the rights listed above to the data controller through the following methods, together with documents verifying your identity:
- Written Application: By a signed hard-copy application to Acıbadem Mah., Şeyh Galip Sk., Elysium Elit Konutları, Block B, Apartment 29, Koşuyolu, Kadıköy / Istanbul,
- Email: To info@drismailmetinhoser.com.
Applications will be resolved free of charge within thirty (30) days at the latest, depending on the nature of the request. If the process incurs an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.
9. Changes
This privacy notice may be updated to reflect changes in legislation and clinical practices. The updated notice takes effect on the date it is published on our website.