Personal Data Protection and Privacy Notice

1. Data Controller

Under the Personal Data Protection Law No. 6698 (KVKK), your personal data obtained through this website may be processed by Prof. Dr. Erkan Yıldırım, as the data controller, within the scope described below.

Data Controller: Prof. Dr. Erkan Yıldırım
Address: [Clinic / official notification address to be added]
Email: [Email address for KVKK requests to be added]
Website: profdrerkanyildirim.com

This notice has been prepared to inform individuals who visit the website or use the communication channels on the website about the processing of their personal data.

2. Personal Data That May Be Processed

Through use of the website and the communication channels on the site, the following categories of personal data may be processed:
  • Identity information: first name, last name,
  • Contact information: phone number, email address,
  • Information submitted by the user through the contact form,
  • Technical records relating to use of the website, IP address, and device/browser information,
  • Cookie preferences and consent records,
  • Website usage and interaction information, depending on the user’s consent preferences.
If the user enters information about their health status, medical history, tests, diagnosis, or treatment in the free-text field of the contact form, health data may also be transmitted. Under the KVKK, health data is classified as a special category of personal data. The purpose of the contact form is general communication. We recommend that you do not share unnecessary health data, medical documents, or special categories of personal data through the form.

3. Purposes of Processing Personal Data

Depending on the nature of the relevant activity, personal data may be processed solely for the following purposes:
  • Receiving and responding to contact requests submitted through the website,
  • Managing communication processes,
  • Ensuring the security and technical operation of the website,
  • Measuring site performance and usage,
  • Managing and recording users’ cookie and privacy preferences,
  • Fulfilling legal obligations,
  • Responding to lawful requests from authorized public institutions and organizations,
  • Exercising and protecting rights and conducting legal proceedings in the event of a dispute.
If analytics or advertising/marketing technologies are used, such processing will be carried out in accordance with the user’s relevant preferences and the necessary legal requirements under applicable legislation.

4. Method of Collection and Legal Basis

Personal data may be collected electronically through:
  • Contact forms on the website,
  • Communication by email or telephone,
  • Technical systems used to operate the website,
  • Cookies and similar technologies.
Depending on the nature of the specific data processing activity, personal data may be processed on the legal grounds set out in Article 5 of the KVKK, namely: being expressly provided for by law, compliance with a legal obligation, the establishment, exercise, or protection of a right, the legitimate interests of the data controller provided that this does not harm the fundamental rights and freedoms of the data subject, or, where required, the explicit consent of the data subject. Where special categories of personal data are processed, the conditions set out in Article 6 of the KVKK and the necessary administrative and technical measures are taken into account.

5. Cookies and Website Measurement Technologies

Strictly necessary cookies may be used on the website to ensure that the site operates properly and securely. Analytics, performance, or advertising/marketing cookies and similar technologies will be used subject to the user’s choice where required by applicable legislation. Users can manage their cookie preferences and change previously given preferences through the cookie management tool provided on the website. Detailed information about the types and purposes of the cookies used and the related third-party services is available on the Cookie Policy page.

6. Transfer of Personal Data

Where necessary to achieve the processing purposes and where the conditions set out in Articles 8 and 9 of the KVKK are met, personal data may be transferred, on a limited basis, to:
  • Website infrastructure and hosting service providers,
  • Email and communication infrastructure service providers,
  • IT, security, and technical support service providers,
  • Analytics and measurement service providers,
  • Authorized advisors, for the purpose of fulfilling legal or financial obligations,
  • Legally authorized public institutions and organizations.
If personal data is transferred abroad due to the use of service providers located outside Turkey, the conditions for international transfers set out in Article 9 of the KVKK and the provisions of related legislation are taken into account.

7. Retention of Personal Data

Personal data is retained for as long as necessary for the purpose for which it is processed, taking into account the statutory retention periods set out in the relevant legislation. When the purpose of processing and the relevant legal basis no longer exist, personal data is deleted, destroyed, or anonymized in accordance with applicable legislation.

8. Data Security

Technical and administrative measures appropriate to the nature of the data processed are taken to prevent unlawful processing of personal data or unlawful access to personal data, and to ensure that personal data is stored securely. Although, by the nature of data transmission over the internet, absolute security cannot be guaranteed for any electronic system, the guiding principle is to implement reasonable and appropriate security measures to protect personal data.

9. Your Rights Under the KVKK

Under Article 11 of the KVKK, data subjects whose personal data is processed have the right, where the relevant conditions are met, to:
  • Learn whether their personal data is being processed,
  • Request information about the processing if their personal data has been processed,
  • Learn the purpose of the processing of their personal data and whether it is used in accordance with that purpose,
  • Know the third parties, in Turkey or abroad, to whom their personal data has been transferred,
  • Request the correction of their personal data if it has been processed incompletely or inaccurately,
  • Request the deletion or destruction of their personal data within the framework of the conditions set out in the KVKK,
  • Request that the third parties to whom their personal data has been transferred be notified of any correction, deletion, or destruction,
  • Object to any outcome to their detriment arising from the analysis of the processed data exclusively through automated systems,
  • Claim compensation for damages if they suffer harm due to the unlawful processing of their personal data.


10. How to Submit a Request

You may submit your requests under the KVKK to the data controller in accordance with the procedures set out in the applicable legislation.

Application Address: [Official application address to be added]
Email: [KVKK application email address to be added]

In order to evaluate the request, information necessary to verify the applicant’s identity may be requested. Requests are evaluated and concluded within the time limits set out in the KVKK and related legislation, depending on the nature of the request.

11. Changes to This Notice

This privacy notice may be updated in line with changes in legislation, the technologies used on the website, data processing activities, or the service infrastructure. The current version is published on the website.

Last Updated: [DD/MM/YYYY]