Personal Data Protection Notice (KVKK)
As the practice of Dr. Suzan Alp (Hasbayram) ("the Practice"), we care about the protection of your personal data. This notice has been prepared to inform you, in our capacity as data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). This is a translation provided for information; the Turkish text is the legal reference.
1. Data controller
| Name | Dr. Suzan Alp |
|---|---|
| Address | Postane Mah. Manastır Yolu Cad. Kaplan Sit. No:86 B Blok K:2 D:7, Tuzla / İstanbul |
| info@drsuzanalp.com | |
| Telephone | +90 532 280 65 89 |
2. Personal data processed
| Data category | Data types | Source |
|---|---|---|
| Identity | First name, surname | Contact form |
| Contact | E-mail address, telephone number | Contact form |
| Message content | Free text written in the contact form | Contact form |
| Transaction security | IP address (anonymised), browser and device information, pages visited | Google Analytics 4 (only if cookie consent has been given) |
| Cookie preference | Accept or decline decision, date of the decision | Your browser's local storage (localStorage) |
Important: The contact form opens your own e-mail client directly; your form data are not stored on a server by this site. Please do not share health information, test results or personal health data in the contact form. The principles on the protection of personal health data are set out in the Turkish Regulation on Personal Health Data (Official Gazette, 21 June 2019, No. 30808).
3. Purposes of processing
- Responding to contact and appointment requests
- Measuring site usage and improving the visitor experience (only with cookie consent)
- Fulfilling legal obligations
- Keeping the site technically operational
4. Legal basis for processing
| Data group | Legal basis |
|---|---|
| Contact form data | KVKK Art. 5/2-c: processing directly related to the establishment or performance of a contract; Art. 5/2-f: the legitimate interest of the data controller |
| Analytics data (GA4) | KVKK Art. 5/1: the explicit consent of the data subject (obtained through the cookie consent banner) |
| Cookie preference | KVKK Art. 5/2-f: the legitimate interest of the data controller (keeping a record of consent) |
5. Transfer of personal data
Your personal data are not shared with third parties other than those listed below:
| Recipient | Purpose | Condition |
|---|---|---|
| Google LLC (USA) | Site usage measurement (Google Analytics 4) | Only if cookie consent has been given; the IP address is anonymised; advertising signals are switched off |
| Google LLC (USA) | Map display (Google Maps iframe) | When the map on the contact page loads; Google's privacy policy applies |
International transfers take place within the framework of Google's Standard Contractual Clauses.
6. Retention periods
| Data | Retention period |
|---|---|
| Contact form (sent by e-mail) | At most 1 year after the request has been answered |
| Google Analytics data | In accordance with Google's data retention policy (default 14 months) |
| Cookie preference | In your browser's local storage; until you delete it or the consent version changes |
7. Rights of the data subject (KVKK Art. 11)
Under Article 11 of the KVKK you have the following rights:
- To learn whether your personal data are being processed
- To request information if your personal data have been processed
- To learn the purpose of processing and whether the data are used in line with that purpose
- To know the third parties to whom your personal data are transferred, in Türkiye or abroad
- To request correction of your personal data if they are incomplete or inaccurate
- To request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK
- To request that corrections and erasures be notified to the third parties to whom the data have been transferred
- To object to a result arising against you from the analysis of your data exclusively by automated systems
- To claim compensation if you suffer damage as a result of unlawful processing of your personal data
8. How to apply
To exercise the rights above, you can send an e-mail to info@drsuzanalp.com together with documents establishing your identity, or apply in writing to the practice address. Applications are concluded within 30 days at the latest.
If your application is rejected, if you find the answer insufficient, or if no answer is given in time, you may lodge a complaint with the Turkish Personal Data Protection Board.