In this notice7 sections
Data controller
This website belongs to Op. Dr. İhsan Rua (hereinafter “the physician”), and under the Personal Data Protection Law No. 6698 (“KVKK”) the data controller is the physician himself. Contact details are published in the site’s imprint and on the Contact page.
What data we process
No personal data is collected automatically through this site. Data is processed only when you start an action yourself:
- Appointment request form — full name, telephone number, optionally an e-mail address, and the note you write.
- WhatsApp and telephone — when you write to us through these channels, your contact details and the content of your messages are processed on the relevant service provider’s infrastructure.
- Visit log — our server’s technical logs record the date of the request, the address requested and a truncated IP address. This log is not used to identify you; it is kept for security and troubleshooting.
Please do not share health information. The appointment form and WhatsApp are for appointment requests only; please do not include symptoms, diagnoses, test results or medication details. These channels are not suitable for special categories of personal data. Your medical information is taken only at the practice, in a face-to-face consultation.
Purpose of processing and legal basis
Your data is processed only to assess your appointment request and get back to you. The legal basis is, under Article 5(2)(c) of the KVKK, processing being directly related to the establishment or performance of a contract and, under Article 5(2)(f), the data controller’s legitimate interest with regard to the communication obligation. Your explicit consent is also obtained on the appointment form.
Transfers
Your personal data is not given to third parties for marketing purposes. Transfers take place only in the following cases:
- Hosting (abroad). This site is hosted on a server located in Frankfurt, Germany. For this reason, the information you enter in the form and the technical visit logs are, by the nature of the hosting service, processed on a server located abroad. The transfer is limited to the technical scope needed for the site to work; the hosting provider does not use the data for its own purposes.
- To public institutions and organisations authorised by law, upon request.
- If you choose to use an external platform for appointments (e.g. Doktor Takvimi), that platform’s own privacy notice applies; the data held there does not belong to us.
Retention period
Appointment request records, once their purpose has been fulfilled, are deleted within 6 months at the latest. If the appointment takes place and a patient file is opened, the retention periods set out in the Regulation on Personal Health Data and the relevant health legislation apply to the data in the file. Technical server logs are kept for a maximum of 12 months.
Your rights
Under Article 11 of the KVKK, you have the right to: learn whether your personal data is processed; request information if it has been processed; learn whether it is used in line with its purpose; request its correction if it has been processed incompletely or incorrectly; request its deletion or destruction when the conditions are met; request that these actions be notified to the third parties to whom it has been transferred; object to an outcome against you arising from analysis exclusively by automated systems; and claim compensation if you suffer damage because of unlawful processing.
The application procedure is described on the Data Subject Request page.