KVKK Information Notice
Last update: January 2025
Within the scope of the Personal Data Protection Law No. 6698 ("KVKK"), this text has been prepared to enlighten you regarding the processing of your personal data.
1. Data Controller
Op. Dr. Mustafa Keleş Plastic and Aesthetic Surgery Clinic
Address: Antalya, Türkiye
E-posta: info@drmustafakeles.com
Telefon: +90 (542) 408 60 42
2. Processed Personal Data
The following personal data is processed within the scope of health services provision:
- Identity Data: Name, surname, date of birth, TR. identification number
- Contact Data: Phone number, e-mail address, address information
- Health Data: Medical history, surgery information, examination data
- Visual Data: Pre/post surgery photos (with explicit consent)
- Transaction Data: Appointment information, payment records
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Carrying out medical examination, diagnosis and treatment processes
- Providing appointment and patient follow-up
- Fulfillment of legal obligations (Ministry of Health legislation)
- Establishing communication with relevant people
- Carrying out invoicing and accounting processes
4. Legal Basis
Your personal data is processed based on the following legal bases within the scope of Articles 5 and 6 of the KVKK:
- Necessity for providing health services
- Fulfillment of legal obligations
- Your explicit consent (for sensitive data)
- Protection of our legitimate interests
5. Transfer of Personal Data
Your personal data; It is not shared with third parties except in cases of legal obligation (Ministry of Health, court decision, etc.). Your data is not transferred abroad.
6. Storage Period of Personal Data
Health data is stored for at least 20 years from the date of surgery in accordance with the Private Hospitals Regulation and relevant legislation. Other data is deleted when the purpose of processing ceases to exist.
7. Rights of Data Owners
You have the following rights under Article 11 of KVKK:
- Learning whether your personal data is being processed or not
- If it has been processed, request information about it
- Learning the purpose of processing and whether it is used in accordance with its purpose
- Knowing the third parties to whom it is transferred domestically or abroad
- Requesting correction of incomplete or incorrect processing
- Requesting deletion in case the conditions within the scope of the law are eliminated
- Objecting to a decision that has negative consequences through automatic systems
- Requesting the compensation of the damage in case of damage due to illegal processing
8. Application Method
To exercise your above rights, you can apply through the following channels:
Your application will be finalized within 30 days at the latest, depending on the nature of the request. You reserve the right to file a complaint with the Personal Data Protection Board if the application is rejected, the response is found to be insufficient, or the response is not given in a timely manner.
