Personal Data Protection Law

 

1. INTRODUCTION

This information text has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data ('LAW') to inform data owners/related persons regarding the processing of personal data collected by the legal entity Prof. Dr. İlker Sücüllü ('DATA CONTROLLER'). The DATA CONTROLLER demonstrates utmost sensitivity and diligence regarding the processing, protection, and security of personal data. In this context, and in accordance with the LAW, the personal data of the relevant persons may be processed in its capacity as DATA CONTROLLER.

 

2. PURPOSE OF PROCESSING PERSONAL DATA

Personal data is processed for the purposes specified below, without limitation, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law and the purposes specified in the LAW. The DATA CONTROLLER strives to take the highest possible legal, technical, and administrative measures to prevent the unlawful processing of personal data and unlawful access to data, and to ensure the secure storage of personal data.

 

3. TYPES OF PERSONAL DATA COLLECTED

The following personal data is collected from data subjects through our contact forms:

  • Identity Information: First Name, Last Name
  • Contact Information: Phone number, email address
  • Message Content: Requests and explanations submitted through the form
  • Health Information (Optionally shared by patients): Test results, reports, MRI images, X-ray images, and other health data voluntarily uploaded or sent by users so that our doctors can conduct a preliminary assessment.

This data is processed solely for the purposes of communicating, managing requests, providing preliminary information to the relevant doctor when necessary, and evaluating healthcare services.

 

4. SHARING AND TRANSFER OF PERSONAL DATA

Personal data collected from employees, service recipients, suppliers, and citizens may be shared with the DATA CONTROLLER's suppliers, service providers, and legally authorized institutions and organizations, in accordance with the conditions and purposes of personal data processing, within the framework of the conditions specified in Articles 8 and 9 of the Law. The DATA CONTROLLER takes care to take the necessary administrative and technical measures and all security measures when sharing personal data. The DATA CONTROLLER complies with its obligation of due diligence and care regarding the transfer and sharing of your data and values ​​its security.

 

5. PERSONAL DATA COLLECTION METHOD AND LEGAL REASON

The DATA CONTROLLER may collect personal data through any audio, written, visual, or electronic means, and for the purposes specified in this information document; Data is collected, processed, shared, and transferred in accordance with the conditions set forth in the LAW, based on legal grounds, such as ensuring that the services offered by the DATA CONTROLLER are provided in accordance with the law and relevant legislation, and that the institution fully fulfills its obligations arising from contracts and laws.

 

6. COOKIE USE AND ANALYSIS

Our website uses mandatory and analytical cookies to improve the user experience and analyze site traffic.

  • Mandatory Cookies: Necessary for the basic functions of the site.
  • Analytical Cookies (Google Analytics): Analyze site usage data anonymously.

Users have the right to manage their cookie preferences through their browser settings. For non-mandatory cookies, explicit consent will be obtained upon first visit to the site.

 

7. RIGHTS OF PERSONAL DATA SUBJECTS

Personal data subjects, in accordance with Article 11 of the LAW, have the right to:

  • They have the right to learn whether personal data has been processed,
  • To request information if personal data has been processed,
  • To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,
  • To know the third parties to whom personal data has been transferred, whether domestically or internationally,
  • To request correction of personal data if it has been processed incompletely or inaccurately,
  • To request the deletion or destruction of personal data under the conditions stipulated in Article 7 of the Law,
  • To request notification of actions taken pursuant to Articles 5 and 6 of the Law to third parties to whom personal data has been transferred,
  • To object to the analysis of processed data exclusively through automated systems, leading to a detrimental result,
  • To request compensation for damages suffered due to the unlawful processing of personal data.

Applications are finalized within 30 days, depending on the nature of the request.

 

8. EXPRESS CONSENT

The processing of special personal data (health data, examination and imaging reports) is only possible with the explicit consent of the data subject. Users consent to the processing of their data by checking the explicit consent box when filling out a form or uploading their data. Explicit consent can be withdrawn at any time, and users can request data processing. Processing of personal data will be stopped or deleted.

 

9. CONTACT

You can find detailed information regarding the matters covered by this disclosure document in the Personal Data Protection and Processing Policy. To exercise your rights under the LAW, you can send your identity information, the right you wish to exercise, and a detailed explanation of your request to the contact address.

 

10. IDENTITY OF THE DATA CONTROLLER

  • Data Controller: Prof. Dr. İlker Sücüllü
  • Phone: +90 545 125 20 20
  • Web Address: en.ilkersucullu.com.tr
  • E-Mail Address: info@ilkersucullu.com.tr
  • Address: Brandium Residence, Dereboyu Street R5 Blok Daire:32 Ataşehir / İstanbul / Turkey