Privacy Notice: Processing and Protection of Personal Data

This page is an English summary of the Personal Data Processing and Protection Policy of DSA DENTAL AĞIZ VE DİŞ SAĞLIĞI POLİKLİNİĞİ (DSA DENTAL SAĞLIK TURİZM VE TİCARET LTD. ŞTİ.). In the event of any difference, the Turkish version prevails.

1. Purpose and Scope

This policy sets out the principles our clinic follows when processing and protecting personal data. It aims to inform patients, prospective patients, visitors, employees, job applicants, suppliers and other third parties, and to ensure compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK), the European General Data Protection Regulation (GDPR) and other applicable legislation. It covers all physical and electronic records in which personal data is processed, by automated or non-automated means.

2. Principles We Follow

In line with Article 4 of the KVKK and Article 5 of the GDPR, personal data is:

processed lawfully and fairly;
kept accurate and, where necessary, up to date;
processed for specific, explicit and legitimate purposes;
relevant, limited and proportionate to the purpose for which it is processed;
kept only for as long as required by law or by the purpose of processing, and then deleted, destroyed or anonymised.

3. Legal Grounds for Processing

Personal data is processed where at least one of the conditions in Article 5 of the KVKK and Article 6 of the GDPR applies, including: your explicit consent; where processing is expressly provided for by law; to protect the life or physical integrity of a person who cannot give consent; where it is necessary to enter into or perform a contract with you; to fulfil our legal obligations; where you have made the data public yourself; to establish, exercise or protect a right; and for our legitimate interests, provided your fundamental rights and freedoms are not harmed.

4. Special Categories of Data (Including Health Data)

Health data is a special category of personal data. It is processed with your explicit consent, or without it by persons under a duty of confidentiality or authorised institutions for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care, and the planning and management of health services. Additional security measures set by the Personal Data Protection Board are applied.

5. Transfer of Personal Data

Personal data may be transferred to third parties in Turkey or abroad only in accordance with Articles 8 and 9 of the KVKK, the relevant provisions of the GDPR and the rules set by the Personal Data Protection Board, and with the necessary security measures in place.

6. Protection, Storage and Destruction

We take the technical and administrative measures needed to prevent unlawful processing of and access to personal data and to keep it secure, including staff training and regular audits. When the reasons for processing no longer exist, personal data is deleted, destroyed or anonymised, either on request or in periodic destruction carried out under our retention and destruction policy.

7. Your Rights

You have the right to:

find out whether your personal data is processed and, if so, request information about it;
learn the purpose of processing and whether the data is used for that purpose;
know the third parties in Turkey or abroad to whom your data is transferred;
request correction of incomplete or inaccurate data, and notification of this to third parties;
request deletion, destruction or anonymisation of your data when the reasons for processing no longer exist, and notification of this to third parties;
object to a result against you arising solely from automated analysis;
claim compensation for damage caused by unlawful processing;
request that your data be transferred to another data controller (data portability).

8. How to Exercise Your Data Protection Rights

Requests may be submitted in English or Turkish in writing using our application form, or by registered electronic mail (KEP), secure electronic signature, mobile signature or the email address you have previously given us and that is registered in our system. You can also contact us at international@dsadental.com.tr or by post at Yavansu, Süleyman Demirel Blv. No:155/1 D:1, 09400 Kuşadası/Aydın, Turkey.

Requests are answered free of charge as soon as possible and within 30 days at the latest. If the request involves an additional cost, a fee may be charged in line with the tariff set by the Personal Data Protection Board. Your request may be accepted or refused with reasons; the answer is given in writing or electronically.

9. Effective Date

This policy came into force on 15 June 2023 and is updated when necessary. It is published on the DSA Dental Smile Art website.