Dr. Sinan Akyürek Medical Aesthetics Clinic
Prepared pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK)
Last updated: July 2026
1. Identity of the Data Controller
Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by the following data controller:
Dr. Sinan Akyürek
Harbiye Mah. Teşvikiye Cad. No:19/13 Kat:6, Şişli/İstanbul, Turkey
Email: drsinanakyurek@gmail.com
Phone: +90 532 499 6414
2. Personal Data Processed and Purposes of Processing
2.1 Identity and Contact Data
Data: Name, surname, phone number, email address, date of birth.
Purpose: Creating patient records, managing appointment scheduling, providing pre- and post-treatment communication, and fulfilling legal reporting obligations.
Legal Basis: Establishment or performance of a contract (KVKK Art. 5/2-c); fulfillment of legal obligations (KVKK Art. 5/2-ç).
2.2 Special Category Health Data
Data: Medical history, existing health conditions, medications, allergies, prior aesthetic procedures, treatment photographs, face analysis images, and any other health information shared voluntarily.
Purpose: Conducting clinical assessment and face analysis; planning, performing, and documenting aesthetic medical treatments; ensuring patient safety; fulfilling Ministry of Health record-keeping obligations.
Legal Basis: Your explicit consent (KVKK Art. 6/3); fulfillment of legal obligations in the field of healthcare (KVKK Art. 6/3).
2.3 Communication Data
Data: Messages sent via WhatsApp, Instagram, email, or contact forms; content of consultations conducted digitally; voice-call recordings made for appointment confirmation.
Purpose: Responding to inquiries, creating and confirming appointments, providing pre- and post-procedure information.
Legal Basis: Explicit consent; legitimate interest; performance of a contract.
AI-powered digital assistant: When you message our clinic on WhatsApp or Instagram, initial replies may be generated by an AI-powered digital assistant operating on the clinic's behalf; your messages are processed by automated means for handling your request and managing appointments, and are recorded in the clinic's patient relationship (CRM) system. You may ask to speak with a member of the clinic team at any time. You are not required to share health information through these channels before your examination; you may instead contact the clinic by phone.
2.4 Website Usage Data (Technical Data)
Data: IP address, browser type, device information, pages visited, session duration.
Purpose: Ensuring website security and functionality; improving user experience; analytics.
Legal Basis: Legitimate interest; explicit consent where required (for analytics/marketing cookies).
3. Transfer of Personal Data
Your personal data may be transferred to the following parties, to the extent permitted by KVKK Articles 8 and 9, and only for the stated purposes:
- Asistan 7/24 (patient relationship, messaging and appointment management system): The CRM infrastructure on which WhatsApp/Instagram conversations, appointments and patient records are managed — acting as a data processor under contractual safeguards.
- WhatsApp / Instagram (Meta Platforms): Messaging channels used at your preference; their servers may be located abroad.
- Google (Calendar): Calendar synchronisation of appointment details.
- Cloudflare: Website hosting, delivery and security infrastructure.
- EntityMed: AI face/skin analysis platform used with your explicit consent; the facial photos and contact details you submit are processed solely to generate your analysis report and are not used for identification or biometric recognition.
- Ministry of Health and authorized public institutions: Including e-Nabız / Examination Information Management System (MBYS) notifications, when required by law or regulatory authority.
- Courts and enforcement authorities: When required by a court order or legal proceeding.
- Referring physicians or specialist clinics: Only with your explicit written consent, when medically necessary.
International transfers: WhatsApp/Instagram correspondence, appointment details synchronised to Google Calendar, photos submitted to EntityMed and website traffic data served via Cloudflare may be transferred to the countries where these services' servers are located. Such transfers are carried out in accordance with the procedures set out in Article 9 of the KVKK (as amended by Law No. 7499) — adequacy decisions, appropriate safeguards such as standard contractual clauses, or the incidental circumstances listed in that article, including your explicit consent.
Your personal data is not sold, rented, or shared with any commercial third party for marketing purposes without your explicit consent.
4. Method and Legal Basis of Data Collection
Your personal data is collected through in-clinic registration and intake forms (physical), consent forms, the website, WhatsApp and Instagram correspondence (including the AI-powered digital assistant), phone and voice-call systems, the patient relationship (CRM) and appointment systems, the face analysis application used with your explicit consent, and clinical examination and treatment records. It is processed on the following legal grounds under KVKK Articles 5 and 6: your explicit consent; establishment and performance of a contract; fulfillment of legal obligations; protection of vital interests; legitimate interests of the data controller (where not overridden by your rights).
5. Your Rights as a Data Subject
Pursuant to KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed,
- Request information about the processing if it has occurred,
- Learn the purpose of processing and whether data is used in accordance with that purpose,
- Know the third parties to whom your data has been transferred, domestically or abroad,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction of your data under the conditions in KVKK Article 7,
- Request that correction and deletion be notified to third parties to whom data has been transferred,
- Object to outcomes arising from exclusively automated analysis that are detrimental to you,
- Claim compensation for damages suffered due to unlawful processing.
6. How to Exercise Your Rights
To exercise any of the rights listed above, you may submit a written application including your name, surname, Turkish ID (or passport number for foreign nationals), contact information, and the right you wish to exercise.
In person: Harbiye Mah. Teşvikiye Cad. No:19/13 Kat:6, Şişli/İstanbul (with valid ID)
By email: drsinanakyurek@gmail.com (with secure electronic signature or a copy of ID)
By registered post (KEP or notarized): to the address above
We will respond within 30 (thirty) days at the latest. Applications are free of charge; however, if the response requires significant effort, a fee may be charged per the tariff set by the Personal Data Protection Board.
7. Data Retention
Your personal data is retained for the minimum periods required by applicable Turkish healthcare regulations. Under the Private Health Facilities Regulation, patient records are kept for a minimum of 5 (five) years from the date of last treatment. At the end of the retention period, data is securely destroyed in line with the clinic’s data destruction policy.
8. Data Security
Your data, especially health data and treatment photographs, is stored securely and accessible only to authorized clinical personnel. We take all necessary technical and administrative measures to prevent unauthorized access, disclosure, alteration, loss, or destruction.
9. Explicit Consent
Where your explicit consent is required — particularly for special category health data, digital communications, and marketing activities — such consent is obtained separately and in advance, via a signed consent form at the clinic or a digital consent mechanism on the website. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
10. Contact
Dr. Sinan Akyürek Medical Aesthetics Clinic
Harbiye Mah. Teşvikiye Cad. No:19/13 Kat:6, Şişli/İstanbul
drsinanakyurek@gmail.com · +90 532 499 6414