I. Data Controller and Contact Details

Data Controller: Private ST Dent Oral and Dental Health Clinic (“ST Dent” or the “Clinic”)
Address: Mehmet Akif Ersoy Mah., Kirazlı Cad. No:243A Kemalpaşa / İzmir
Phone: 0 (232) 504 04 50  |  Mobile: 0 (505) 677 98 90
E-mail: info@stdent.com.tr

II. Methods of Collecting Personal Data and Legal Grounds

Your personal data may be collected through in-clinic applications, phone/WhatsApp communication, e-mail, online forms on our website, online appointment systems, CCTV recordings, social media messages, notices from official authorities, and similar channels through automated or non-automated means. Processing is carried out on the legal grounds specified in Articles 5 and 6 of KVKK. Primary legal grounds include:

• Where it is necessary for the establishment or performance of a contract (appointment and treatment processes),
• Where it is necessary for compliance with a legal obligation (health records, tax and financial regulations),
• Where it is explicitly stipulated in laws (transaction records, logs required by Law No. 5651, etc.),
• Where processing is necessary for the establishment, exercise or protection of a right (legal claims/proceedings),
• Where it is required for our legitimate interests, provided that it does not harm your fundamental rights and freedoms (operational processes, audits, information security),
• For your special categories of data (health data), based on the legal exceptions under Article 6 of KVKK or your explicit consent where required.

III. Categories of Personal Data Processed

• Identity (name, surname, TR ID number, date of birth, etc.)
• Contact (phone, e-mail, address)
• Patient/Transaction Information (appointment, prescription, referral and treatment records)
• Health Data (examination findings, tests/reports, medical documents) – special category data
• Financial (payment, invoice, insurance information)
• Legal Transaction (complaints, official correspondence)
• Audio/Visual Records (call recordings, CCTV)
• Transaction Security (IP address, logs, device information – records required under Law No. 5651)
• Marketing (notification preferences, if explicit consent is provided)

IV. Purposes of Processing Personal Data

• Planning and execution of diagnosis and treatment services, appointment management, patient relations,
• Ensuring information and transaction security; establishing and maintaining IT infrastructure, keeping log records,
• Compliance with legal regulations, audits, reporting; responding to requests from competent authorities,
• Financial and accounting operations including invoicing and collections,
• Follow-up of legal procedures; dispute and complaint management,
• Coordination with suppliers and business partners (call center, IT, technical support),
• Communication activities (appointment reminders, notifications),
• Quality control and audit processes, internal control and risk management.

V. Transfer of Personal Data

Your personal data may be shared with the following parties, limited to the purposes stated above and in accordance with the security measures required under KVKK Articles 8 and 9:

• Business partners and service providers (call center, IT infrastructure, software/hosting, technical support),
• Private health insurance companies and intermediaries, when necessary,
• Banks, financial advisors, independent auditors, tax/consultancy firms,
• Cargo/courier companies (physical document delivery),
• Authorized public institutions and organizations, judicial authorities, regulatory and supervisory bodies,
• Lawyers and legal consultants (as part of legal processes).

Your personal data is mainly processed/transferred within Türkiye. In cases where transfer abroad is required and legally permitted, conditions stipulated by KVKK will be fulfilled, and necessary notifications/consents will be obtained.

VI. Retention Periods

Your personal data is retained for the periods stipulated in relevant legislation or as long as necessary for processing purposes. Once such periods expire or processing purposes no longer apply, data is deleted, destroyed, or anonymized in accordance with legal procedures (including special regulations for health records and statute of limitations).

VII. Your Rights (KVKK Article 11)

You have the right to:

• Learn whether your data is processed and request information,
• Learn the purpose of processing and whether it is used appropriately,
• Learn the third parties to whom your data is transferred (domestic/abroad),
• Request correction of incomplete or inaccurate data,
• Request deletion/destruction of data under KVKK and related legislation,
• Request notification of these corrections/deletions to third parties,
• Object to results derived from automated systems if unfavorable,
• Request compensation if you suffer damage due to unlawful processing.

VIII. Application Procedure

You may submit your requests under KVKK through the methods below (response time is up to 30 days):

• E-mail: info@stdent.com.tr (subject: “KVKK Application”)
• Postal mail: Mehmet Akif Ersoy Mah., Kirazlı Cad. No:243A Kemalpaşa / İzmir (signed written application)

If you are not satisfied with our response, you may file a complaint with the Personal Data Protection Authority.

IX. Security and Updates

We take technical and administrative measures to ensure the security of your personal data. This Information Notice may be updated due to legislative changes or internal policies. The latest version will always be available on our website.

Effective date / Last update: …/…/2025

For information about cookies used on our website, please review our Cookie Policy page; for general privacy principles, please review our Privacy Policy page.