Data controller

The data controller for your personal data is Beyaz Gülüş Diş Kliniği, Kazlıçeşme Mah. Kennedy Cad. No:54/EA, Zeytinburnu, Istanbul, Türkiye. As data controller we decide the purposes and means of processing and are responsible for setting up and managing our data records.

Email for data protection matters: info@beyazgulus.com

This English text is provided for the convenience of international patients and website visitors. It is based on our Turkish privacy policy and KVKK information notice (Aydınlatma Metni).

Personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

Identity data: name and surname, Turkish ID number, date of birth, gender, and passport number for patients who are not Turkish citizens.
Contact data: telephone number, email address and home address.
Health data: medical history, existing conditions, medicines you take, allergies, dental treatment records, X-ray and tomography images, treatment plans and prescriptions.
Financial data: bank account and card details used for payment, invoicing details, Social Security Institution (SGK) details and private health insurance details.
Visual and audio data: before-and-after treatment photographs (with your consent) and security camera footage at the clinic.
Appointment data: appointment dates, treatment preferences and messages you send through contact forms.
Digital data: website usage data, IP address, browser information, cookie records and site usage statistics.

Health data is a special category of personal data under the KVKK and is processed with the additional safeguards the law requires.

How we collect your data

When you contact the clinic directly, in person, by telephone or by email
Through the contact and appointment forms on our website
Through social media channels
Through WhatsApp and other messaging applications, including photos and X-rays you send us for a treatment plan
Through cookies and similar digital tracking technologies (see our cookie policy)
Through security cameras at the clinic

Why we use your data

Planning, providing and following up oral and dental health services
Patient registration and admission
Medical diagnosis, treatment and care
Creating, reminding you of and managing appointments
Informing you about your treatment process
Meeting legal reporting obligations under health legislation, including notifications to the Ministry of Health
Handling SGK and private insurance procedures
Managing invoicing and payments
Measuring patient satisfaction and improving the quality of our service, including surveys and feedback
Internal audit, quality control and improvement of our processes
Conducting legal proceedings and meeting legal obligations
Communicating with you
Keeping the clinic physically secure (security camera recording)
Improving website performance and user experience
Telling you about campaigns, offers and news, only where you have given consent

Legal grounds for processing

We process personal data on the grounds set out in Articles 5 and 6 of the KVKK, namely:

it is expressly provided for by law, for example in health and tax legislation;
it is directly related to setting up or performing a contract, such as your treatment agreement;
it is necessary for us to meet a legal obligation;
it is necessary for the protection of public health, preventive medicine, medical diagnosis, treatment and care services;
it is necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms;
you have given your explicit consent, for example for marketing activities or the use of treatment photographs.

Who we share data with

We do not share your personal data with third parties except as described below, and in accordance with the conditions in Articles 8 and 9 of the KVKK. Only the information needed for the relevant purpose is shared, with appropriate security measures.

Ministry of Health and affiliated institutions: for legal reporting obligations
Social Security Institution (SGK): for procedures under social security legislation
Private insurance companies: for treatment covered by your insurance, with your consent
Dental laboratories: technical information needed to produce prostheses, implant components and other dental work
Imaging centres: where further examination is required
Authorised public bodies: judicial and administrative authorities, where legally requested
Service providers: companies providing IT, website hosting, email, analytics, accounting and consultancy services, with the necessary security measures (analytics data is shared in anonymised form)

How we protect your data

We take technical and administrative measures to keep personal data secure, including:

encrypted data transmission using an SSL certificate;
server infrastructure protected by firewall and antivirus software;
regular security updates and backups;
access controls to prevent unauthorised access;
confidentiality training and agreements for staff;
additional protection for health data.

We keep personal data for as long as is necessary for the purposes described above and for the periods required by the applicable legislation.

Your rights under Article 11 of the KVKK

As a data subject, you have the right to:

learn whether your personal data is processed;
request information about the processing if it has been processed;
learn the purpose of processing and whether data is used in line with that purpose;
know the third parties in Türkiye or abroad to whom your data is transferred;
request correction of incomplete or inaccurate data;
request erasure or destruction of your data under the conditions in Article 7 of the KVKK;
request that third parties to whom your data was transferred are notified of any correction, erasure or destruction;
object to a result against you arising from analysis carried out exclusively by automated systems;
claim compensation for damage you suffer as a result of unlawful processing.

How to make a request

You can exercise your rights by:

Written application: a wet-signed letter with documents confirming your identity, delivered by hand to the clinic or sent through a notary;
Email: from your registered electronic mail (KEP) address, or from an email address you have previously given to the clinic, to info@beyazgulus.com;
Contact form: through the form on our contact page.

Your application should include your name and surname, your Turkish ID number (or passport number if you are not a Turkish citizen), your residential or business address for notifications, your email address if you have one for notifications, your telephone number and the subject of your request.

We will respond as quickly as the nature of the request allows and within 30 days at the latest, free of charge. If the action requested involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

Changes to this notice

We may update this notice to reflect changes in legislation or in our data processing practices. The current version is always published on this page, with the date of the latest update shown above.

This page gives general information and is not a substitute for an examination. Whether a treatment is suitable for you, and how long it takes, is decided after your dentist has examined you and reviewed your X-rays.

Privacy policy