Privacy

Privacy notice

A short note on which data this website processes, and why.

Last updated:

Data controller

Name
Ayşenur Meriç Hafız (Prof. Dr. Ayşenur Meriç Hafız)
Address
Dikilitaş Mah. Hakkı Yeten Cad. Selenium Plaza No:10 I/11, Fulya Sk., 34349 Beşiktaş / İstanbul
Email
info@aysenurmerichafiz.com
Phone
+90 535 811 39 49

We are the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).

What we process on this website, why, and on what legal basis

Enquiry form

Data
Name, phone number, email address (optional), your message, and your confirmation that you have read this notice
Purpose
To answer your enquiry and arrange an appointment
Legal basis (KVKK Art. 5/6)
Art. 5/2-c: necessary for concluding a contract with you. If your message contains health information, Art. 6/3: processing by persons under a duty of confidentiality for diagnosis, treatment and care. Please do not write medical details in the form; we discuss them at your consultation.
How it is collected
Electronically, by automated means (Netlify Forms)

Phone, WhatsApp and email

Data
Your number or address and what you send us
Purpose
To answer you
Legal basis (KVKK Art. 5/6)
Art. 5/2-c; Art. 6/3 for health information
How it is collected
Electronically or verbally

Map on the contact page (only if you press “Load map”)

Data
Connection data such as your IP address and browser details, received by Google
Purpose
To show where the practice is
Legal basis (KVKK Art. 5/6)
Art. 5/1: your explicit consent, given by pressing the button. Nothing is remembered: the map loads again only when you press it again.
How it is collected
Automated, from Google’s servers

Server logs

Data
IP address, date and time, the page requested, browser type
Purpose
To run the site securely and diagnose errors
Legal basis (KVKK Art. 5/6)
Art. 5/2-f: legitimate interest (protecting the site and its visitors)
How it is collected
Automated (Netlify)

We make no automated decisions and do no profiling. We do not use your data for marketing without your separate, optional explicit consent, and an appointment never depends on such consent.

Recipients and transfers abroad

  • Netlify, Inc. (USA): hosting of this website, storing form submissions and sending each one to us by email.
  • Google LLC (USA), Google Workspace: the mailbox info@aysenurmerichafiz.com, where form submissions and your emails reach us.
  • Google LLC (USA): the map on the contact page, only after you press “Load map”.
  • WhatsApp LLC / Meta Platforms (USA, Ireland): if you choose to write to us on WhatsApp; WhatsApp’s own privacy policy also applies.
  • Public authorities, where the law requires it.

These providers are located outside Türkiye, so the data they receive is transferred abroad within the meaning of KVKK Art. 9.

The form asks for no health information; please do not send medical details through the form, WhatsApp or email. Your data is never shared for marketing.

Retention

Enquiries are kept until your request has been handled and for as long as legal obligations require, including the emailed copies in our mailbox; form records on Netlify are kept until the practice deletes them.

Patient records are kept at the practice for the periods set by health legislation. Server logs are kept by Netlify for a limited period.

Your rights (KVKK Art. 11)

You have the right:

  • to learn whether your personal data is processed, and to request information if it is;
  • to learn the purpose of the processing and whether the data is used accordingly;
  • to know the third parties in Türkiye or abroad to whom it is transferred;
  • to request correction if it is incomplete or inaccurate;
  • to request its erasure or destruction under Art. 7;
  • to request that a correction, erasure or destruction be notified to the third parties it was transferred to;
  • to object to a result against you that arises solely from automated analysis;
  • to claim compensation for damage caused by unlawful processing.

Send your application in writing to info@aysenurmerichafiz.com or by post to the address above, following the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer within 30 days at the latest. If you are not satisfied with the answer, you may complain to the Personal Data Protection Board.

Cookies

This website sets no cookies of its own. See the cookie policy.

Changes

This notice is updated whenever the services used on the site change; the date of the current version is shown at the top.