Privacy
Privacy notice
A short note on which data this website processes, and why.
Last updated:
Data controller
- Name
- Ayşenur Meriç Hafız (Prof. Dr. Ayşenur Meriç Hafız)
- Address
- Dikilitaş Mah. Hakkı Yeten Cad. Selenium Plaza No:10 I/11, Fulya Sk., 34349 Beşiktaş / İstanbul
- Phone
- +90 535 811 39 49
We are the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).
What we process on this website, why, and on what legal basis
Enquiry form
- Data
- Name, phone number, email address (optional), your message, and your confirmation that you have read this notice
- Purpose
- To answer your enquiry and arrange an appointment
- Legal basis (KVKK Art. 5/6)
- Art. 5/2-c: necessary for concluding a contract with you. If your message contains health information, Art. 6/3: processing by persons under a duty of confidentiality for diagnosis, treatment and care. Please do not write medical details in the form; we discuss them at your consultation.
- How it is collected
- Electronically, by automated means (Netlify Forms)
Phone, WhatsApp and email
- Data
- Your number or address and what you send us
- Purpose
- To answer you
- Legal basis (KVKK Art. 5/6)
- Art. 5/2-c; Art. 6/3 for health information
- How it is collected
- Electronically or verbally
Map on the contact page (only if you press “Load map”)
- Data
- Connection data such as your IP address and browser details, received by Google
- Purpose
- To show where the practice is
- Legal basis (KVKK Art. 5/6)
- Art. 5/1: your explicit consent, given by pressing the button. Nothing is remembered: the map loads again only when you press it again.
- How it is collected
- Automated, from Google’s servers
Server logs
- Data
- IP address, date and time, the page requested, browser type
- Purpose
- To run the site securely and diagnose errors
- Legal basis (KVKK Art. 5/6)
- Art. 5/2-f: legitimate interest (protecting the site and its visitors)
- How it is collected
- Automated (Netlify)
We make no automated decisions and do no profiling. We do not use your data for marketing without your separate, optional explicit consent, and an appointment never depends on such consent.
Recipients and transfers abroad
- Netlify, Inc. (USA): hosting of this website, storing form submissions and sending each one to us by email.
- Google LLC (USA), Google Workspace: the mailbox info@aysenurmerichafiz.com, where form submissions and your emails reach us.
- Google LLC (USA): the map on the contact page, only after you press “Load map”.
- WhatsApp LLC / Meta Platforms (USA, Ireland): if you choose to write to us on WhatsApp; WhatsApp’s own privacy policy also applies.
- Public authorities, where the law requires it.
These providers are located outside Türkiye, so the data they receive is transferred abroad within the meaning of KVKK Art. 9.
The form asks for no health information; please do not send medical details through the form, WhatsApp or email. Your data is never shared for marketing.
Retention
Enquiries are kept until your request has been handled and for as long as legal obligations require, including the emailed copies in our mailbox; form records on Netlify are kept until the practice deletes them.
Patient records are kept at the practice for the periods set by health legislation. Server logs are kept by Netlify for a limited period.
Your rights (KVKK Art. 11)
You have the right:
- to learn whether your personal data is processed, and to request information if it is;
- to learn the purpose of the processing and whether the data is used accordingly;
- to know the third parties in Türkiye or abroad to whom it is transferred;
- to request correction if it is incomplete or inaccurate;
- to request its erasure or destruction under Art. 7;
- to request that a correction, erasure or destruction be notified to the third parties it was transferred to;
- to object to a result against you that arises solely from automated analysis;
- to claim compensation for damage caused by unlawful processing.
Send your application in writing to info@aysenurmerichafiz.com or by post to the address above, following the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer within 30 days at the latest. If you are not satisfied with the answer, you may complain to the Personal Data Protection Board.
Cookies
This website sets no cookies of its own. See the cookie policy.
Changes
This notice is updated whenever the services used on the site change; the date of the current version is shown at the top.