This notice is provided by Tuna Ağız ve Diş Sağlığı Polikliniği ("Tuna Diş Polikliniği"), acting as data controller, pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("the Law" or "KVKK").
1. Identity of the data controller
Name: Tuna Ağız ve Diş Sağlığı Polikliniği ("Tuna Diş Polikliniği") Address: Noter Sok. No:18/3, Caddebostan, Kadıköy / İstanbul Email: info@dttunaclinic.com Phone: 0 533 400 88 62
2. What personal data we process
Identity and contact information: your name and surname, phone number and email address; and, once a patient record is opened, your national identification number, date of birth and home address.
Your health data (special category personal data): your medical history, current medications, any allergies and chronic conditions, findings from intraoral examinations, radiographs taken, your treatment plan, and records of the procedures carried out on you.
Data relating to transaction security: the IP address and submission time attached to requests you send through the forms on our website; kept for a limited period to help prevent misuse.
Images: intraoral and/or facial photographs, taken only where treatment planning requires them and with your explicit consent.
The appointment and contact forms on our website do not ask for health information. Please share details about your medical condition verbally, at your examination, rather than writing them into a form.
3. Why we process your data
- To receive, schedule and confirm your appointment requests
- To deliver dental care and carry out diagnosis and treatment
- To open your patient file and meet our obligation to keep medical records
- To respond to the requests you send us
- To handle invoicing and meet obligations arising from fiscal legislation
- To meet notification and archiving obligations required by health legislation
- To monitor the quality of our service and keep our website secure
4. The legal grounds for processing
Your identity and contact data are processed on the basis of Article 5/2-(c) of the KVKK (necessary for the establishment or performance of a contract), Article 5/2-(ç) (necessary to fulfil a legal obligation), and Article 5/2-(f) (necessary for our legitimate interests).
Your health data are processed under Article 6/3 of the KVKK, for purposes of protecting public health, preventive medicine, and providing medical diagnosis, treatment and care, and only by healthcare staff bound by a duty of confidentiality. Any processing beyond these purposes will require your separate, explicit consent.
5. Who your data may be shared with
Your personal data may be transferred to third parties in the following circumstances and only to the extent described:
- to competent public authorities where legally required (for example, the Ministry of Health, courts, or the Social Security Institution), as necessary to meet our legal obligations;
- to our accountant or accounting service provider, solely for invoicing purposes and limited to that purpose;
- to the IT providers who support our website and technical infrastructure, limited to what is technically necessary.
Requests you submit through the forms on our website may pass through the infrastructure of a third-party form-delivery provider acting on the clinic's behalf, so that your message reaches us and can be answered.
Your treatment and health data are never shared with third parties for marketing purposes, and are never sold.
6. How your data is collected
We collect your personal data through the appointment and contact forms on our website, telephone and WhatsApp conversations, the patient information and consent forms you complete at the clinic, and the medical records created during your examination and treatment — using a mix of automated and non-automated methods.
7. How long your data is kept
Your patient file and medical records are retained for the minimum period required by health legislation — as a general rule, 20 years from the date of your last procedure. Financial records are kept for 5 years under the Tax Procedure Law, and technical data relating to form submissions is kept no longer than the purpose requires. Once these periods end, your data is deleted, destroyed or anonymised.
8. Your rights under the KVKK
Under Article 11 of the Law, you have the right to: learn whether your personal data is being processed; request information about it if so; learn the purpose of the processing and whether your data is used accordingly; know the third parties, in Turkey or abroad, to whom your data has been transferred; request correction where your data is incomplete or inaccurate; request its deletion or destruction; request that any such correction, deletion or destruction be notified to the third parties your data was transferred to; object to a result that is to your detriment arising solely from automated analysis of your data; and claim compensation for damage suffered as a result of unlawful processing.
9. How to exercise your rights
You may submit requests concerning the rights above in writing, in the manner set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, either to Noter Sok. No:18/3, Caddebostan, Kadıköy / İstanbul or to info@dttunaclinic.com. Your request will be concluded within 30 days at the latest, depending on its nature.
10. Data relating to child patients
Where the patient is a child, the health data processed belongs to the child, while appointments, consent and communication are handled by a parent or legal guardian. The contact details requested on the appointment form are the guardian's, and that capacity is declared on the form.
Information about treatment and consent for it are given to the person holding custody or guardianship. In situations such as divorce or joint custody, the sharing of information follows the document establishing custody; the clinic does not disclose patient information to a third party without it.
Photographs, intraoral images and radiographs of a child are kept solely for treatment and medical records. Using such images for promotion, social media or teaching is out of the question without separate, explicit consent — and even where such consent has been given, it can be withdrawn.
Last updated: August 2026