Privacy Policy for Dentsolute Dental Clinic
Effective Date: 19/09/2024
Dentsolute Dental Clinic, located at Şirinyalı, 1496. Sk. Dolay Apt No: 2 Daire: 1, 07160
Muratpaşa/Antalya, Turkey, is committed to protecting the privacy of all individuals who
interact with us, whether through our clinic or website. We comply with Turkey’s Personal Data
Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection
Regulation (GDPR), ensuring that personal data is collected, processed, and stored securely.
This privacy policy provides a framework for how we handle, protect, and secure personal data
both within Turkey and from individuals around the world who visit our website or receive our
services.
1. Data Controller Information
The data controller responsible for processing your data is:
• Dentsolute Dental Clinic
• Address: Şirinyalı, 1496. Sk. Dolay Apt No: 2 Daire: 1, 07160 Muratpaşa/Antalya, Turkey
• Contact: info@dentsolute.com
2. What Personal Data Do We Collect?
We collect personal data to provide dental services, comply with legal obligations, and improve
our services. The data we collect includes:
• Identification Information: Name, surname, gender, date of birth.
• Contact Information: Email address, phone number, postal address.
• Health Information: Medical and dental records, treatment details (considered
sensitive personal data).
• Financial Information: Payment details such as credit card information.
• Technical Data: IP address, browser type, device information, and cookies for website
optimization.
3. How Do We Use Your Data?
We process personal data for the following purposes:
• Dental Services: To provide medical consultations, diagnosis, and treatment.
• Compliance with Legal Obligations: As required by KVKK, GDPR, and local laws.
• Communications: To respond to inquiries or provide information about your
appointments or treatment.
• Payment Processing: To handle financial transactions securely.• Website Analytics: To improve user experience on our website.
4. Data Protection Framework
At Dentsolute, we follow strict data protection frameworks in line with both KVKK and GDPR to
safeguard your personal data, whether you are located in Turkey or elsewhere. Below is a
summary of the measures and practices we have in place:
Framework Purpose Description
Data Processing in
Compliance with
KVKK and GDPR
Ensures lawful
processing of data
We process personal data in accordance with
KVKK and GDPR, ensuring that all data processing
activities are legal, fair, and transparent.
Explicit Consent
Complies with
consent
requirements
When necessary, we obtain explicit consent for
processing sensitive data (e.g., medical records)
and marketing activities. Consent can be
withdrawn at any time.
Data Encryption Protects sensitive
data
All sensitive personal data, such as health and
payment information, is encrypted during
transmission and storage using industry-standard
security protocols.
Access Control Restricts access to
personal data
Access to personal data is restricted to authorized
personnel only, ensuring that only those who need
access for legitimate purposes can handle the
data.
Regular Audits Ensures ongoing
compliance
We perform regular internal audits to ensure our
data protection practices comply with KVKK and
international standards like the GDPR.
Data Minimization Collects only
necessary data
We adhere to the principle of data minimization,
meaning we collect only the personal data
necessary for the purposes outlined in this policy.
Data Retention
Policy
Controls the
storage period of
data
We retain personal data only for as long as
necessary for medical, legal, or operational
reasons, after which it is securely deleted or
anonymized.
Backup and
Recovery
Protects data from
accidental loss
Regular backups of critical data are maintained,
and we have data recovery processes to safeguard
against accidental data loss or system failures.Framework Purpose Description
Employee Training
Promotes
responsible data
handling
All staff members handling personal data receive
training on KVKK and GDPR to ensure they manage
data responsibly and securely.
Incident Response
Responds to data
breaches
effectively
We have an incident response plan to manage
potential data breaches, in compliance with KVKK
and GDPR. In case of a breach, necessary steps
will be taken, including reporting to relevant
authorities.
Cross-Border Data
Transfers
Protects data
transferred
internationally
When transferring personal data outside Turkey, we
ensure compliance with KVKK and international
regulations, applying safeguards such as
contractual clauses or approvals from authorities.
5. Legal Basis for Processing Data
We process personal data based on several legal grounds:
• Consent: Where consent is required, particularly for processing sensitive personal data
such as medical records.
• Contractual Necessity: Processing data to fulfil the contract for the services you have
requested.
• Legal Obligation: To comply with Turkish laws, KVKK, and regulations related to
medical record retention and other legal requirements.
• Legitimate Interest: Processing personal data for purposes such as improving our
services, provided this doesn’t conflict with your privacy rights.
6. Your Rights Under KVKK and GDPR
As a data subject, you have certain rights under KVKK and GDPR, depending on your location:
• Right to Access: Request access to your personal data.
• Right to Correction: Ask for corrections to your inaccurate or incomplete data.
• Right to Deletion: Request deletion of your data where permitted by law.
• Right to Restrict Processing: Request a limitation on how we process your data.
• Right to Data Portability: Request the transfer of your data to another service provider.
• Right to Object: Object to the processing of your data based on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time for data processed
based on your consent.
To exercise any of these rights, please contact us at info@dentsolute.com7. Data Sharing
We do not sell or rent your personal data. We may share it with:
• Service Providers: Such as payment processors or IT service providers to deliver
services.
• Legal Authorities: If required by law or in response to a legal process.
• International Transfers: If we transfer data internationally, we ensure safeguards are in
place in compliance with KVKK and GDPR.
8. Cookie Policy
Our website uses cookies to provide an optimized experience for our users. Cookies are small
text files that store information on your device. We use different types of cookies, including:
• Essential Cookies: Required for the operation of the website.
• Analytics Cookies: Used to track user activity on the site and improve functionality.
• Marketing Cookies: Used for advertising and personalized content.
You can manage cookie settings through your browser or the cookie banner on our website. You
can also choose to opt-in or opt-out of non-essential cookies.
9. Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this privacy
policy, in compliance with KVKK and relevant legal requirements. When no longer required, we
securely delete or anonymize your data.
10. International Data Handling
We understand the importance of protecting personal data, regardless of where it originates.
We take necessary steps to ensure that all personal data collected from individuals worldwide
is treated with the same level of care and protection as data processed within Turkey, complying
with KVKK and international standards, such as GDPR, when applicable.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in legal requirements or
how we handle data. Significant updates will be posted on our website.
12. Contact Information
For questions about this privacy policy or to exercise your data protection rights, please contact
us:
• Email: info@dentsolute.com
• Address: Şirinyalı, 1496. Sk. Dolay Apt No: 2 Daire: 1, 07160 Muratpaşa/Antalya, TurkeyThank you for trusting Dentsolute with your personal data. We are committed to ensuring its
protection, security, and lawful processing.