Pursuant to the Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by Prof. Dr. Mehmet Mahir Atasoy, acting as the data controller, within the scope explained below.
Data Controller
The data controller is Prof. Dr. Mehmet Mahir Atasoy, operating at Harbiye Mahallesi, Maçka Caddesi No:15 Floor:2, 34367 Şişli / Istanbul.
For communication, you may use the phone number +90 543 380 60 70 or the e-mail address info@dratasoy.com.
Personal Data Processed
Through the website, the contact form, the “Ask the Doctor” section, the “Ask AI” section, appointment requests and other digital channels, your name and surname, phone number, e-mail address, message content, IP address, device information, internet usage data and, if shared by you, health data may be processed. Health data constitutes special category personal data and is processed only within the framework of the relevant legislation and by taking necessary security measures.
Purposes of Processing Personal Data
Your personal data is processed for the purposes of carrying out appointment processes, conducting communication activities, evaluating medical consultation requests, responding to questions and applications submitted through the website, improving service quality, carrying out information security processes, fulfilling legal obligations and meeting retention obligations arising from legislation. Data submitted through the “Ask AI” section may be processed through automated systems for the purpose of generating responses; however, such systems do not replace medical diagnosis or treatment.
Legal Grounds for Processing Personal Data
Your personal data is processed based on the legal grounds specified in Article 5 of the KVKK, including explicit consent, the establishment or performance of a contract, fulfillment of the data controller’s legal obligations, the establishment, exercise or protection of a right, and the legitimate interests of the data controller. Your health data is processed in accordance with Article 6 of the KVKK, based on your explicit consent or in cases permitted by the relevant legislation.
Transfer of Personal Data
Your personal data may be transferred, in compliance with the KVKK and limited to what is necessary for the service, to authorized public institutions and organizations within the scope of legal obligations, to IT and technical infrastructure service providers, to hosting service providers, and to legal advisors. In the event of international data transfer, actions are taken in accordance with the applicable legislation.
Method of Collecting Personal Data
Your personal data is collected electronically through contact forms on the website, appointment requests, e-mail correspondence, telephone communications, WhatsApp communication, AI-based inquiry sections and cookies, by automatic or partially automatic means.
Cookies and Internet Usage Data
Cookies are used on the website to improve user experience, analyze site traffic and ensure technical functionality. Data obtained through cookies is processed solely for the stated purposes and in compliance with the legislation. Cookie preferences may be modified through browser settings; however, disabling certain cookies may prevent some website functions from operating properly.
Data Security
Appropriate technical and administrative security measures are taken to prevent unlawful processing of personal data, to prevent unlawful access to data and to ensure the protection of data. Additional security measures are implemented for the protection of special category personal data.
Retention Period of Personal Data
Your personal data is retained for the periods stipulated in the relevant legislation or for the duration required by the purpose of processing. Upon expiration of such periods, the data is deleted, destroyed or anonymized.
Rights of the Data Subject
Pursuant to Article 11 of the KVKK, as a data subject you have the right to learn whether your personal data is processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with its purpose, know the third parties to whom it is transferred domestically or abroad, request correction if it is incomplete or incorrectly processed, request its deletion or destruction within the framework of the relevant legislation, request notification of such transactions to third parties to whom the data has been transferred, object to the emergence of a result against you through analysis exclusively by automated systems, and request compensation for damages in case you suffer damage due to unlawful processing.
Application Method
You may submit your requests within the scope of the KVKK in writing to the above-mentioned address or send them via secure electronic signature, mobile signature or registered electronic mail to info@dratasoy.com. Your applications will be concluded as soon as possible and within thirty days at the latest.