Data Protection

Data Protection Notice (KVKK)

Last updated: 24 June 2026 · Medical Center Klinik Istanbul

This notice has been prepared by Medical Center Klinik Istanbul as the data controller, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Data Controller

Medical Center Klinik Istanbul
Kozyatağı Mh. Gülbahar Sk. No:13, Ar Plaza C Blok, Kadıköy, Istanbul, Turkey
Email: info@medicalcenter.clinic · Phone: 0850 309 54 19

2. Personal Data Processed

Identity: Name, surname, date of birth, nationality
Contact: Email, phone number, country of residence
Health Data (Special Category): Medical history, diagnoses, laboratory results, imaging reports
Transaction Data: Requested treatment, appointment details, communication records
Technical Data: IP address, browser information, website usage data

3. Purposes of Processing

Planning and delivering healthcare services
Coordinating consultation and treatment processes
Ensuring patient safety
Fulfilling legal obligations
Providing post-treatment aftercare services
Improving service quality

4. Legal Basis

Your explicit consent (particularly for health data)
Necessity for the performance of a contract
Compliance with a legal obligation
Legitimate interests (subject to data minimisation)
Processing by healthcare professionals for provision of health services

5. Data Sharing

Your data may be shared with partner clinics and specialist physicians (to arrange treatment), competent public authorities (legal obligations), and IT infrastructure providers (under data processing agreements). Your data is never sold or used for commercial purposes.

6. Retention Periods

Contact and consultation data: 3 years from last contact
Patient medical records: Minimum 5 years from last treatment (as required by Turkish health law)
Website technical data: 12 months

7. Your Rights (KVKK Article 11)

To learn whether your personal data is being processed
To request information if your data has been processed
To learn the purpose of processing and whether data is used accordingly
To know third parties to whom data has been transferred
To request correction of incomplete or inaccurate data
To request deletion or destruction of data
To object to automated decision-making
To claim compensation for damages arising from unlawful processing

8. How to Apply

To exercise your rights, please contact us at info@medicalcenter.clinic with proof of identity. Applications will be responded to within 30 days.

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority: www.kvkk.gov.tr