Privacy Policy – Gür Hair Transplant Clinic
Effective Date: 11.02.2024
At Gür Hair Transplant Clinic we are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with us, our website, and our services.
1. Data Controller
The Data Controller for your personal data is:
Gür Hair Transplant Clinic
Email: info@gurhairtransplant.com
2. Data Protection Officer (DPO)
In accordance with GDPR, we have appointed a Data Protection Officer (DPO):
Name: M. Veysel Eran
Email: veysel@gurhairtransplant.com
If you have any questions about this Privacy Policy or how we handle your personal data, please contact our DPO.
3. Personal Data We Collect
We may collect and process the following types of personal data:
-
Identification information (name, surname, date of birth)
-
Contact details (email address, phone number, mailing address)
-
Medical information provided during consultations and treatments
-
Payment and billing information
-
Website usage data (cookies, IP address, device/browser type)
4. Purpose of Processing
We process your personal data for the following purposes:
-
To provide medical consultations, hair transplant and related healthcare services
-
To communicate with you regarding appointments, treatments, and inquiries
-
To comply with medical, legal, and regulatory obligations
-
To manage payments and invoices
-
To improve our website and services through analytics and cookies
5. Legal Basis for Processing
We process your personal data under the following legal grounds:
-
Consent (when you voluntarily provide information or agree to receive marketing)
-
Contractual necessity (to provide medical and treatment services)
-
Legal obligations (compliance with healthcare regulations, tax laws)
-
Legitimate interests (to improve services and ensure clinic security)
6. Data Sharing & Transfers
We may share your personal data with:
-
Authorized healthcare professionals within the clinic
-
External service providers (IT support, payment processors)
-
Regulatory authorities when legally required
We do not sell your personal data to third parties.
7. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law (e.g., medical record-keeping obligations).
8. Your GDPR Rights
Under GDPR, you have the following rights:
-
Right to access your personal data
-
Right to rectify incorrect or incomplete data
-
Right to erase your data (“right to be forgotten”)
-
Right to restrict or object to processing
-
Right to data portability
-
Right to withdraw consent at any time
To exercise these rights, please contact our DPO at veysel@gurhairtransplant.com.
9. Cookies & Tracking
Our website may use cookies and tracking technologies to improve user experience. You can manage your cookie preferences through your browser settings.
10. Security
We implement technical and organizational measures to ensure the security and confidentiality of your personal data, protecting it against unauthorized access, alteration, or disclosure.
11. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated “Effective Date.”
📩 Contact Information
For questions, concerns, or to exercise your GDPR rights, please contact:
Data Protection Officer
M. Veysel Eran
Email: veysel@gurhairtransplant.com
Gür Hair Transplant Clinic KVKK Compliant
Clarification Text on the Protection and Processing of Personal Data (KVKK Compliant)
Effective Date: 11.02.2024
At Gür Hair Transplant Clinic (“we,” “clinic,” “our”), we attach great importance to the protection of your personal data and act in full compliance with the Law on the Protection of Personal Data (KVKK) and related regulations. This clarification text has been prepared to inform you about the purposes of processing your personal data, how it is processed, to whom it may be transferred, your rights, and the security measures we take.
1. Data Controller
The “Data Controller” responsible for the processing of your personal data is:
Gür Hair Transplant Clinic
Email: info@gurhairtransplant.com
2. Data Protection Officer (DPO)
In accordance with KVKK, the person authorized to supervise data protection processes on behalf of the Data Controller is:
M. Veysel Eran
Email: veysel@gurhairtransplant.com
You may direct your questions and requests regarding data processing to the DPO.
3. Categories of Personal Data Processed
The following categories of personal data may be processed:
-
Identity information: name, surname, date of birth, etc.
-
Contact information: email address, phone number, residential address, etc.
-
Health / medical data: medical history and information shared during consultation and treatment
-
Payment / billing data: bank details, credit card information, billing address, etc.
-
Technical data: IP address, browser type, device information, cookies, site usage data, etc.
4. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
-
Providing clinic services, specialist consultations, treatment planning and follow-up
-
Managing appointments, treatments, notifications, and communication processes
-
Compliance with legal, administrative, and healthcare regulations
-
Executing payments and invoicing
-
Improving our website performance, conducting analytics, and enhancing user experience
-
Implementing security measures
5. Legal Grounds for Processing
Your personal data is processed on the following legal grounds in accordance with Articles 5 and 6 of KVKK:
-
Explicit consent: when you have given clear permission
-
Contract necessity: when required for the provision of clinical services
-
Legal obligations: compliance with healthcare, tax, and other regulations
-
Legitimate interests: limited to purposes such as clinic security and service improvement
6. Transfer of Personal Data
Your personal data may be shared with:
-
Healthcare personnel within the clinic
-
External service providers (e.g., IT service companies, payment processors)
-
Competent public authorities / regulatory bodies (where legally required)
Your personal data is never sold.
7. Data Retention
Your data will be retained only for as long as necessary for the purposes described above or as required by law. Medical records in particular are retained in accordance with the statutory retention periods under healthcare legislation.
8. Rights of the Data Subject
Under KVKK, you have the following rights:
-
To learn whether your personal data is being processed
-
To request information if it has been processed
-
To learn the purpose of processing and whether it is used accordingly
-
To request correction if it is incomplete or inaccurate
-
To request deletion or destruction when the reasons requiring processing no longer exist
-
To object to processing
-
To request human intervention if analysis is carried out by automated systems
-
To request data portability if your data is being processed by another data controller
To exercise these rights, please contact veysel@gurhairtransplant.com. Your requests will be concluded within the period specified in the KVKK (e.g., within 30 days).
9. Cookies and Tracking Technologies
Our website may use cookies and similar technologies. These are used to improve user experience, perform analytics, and enhance website performance. You may restrict or disable cookies from your browser settings, but disabling some cookies may prevent certain site features from functioning properly.
10. Security Measures
Technical and administrative measures are applied to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to data is restricted, and encryption, access controls, and firewalls are among the measures taken to prevent data leaks.
11. Clarification and Consent
Where necessary, explicit consent will be obtained from you during the data collection process. Such consent provides the legal basis for the processing of your data for the purposes described above.
12. Updates to This Text
This clarification text may be updated from time to time. Each update will include a new effective date and will be published on our website.
Contact Information / For Your Requests:
Data Controller: Gür Hair Transplant Clinic
Email: info@gurhairtransplant.com
Data Protection Officer: M. Veysel Eran
Email: veysel@gurhairtransplant.com