Visitor Privacy Notice

ON THE PROTECTION OF PERSONAL DATA

WEBSITE VISITOR PRIVACY NOTICE

Assoc. Prof. Dr. Nilay u015eengu00fcl (hereinafter referred to as u201cthe Clinicu201d) , acting as the data controller, and in accordance with the principle of protecting the privacy of personal life above all else, will record, classify, store, and updated, and processed in accordance with the conditions for processing set forth in the Law; and transferred to third parties to the extent permitted by law.

This Privacy Notice has been prepared in accordance with applicable laws and regulations, particularly the Law, as well as the rules set forth in the regulations, circulars, decisions, and guidelines published by the Board. In the event that the Law or other relevant legislation is amended after the publication date of this Privacy Notice, and the Privacy Notice becomes inconsistent with such amendments, the amended provisions and rules shall apply. The Clinic monitors all circulars, decisions, and guidelines published by the Board, and the rules set forth in the Privacy Notice are kept up to date.

1. DATA SUBJECT/DATA SUBJECT

The data subjects/data subjects covered by this Privacy Notice are all natural persons who visit the nilaysengul.com website, whose personal data is processed by the Clinic.

2. IDENTITY OF THE DATA CONTROLLER AND REPRESENTATIVE

In accordance with the Law, your personal data will be collected and processed by Assoc. Prof. Dr. Nilay u015eengu00fcl, acting as the data controller, within the scope described below.

If you have any questions regarding the processing of your personal data, you may contact the Clinicu2019s Contact Person via the email address info@nilaysengul.com.

3. PURPOSES OF PROCESSING PERSONAL DATA, LEGAL BASIS FOR PROCESSING, AND METHODS OF COLLECTION

The Clinic may record, store, update, transfer to third parties, classify, and process your personal data in a manner and to the extent consistent with the conditions set forth under the heading u201cConditions for the Processing of Personal Datau201d in Article 5 of the Law. The Clinic clearly states the purposes of processing personal data and processes personal data within the scope of purposes related to its business activities.

Your Personal Data collected through the channels and methods specified in this Privacy Notice is processed by the Clinic for the following purposes and on the following legal grounds.

Data Category: Identification Information
Personal Data Processed	Purposes of Personal Data Processing u00a0
u00b7 First Name u00b7 Last Name	Creation of Visitor Records, Recording of Questions, Requests, and Complaints Submitted via the Website, Evaluation and Resolution, Conducting Communication Activities, Providing Responses to Questions, Requests, and Complaints Submitted via the Website, Ensuring Activities Are Conducted in Compliance with Legislation, Ensuring the Security of the Data Controlleru2019s Operations, Carrying Out Information Security Processes, and Carrying Out Storage and Archiving Activities
Legal Grounds for the Processing of Personal Data	Your personal data is processed by the Clinic to achieve the purposes listed above, primarily based on the grounds specified in Article 5 of the Personal Data Protection Law (KVKK); u00b7 Explicitly provided for by law, u00b7 The necessity of processing data for the data controlleru2019s legitimate interests, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject legal grounds set forth in Article 5 of the KVKK.
Methods of Collecting Personal Data	Your personal data listed above is collected through the contact forms available on the website.

Data Category: Contact Information
Personal Data Processed	Purposes of Personal Data Processing u00a0
u00b7 Phone Number u00b7 Email Address	Creation of Visitor Records, Recording of Questions, Requests, and Complaints Submitted via the Website, Evaluation and Resolution, Conducting Communication Activities, Providing Responses to Questions, Requests, and Complaints Submitted via the Website, Ensuring Activities Are Conducted in Compliance with Legislation,u00a0 Ensuring the Security of the Data Controlleru2019s Operations, Carrying Out Information Security Processes, and Carrying Out Storage and Archiving Activities
Legal Grounds for the Processing of Personal Data u00a0 u00a0 u00a0 u00a0 u00a0	Your personal data is processed by the Clinic to achieve the purposes listed above, primarily based on the grounds specified in Article 5 of the Personal Data Protection Law (KVKK); u00b7 Where expressly provided for by law, u00b7 The necessity of processing data for the data controlleru2019s legitimate interests, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject, legal grounds set forth in Article 5 of the KVKK.
Methods of Collecting Personal Data	Your data is collected through the contact forms available on the website.
Data Category: Transaction Security Information u00a0 u00a0 u00a0
Processed Personal Data	Purposes of Personal Data Processing
u00b7 IP Address u00b7 Duration of Website Visit u00b7 Essential Cookies	Ensuring the Basic Functioning of the Website and Enhancing Its Functionality, Creating Visitor Records, Conducting Activities in Compliance with Legislation,u00a0 Ensuring the Security of the Data Controlleru2019s Operations, Implementing Information Security Processes, and Carrying Out Storage and Archiving Activities
Legal Grounds for the Processing of Personal Data u00a0 u00a0 u00a0 u00a0 u00a0 u00a0 u00a0 u00a0	Your personal data is processed by the Clinic to achieve the purposes listed above, primarily based on the grounds specified in Article 5 of the Personal Data Protection Law (KVKK); u00b7 Where expressly provided for by law, u00b7 The necessity of processing data for the data controlleru2019s legitimate interests, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject, legal grounds set forth in Article 5 of the KVKK.
Methods of Collecting Personal Data u00a0	Your data is collected via electronic forms and the website.
Other Information u00a0
Processed Personal Data	Purposes of Personal Data Processing u00a0
u00b7 Subject of Inquiry/Request/Complaint	Creation of Visitor Records, Recording of Questions, Requests, and Complaints Submitted via the Website, Evaluation and Resolution, Conducting Communication Activities, Providing Responses to Questions, Requests, and Complaints Submitted via the Website, Ensuring Activities Are Conducted in Compliance with Legislation,u00a0 Ensuring the Security of the Data Controlleru2019s Operations, Carrying Out Information Security Processes, and Carrying Out Storage and Archiving Activities
Legal Grounds for the Processing of Personal Data u00a0 u00a0 u00a0 u00a0 u00a0 u00a0 u00a0 u00a0	Your personal data is processed by the Clinic to achieve the purposes listed above, primarily based on the grounds specified in Article 5 of the Personal Data Protection Law (KVKK); u00b7 Where expressly provided for by law, u00b7 The necessity of processing data for the data controlleru2019s legitimate interests, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject, legal grounds set forth in Article 5 of the KVKK.
Methods of Collecting Personal Data	Your data is collected through the contact forms available on the website.

4. TRANSFER OF PERSONAL DATA

Your collected personal data is transferred by the Clinic; within the scope of the data processing purposes listed above and in accordance with the conditions for processing personal data specified in Articles 8 and 9 of the Law, with law firms, financial advisors, and other consultants for the purpose of obtaining legal advisory services; with companies and individuals providing information technology, cloud, and archiving services for the purposes of storage and archiving activities and ensuring data security; and, upon request, with authorized public institutions and organizations.

5. SHARING OF PERSONAL DATA WITH THIRD PARTIES LOCATED ABROAD

Your personal data may be shared abroad in the context of email addresses used to contact relevant parties being hosted on email service infrastructure located in data centers outside Turkey.

6. YOUR RIGHTS UNDER THE LAW

As data subjects, you may submit requests regarding your rights using the methods outlined in the data subject request procedure (based on the Communiquu00e9 on the Procedures and Principles for Applications to the Data Controller) by filling out the Data Subject Request Form published on the nilaysengul.com website, or in writing using another document containing the mandatory information listed on the request form, or via a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using the email address previously provided to the Clinicand registered in the Clinicu2019s system, to the Clinicu2019s contact address at info@nilaysengul.com or to the address of Memorial u015eiu015fli Hospital, u015eiu015fli / Istanbul, the Clinic will process the request free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if the process involves additional costs, the Clinic will charge the fee set by the Personal Data Protection Board. In this context, data subjects have the right to:

• The right to learn whether their personal data has been processed,
• Request information regarding the processing of their personal data,
• To learn the purpose of the processing of their personal data and whether it is being used in accordance with that purpose,
• To know the third parties to whom their personal data has been transferred, whether within or outside the country,
• Request the correction of their personal data if it has been processed incompletely or incorrectly, and request that the third parties to whom the personal data has been transferred be notified of such correction,
• To request the erasure or destruction of personal data if the grounds for processing no longer exist, even if the data was processed in accordance with the law and other relevant legal provisions, and to request that third parties to whom the personal data was transferred be notified of this action,
• To object to a decision made solely through the automated processing of personal data that results in adverse consequences for the individual,
• To request compensation for damages suffered as a result of the unlawful processing of personal data

These are the individualu2019s rights.

Assoc. Prof. Dr. Nilay u015eengu00fcl guarantees that, in the event of any changes to the applicable legislation and any inconsistency between such changes and this Website Visitor Information Notice on the Protection of Personal Data, the provisions of the legislation shall prevail.

Data Controller: Assoc. Prof. Dr. Nilay u015eengu00fcl

Address : Memorial u015eiu015fli Hospital, u015eiu015fli / Istanbul

Phone : 0542 189 10 40