# Privacy Policy

> URL: https://beyazadsp.com/en/privacy-policy/
> Language: English
> Other languages: tr: https://beyazadsp.com/gizlilik-politikasi/ · en: https://beyazadsp.com/en/privacy-policy/ · bg: https://beyazadsp.com/bg/politika-za-poveritelnost/ · de: https://beyazadsp.com/de/datenschutzerklaerung/

This Privacy Policy explains how your personal data is processed when you visit **beyazadsp.com**, fill in one of our forms, or contact us by phone, e-mail or WhatsApp. For information about the processing of patient data during treatment, please see our [Personal Data Protection Notice (KVKK)](https://beyazadsp.com/en/kvkk/).

## Data controller

**Derin Beyaz Sağlık Ticaret Turizm Limited Şirketi** (Beyaz Dental Clinic – Özel Beyaz Ağız ve Diş Sağlığı Polikliniği)
Kazımiye Mahallesi, Barbaros 4. Sokak No:4, Çorlu / Tekirdağ, Türkiye
Phone: +90 282 255 55 54 · E-mail: info@beyazadsp.com

## What personal data we process

- **Contact and appointment forms:** your name, phone number, e-mail address, subject and message.
- **X-ray submission form:** the information above plus the X-ray or image file you upload. These files are health data.
- **Phone, e-mail and WhatsApp conversations:** the contact details and messages you send us.
- **Website usage data:** only if you give consent, statistical information collected through Google Analytics, such as pages visited, device and browser type and approximate location (city/country). See our [Cookie Policy](https://beyazadsp.com/en/cookie-policy/) for details.
- **Technical logs:** IP address, date and time and browser information kept by the servers hosting the website for security purposes.

## Purposes and legal bases

| Purpose | Legal basis (Turkish Law No. 6698, KVKK) |
| --- | --- |
| Responding to your appointment and information requests, calling you back | Necessary to enter into a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) |
| Preliminary review of the X-ray you send by our dentists | Your explicit consent and the purpose of medical diagnosis and treatment (Art. 6) |
| Keeping the website secure and preventing misuse | Legitimate interest (Art. 5/2-f), legal obligation (Art. 5/2-ç) |
| Measuring and improving how the website is used | Your explicit consent via the cookie banner (Art. 5/1) |
| Complying with legal obligations | Required by law (Art. 5/2-a), legal obligation (Art. 5/2-ç) |

For visitors in the European Union, the corresponding legal bases under the GDPR are Art. 6(1)(a), (b), (c) and (f) and, for health data, Art. 9(2)(a) and (h). Fields marked as required in our forms are necessary for us to respond to your request; all other fields are optional.

## Health data

X-ray images sent through the form and any health information you share in your messages are **special categories of personal data**. They are processed only by our dentists and authorised staff, for preliminary assessment and treatment planning, in accordance with Article 6 of the KVKK. We never use this data for advertising or marketing.

## Who we share data with

- **Our service providers:** technology providers we use to host the website, deliver form submissions and provide e-mail. Some of these providers may store data on servers outside Türkiye; any such transfer is made in accordance with Article 9 of the KVKK.
- **Google:** Google Analytics only if you consent, YouTube when you play a video, Google Maps when you view a map.
- **Meta (WhatsApp):** when you write to us through the WhatsApp button, the conversation takes place on WhatsApp's infrastructure.
- **Competent public authorities:** where and to the extent required by law.

We never sell or rent your personal data.

## How long we keep it

Information you send us through forms and messages is kept for a maximum of **2 years** after your request has been completed. Requests that lead to treatment become part of your patient record and are kept for the periods required by Turkish health legislation. Analytics data retention is limited to a maximum of 14 months in Google Analytics. Data is deleted, destroyed or anonymised when its retention period ends.

## Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties it is transferred to; to request correction of incomplete or inaccurate data; to request deletion or destruction where the conditions are met; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing. You may withdraw your consent at any time.

If you live in the European Union, you can also exercise your GDPR rights of access, rectification, erasure, restriction of processing, data portability and objection by contacting us, and you have the right to lodge a complaint with the data protection authority in your country.

## How to make a request

Send your request in writing, with information that verifies your identity, to Kazımiye Mahallesi, Barbaros 4. Sokak No:4, Çorlu / Tekirdağ, Türkiye, or with a secure electronic signature to **beyazdiscorlu@hotmail.com**. We will respond free of charge within 30 days at the latest.

## Security

The website runs exclusively over an encrypted connection (HTTPS). Only staff who need your data for their work can access it, and we take the technical and organisational measures needed to protect it against unauthorised access, loss and misuse.

## Children

Requests on behalf of persons under 18 should be made by a parent or legal guardian.

## Changes

We may update this policy when necessary. The current version is always published on this page. Last updated: 29 September 2026.