At Dr. Serdar Bora Bayraktaroğlu Muayenehanesi, we attach importance to the privacy of website visitors and persons who contact us. This Privacy Policy explains what information may be processed when the serdarborabayraktaroglu.com website is used, how that information is used, and what rights users have.

1. Scope of the policy

This policy covers the following:

• The serdarborabayraktaroglu.com domain name and pages connected to the website
• Cookie and analytics technologies
• YouTube and Google Maps content
• WhatsApp, Instagram and Facebook links
• Email and telephone communications initiated through the website

Third-party platforms are subject to their own privacy policies.

2. Direct collection of data on the website

The website does not provide the following features:

• Contact or appointment form
• Membership system
• Online payment
• User comments
• Newsletter subscription
• Photograph or document upload area

Accordingly, the website does not directly request a visitor’s name, telephone number, email address, payment details or health information. However, if you voluntarily use the telephone, email or WhatsApp link, information that you share through the relevant communication channel may be processed.

3. Information that may be processed automatically

When you visit the website, technical information such as your IP address, device and browser information, date of visit, pages viewed, error logs, approximate location and cookie preferences may be processed automatically.

This information may be used for the following purposes:

• Ensuring that the website operates
• Protecting security
• Resolving technical problems
• Analysing use of the website
• Improving content and the user experience

4. Google services

Google Analytics 4

This service is used to measure website traffic, pages visited and usage statistics. Google Analytics is a non-essential analytics service, and the relevant cookies should not operate before the user has given permission.

Google Tag Manager

This service is used to manage analytics and other tags on the website. Tags run through Google Tag Manager are subject to the user’s cookie preference according to the category to which each tag belongs.

Google Search Console

This service is used to monitor the technical status and performance of the website in Google search results.

YouTube

YouTube may be used to display video content on the website. YouTube content may be blocked until the user permits functional cookies or the relevant cookie category.

Google Maps

Google Maps may be used to show the location of the clinic. Google may process technical data or cookies when map content is loaded.

Google Workspace

Google Workspace is used to conduct corporate email communications.

5. WhatsApp

When you click the WhatsApp button on the website, you are directed to an external platform operated by WhatsApp.

If you communicate through WhatsApp, the following information may also be processed under WhatsApp’s own terms:

• Your telephone number
• Your WhatsApp profile information
• The content of your messages
• Images and documents that you voluntarily send

WhatsApp correspondence is retained for two years from the date of the last communication. Where there is a legal dispute or a statutory retention requirement, the relevant records may be retained for a longer period.

6. Instagram and Facebook

Instagram and Facebook are used on the website only as links. Content from these platforms is not embedded in the website. If you click a link and visit the relevant platform, data processing takes place under the control of that platform.

7. Patient before-and-after images

The website may contain before-and-after patient images for which written publication permission has been obtained from the relevant person. In some images, a face or distinctive physical characteristics may be visible.

The following principles apply to publication of the images:

• Obtaining written permission
• Providing information about the purpose of publication
• Allowing the person to withdraw permission
• Removing the image within a reasonable period after a withdrawal request

The patient’s name or directly identifying information is not published together with the images. This Privacy Policy does not replace the separate image recording and publication permission form obtained from patients.

8. Cookies

The website may use cookies to enable essential functions, ensure security, store cookie preferences, measure usage statistics and display third-party content.

Non-essential cookies are not activated without the user’s active choice. Through the cookie panel, users may:

• Accept all cookies
• Reject non-essential cookies
• Make category-based choices
• Withdraw consent previously given

Detailed information about cookies is provided in the Cookie Policy.

9. Sharing of information

Information may be shared with the following parties, limited to the purpose of processing:

• Hosting and server service providers
• Technical maintenance and security service providers
• Google services
• WhatsApp and Meta services
• Legal and consultancy service providers
• Public institutions and organisations authorised by law

Personal data are not sold or supplied to third parties as commercial data.

10. International transfers of data

Because global service providers such as Google and Meta are used, personal data may be transferred to systems abroad or made accessible from abroad. International transfers must be carried out in accordance with the legal transfer conditions set out in the applicable data protection legislation.

11. Retention of information

Data are retained only for the period necessary for the processing purpose and the relevant legal obligation. When the retention purpose ends, the information is deleted, destroyed or anonymised.

WhatsApp and general communication correspondence is retained for two years from the date of the last communication. Patient images may be published until publication permission is withdrawn or the purpose of publication ends.

12. Information security

Appropriate technical and administrative measures are implemented to protect personal data against unauthorised access, unlawful use, loss, alteration and unauthorised disclosure. Nevertheless, no transfer of data over the internet can be guaranteed to be completely secure.

13. Children’s privacy

The website is not directed specifically at children. Persons under the age of 18 should not share personal or health data by telephone, email or WhatsApp without the knowledge of a parent or legal representative.

14. Visitors from the European Union and the United Kingdom

The website may also contain information and service promotion directed at persons located in the European Union and the United Kingdom. Where applicable, such persons may have the following rights:

• Access to their data
• Correction of their data
• Requesting erasure
• Restriction of processing
• Objecting to processing
• Data portability
• Withdrawal of consent given
• Lodging a complaint with the competent data protection authority

15. Contact

16. Amendments to the policy

This policy may be updated if the services used or the applicable legal rules change. The current version becomes effective on the date it is published on the website.