Personal Data Processing Notice

rusginekolog.com (Website of Dr. Irina Ergül)

This notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR) to inform users about the processing of their personal data.

1. Data Controller

Data Controller (Veri Sorumlusu):

• Irina Ergül
• Address: Bahçelievler Mah., E-5 Yanyol No: 14/B Metroport Busidence, Bahçelievler / Istanbul, Office No 1009, 10th Floor
• Phone: +90 506 886 18 86

Activity: Provision of medical services in obstetrics and gynecology

2. Sources and Categories of Personal Data

The Data Controller processes the following personal data:

2.1. Data voluntarily provided by users:

• Full name
• Email address
• Phone number
• Information submitted during consultation or appointment requests
• Other information voluntarily provided by the user

2.2. Data collected automatically:

• IP address
• Device and browser type
• Date and time of website visit
• Pages visited
• Cookies and similar tracking technologies

2.3. Special Categories of Personal Data

Medical information, including health-related data, may be processed as special categories of personal data.

Such data is processed in compliance with:

• Article 6 of Turkish Law No. 6698 (KVKK)
• Article 9 of GDPR

3. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

• Managing appointment scheduling
• Providing medical services and consultations
• Communication and notifications with users
• Handling inquiries and requests
• Improving the quality of the website and services
• Conducting statistical analysis and analytics
• Compliance with legal obligations
• Marketing and informational communications (only with explicit consent)

4. Legal Basis for Processing

The legal basis for processing personal data includes:

Under KVKK:

• Explicit consent of the data subject (Açık Rıza)
• Fulfillment of contractual obligations
• Compliance with legal obligations
• Protection of public health
• Legitimate interests of the Data Controller

Under GDPR:

• Article 6(1)(a) – Consent
• Article 6(1)(b) – Performance of a contract
• Article 6(1)(c) – Legal obligation
• Article 6(1)(f) – Legitimate interest

For Health Data Processing:

• Article 9(2)(a) – Explicit consent
• Article 9(2)(h) – Medical diagnosis and treatment

5. Data Sharing with Third Parties

Personal data may be shared with:

• Medical staff
• Partner medical institutions (e.g., Medical Park, Medicana Ataköy) strictly for providing medical services
• Service providers (hosting, analytics, CRM, communication systems)
• Government authorities when legally required
• Insurance companies if applicable

Data sharing is limited to the extent necessary for the purposes of processing and in compliance with legal requirements.

6. Cross-Border Data Transfers

Personal data may be transferred outside the user’s country of residence, including Turkey.

Such transfers are carried out in accordance with KVKK provisions and Chapter V of GDPR.

By using this website, the user consents to the potential cross-border transfer of their data.

7. Data Retention Period

Personal data is retained as follows:

• Medical data: in accordance with Turkish healthcare legislation (typically 5–10 years or longer if legally required)
• Communication data: for the period necessary to achieve processing purposes
• Technical website data: in compliance with security and legal requirements

After the retention period expires, personal data will be securely deleted or anonymized.

8. Data Subject Rights

Users have the following rights:

Under KVKK:

• To know whether their data is being processed
• To obtain information on the processing
• To request correction or deletion of their data
• To object to processing

Under GDPR:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time
• Right to lodge a complaint with the supervisory authority

Requests to exercise these rights can be submitted via:
📞 +90 506 886 18 86
📧 irinaergul@gmail.com

9. Data Security

The Data Controller implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

However, no data transmission over the Internet can be guaranteed to be completely secure.

10. Use of Cookies

The website uses cookies, including third-party cookies, for:

• Ensuring proper website functionality
• Analyzing user activity
• Improving user experience
• Marketing purposes (with explicit consent)

Users can manage cookie settings through their browser.

11. Contact Information

For all questions related to personal data processing:

• Phone: +90 506 886 18 86
• Address: Bahçelievler Mah., E-5 Yanyol No: 14/B Metroport Busidence, Bahçelievler / Istanbul
• Working hours: by appointment

12. Changes to This Notice

This notice may be updated due to legal or operational changes.

The latest version is always available on the website.

Last updated: April 2026