Privacy Policy
1. Data we collect
- Contact details you give us: name, phone or WhatsApp number, email address, country.
- Information you send for an assessment: photographs, age, medical history, medication and prior surgeries, and the goals you describe. This is health data and is treated as a special category of personal data.
- Messages: the content of your messages to us via WhatsApp, Instagram direct messages, Instagram or Facebook comments, email, contact forms or telephone.
- Website usage data: IP address, device and browser type, pages viewed, referring page, and similar analytics data collected through cookies and comparable technologies.
2. Why we use it and on what legal basis
- To answer your enquiry and arrange a consultation — necessary to take steps at your request before entering into a contract.
- To carry out a pre-operative assessment and provide medical services — your explicit consent, and the provision of health care by a medical professional bound by professional secrecy.
- To operate and improve the website and our services — our legitimate interest in running a functioning, secure website, and your consent where cookies require it.
- To meet legal, medical-record and tax obligations — compliance with a legal obligation.
We do not sell your personal data, and we do not use your photographs or story in any marketing material unless you have given separate, written, and revocable consent for that specific use.
3. Automated processing of public comments and messages
We use automated tools, including artificial intelligence, to help manage the comments and messages on our social media accounts. These tools may classify a public comment, hide comments that are abusive, obscene or spam, publish a short reply to a positive comment, or send an automated first reply to a question. Messages that describe a complaint, a medical concern or a legal matter are never answered automatically; they are passed to a person. You can always reach a human by writing to the address in section 8, and no automated decision is made that produces legal effects concerning you or similarly significantly affects you.
4. Who we share data with
We share personal data only with service providers that process it on our behalf, under contract and on our instructions:
- Meta Platforms (Instagram, Facebook, WhatsApp Business) — messaging and social media communication.
- Our customer relationship management and workflow automation providers — storing enquiries and coordinating responses.
- Our AI service provider — classifying and drafting responses to comments and messages.
- Website hosting and analytics providers.
- Hospitals, anaesthetists and laboratories involved in your treatment, where treatment goes ahead.
Some of these providers are located outside Türkiye. Where personal data is transferred abroad, we rely on your explicit consent or on the safeguards permitted by applicable law, including standard contractual clauses.
5. How long we keep it
Enquiries that do not result in treatment are kept for up to two years, then deleted. Where treatment takes place, medical records are kept for the period required by Turkish health legislation. Website analytics data is kept for up to 26 months.
6. Security
We apply technical and organisational measures appropriate to the sensitivity of the data, including access control, encryption in transit, and restriction of access to the clinic staff who need it. Please do not send medical photographs or health information through public comments; use WhatsApp or email instead.
7. Your rights
Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where it applies to you, the UK GDPR and EU GDPR, you may ask us to confirm whether we hold data about you, to give you a copy, to correct it, to delete it, to restrict or object to its use, to transfer it, and to withdraw a consent you have given at any time. Withdrawing consent does not affect processing that already took place. You also have the right to complain to your national data protection authority, and in Türkiye to the Personal Data Protection Authority (KVKK).
8. Contact
Requests and questions: drmuhsinyilmaz@muhsinyilmaz.com
Muhsin Yılmaz Klinik, Bağdat Caddesi, Kadıköy, Istanbul, Türkiye
We respond to requests within 30 days.
9. Cookies
Our website uses cookies that are necessary for it to function, and, with your consent, analytics and advertising cookies that help us understand how the site is used and measure our campaigns. You can withdraw or change your cookie consent at any time through the cookie settings on the site or your browser settings.
10. Changes
If this policy changes, we will publish the revised version on this page and update the date above.