1. General Information
This Privacy Policy has been prepared to inform visitors to the website alpbulgur.com (the "Site"), operated under the trade name "Alp Bulgur Diş Kliniği", and users of its contact form about the processing of their personal data under the Personal Data Protection Law No. 6698 ("KVKK"). The data controller is Dentist Hamdi Alp Bulgur, who operates an oral and dental health practice under that trade name (the "Practice"). The Online Appointment Request Privacy Notice also applies to data processed through the Site's appointment page; the Cookie Privacy Notice and Cookie Policy applies to cookies; and the Patient Privacy Notice applies to our patients. These notices are published in the Site's footer.
Data Controller: Dentist Hamdi Alp Bulgur (an oral and dental health practice operating under the trade name "Alp Bulgur Diş Kliniği")
Address: Sırakapılar Mahallesi, Gazi Bulvarı, 1581 Sokak, No: 1, Daire: 28, Merkezefendi / Denizli
Telephone: +90 532 240 93 19 / +90 258 261 84 36
Email: info@alpbulgur.com
Website: alpbulgur.com
2. Data Processed When Visiting the Site
When you only visit the Site, technical data such as your IP address, visit date and time, pages viewed, browser and device information, referring URL and language preference are processed automatically to provide the Site securely and continuously and to block malicious traffic. Processing is based on the legitimate-interest ground in Article 5(2)(f) of the KVKK. These data are retained for no more than two years, in line with the maximum period prescribed for hosting providers by Law No. 5651. The Site's hosting, security and content delivery providers process these data on behalf of the Practice as data processors. Further information about cookies and similar technologies is provided in the Cookie Privacy Notice and Cookie Policy.
3. Data Processed Through the Contact Form (Contact Form Privacy Notice)
When you send a message using the form on the Site's contact page, we process your full name, email address, optional telephone number, message subject and content, and the date, time and IP address of submission. If you voluntarily include information about your health in your message, this constitutes health data. It is processed only by the dentist and Practice staff subject to a duty of confidentiality, for answering your message and planning the healthcare you request, under Article 6(2)(e) of the KVKK. We recommend that you do not enter detailed health information, a Turkish identification number or payment information in the message field.
Your contact form data are collected electronically to receive, assess and answer your message, respond to your appointment or information request, follow up requests and complaints, and ensure Site security. The legal grounds are Article 5(2)(c) of the KVKK (taking pre-contractual steps at your request) and Article 5(2)(f) (legitimate interests). Data may be transferred to IT providers supplying the Site and email infrastructure as data processors under confidentiality commitments, and to competent authorities where necessary to fulfil a legal obligation. They are not shared with any third party for advertising or marketing. Contact form messages are retained for one year after the request is concluded and then deleted; requests that become patient records are retained as part of the patient file.
4. Third-Party Links and Services
The Site includes Google Maps on its contact page, a link labelled "Appointment" to WhatsApp, YouTube video content on the About page, and links to the Practice's Instagram and Facebook accounts. Map content loads only when you click "Show map"; video content loads only when you click play, using YouTube's privacy-enhanced mode (youtube-nocookie.com). These services and platforms are operated by their respective companies and have their own privacy policies. Loading a map or video, or following a link, may allow those companies to set their own cookies and process your data on servers abroad under their own policies. The content of messages you send to the Practice via WhatsApp passes through the application provider's infrastructure abroad. The Practice is responsible only for processing received messages within its own control. Communication with our patients through WhatsApp is based on the explicit consent given in the Patient Explicit Consent Declaration. Please consult each platform's privacy policy for information about its data processing practices.
5. Children's Personal Data
The Site is not directed at people under 18. Appointment and information requests for patients under 18 must be submitted by a parent or guardian. If we learn that a child's personal data have been submitted through the Site without the knowledge of their parent or guardian, those data will be deleted.
6. Data Security
The Site uses an encrypted connection (HTTPS/TLS). Data submitted through the Site and its forms are protected by security and content delivery services, access authorisation and regular security updates. Under Article 12 of the KVKK, the Practice takes the necessary technical and organisational measures to prevent unlawful processing of, and unlawful access to, personal data and to safeguard those data. These measures are described in the Personal Data Protection and Processing Policy. Because of the nature of transmission over the internet, absolute security cannot be guaranteed; please take care to secure your accounts and devices.
7. Transfers Abroad
If the servers used for the Site's hosting, content delivery, security or email services are located abroad, personal data processed through the Site may be transferred abroad under Article 9 of the KVKK, as amended by Law No. 7499, and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad. Transfers may rely on an adequacy decision, appropriate safeguards such as a standard contract published by the Board, or, for occasional transfers, your explicit consent after you have been informed of the possible risks.
8. Your Rights and Requests
Under Article 11 of the KVKK, you may apply to our Practice to exercise the following rights:
- To learn whether your personal data are being processed;
- To request information if your personal data have been processed;
- To learn the purpose of processing and whether your personal data are used in accordance with that purpose;
- To know the third parties to whom your personal data are transferred in Türkiye or abroad;
- To request rectification of incomplete or inaccurate personal data;
- To request deletion or destruction of your personal data under the conditions in Article 7 of the KVKK;
- To request notification to third-party recipients of the actions taken in response to your rectification, deletion or destruction requests;
- To object to a result against you arising from analysis of your processed data exclusively through automated systems;
- To seek compensation for damage caused by unlawful processing of your personal data.
You may submit requests concerning these rights under the Communiqué on the Procedures and Principles for Requests to the Data Controller by completing the Data Subject Request Form available on our website. You may deliver your handwritten-signed request in person or through a notary to Sırakapılar Mahallesi, Gazi Bulvarı, 1581 Sokak, No: 1, Daire: 28, Merkezefendi / Denizli; send a request signed with a secure electronic signature or mobile signature to info@alpbulgur.com; or email info@alpbulgur.com from an email address previously provided to our Practice and registered in our system.
Your request will be concluded free of charge as soon as possible, according to its nature, and in any event within thirty days. If the procedure entails an additional cost, a fee may be charged under the tariff set by the Personal Data Protection Board. Your request must include your full name, Turkish identification number (for foreign nationals: nationality, passport number or identification number, if any), residential or business address for service, email address for notifications, if any, telephone number and the subject of the request. For requests concerning health data, we may ask for additional identity-verification information and documents to ensure that information reaches only the person entitled to receive it.
9. Changes
This Privacy Policy may be updated if the Site's services or applicable legislation change. The current version is always the version published on the Site; significant changes will be announced on the Site.