Privacy and personal data

This website provides information about the clinic operated by the company listed below and receives contact enquiries.

Operating company

SAATÇİ GRUP SAĞLIK HİZMETLERİ LİMİTED ŞİRKETİ

Clinic

Özel Mustafa Saatçi Ağız ve Diş Sağlığı Polikliniği

Clinic address

Bağlarbaşı Mahallesi Feyzullah Caddesi No: 10/A, Maltepe / İstanbul

Tax office

KÜÇÜKYALI

Tax identification number

7352207784

The form sends an appointment or contact enquiry to the clinic. Submitting it does not confirm an appointment. Dates, times and preparation are agreed separately with the clinic.

• The form asks for your full name, phone number, email address and country.
• The form language, submission time and selected information/permission boxes are stored with the enquiry.
• The form does not request medical reports, X-rays, identity documents or payment details. Ask the clinic for an appropriate method before sharing such documents through general contact channels.

Contact-button clicks and successfully saved forms are counted in aggregate by day, website language and broad page type. These statistics do not store names, phone numbers, email addresses, health information, IP addresses, visitor identifiers, search text or full page addresses. Counts are kept on this website’s own server and are not sent to third-party analytics or advertising platforms.

This measurement uses no cookies or browser storage. Button clicks are not counted when the browser’s Do Not Track or Global Privacy Control preference is enabled. Successful form totals are calculated when an enquiry is saved. Connection and request logs used for security remain covered by the technical security information on this page.

Contact enquiries are saved in the website database and displayed in an administration panel that requires sign-in. This allows the clinic to read your enquiry and contact you. The form does not subscribe you to a marketing newsletter.

Enquiry access is limited to authorised clinic users handling requests and authorised technical service providers whose duties require access. Access credentials are not public; the administration panel requires authorisation.

The site uses HTTPS. Request limits use IP addresses to help prevent abuse; the web server and security services may process connection and request logs.

Hetzner is used for hosting and Cloudflare for traffic security and content delivery. These services may involve processing on infrastructure outside Türkiye. This technical explanation does not certify the legal basis for international data transfers.

Names, contact details, country and enquiry records submitted through the website form are subject to an upper retention limit of 365 days from submission. This is the organisation’s policy for website enquiries, not a statutory maximum for all personal data. Records may be erased earlier when their purpose ends or the conditions for erasure are met.

Once the period expires, the record is no longer shown in the administration panel and its email notification is not taken from the delivery queue. Daily maintenance erases expired enquiries and associated notification records. Access-restricted database backups are removed on a 14-day cycle, so erasure of a backup copy may be completed later than erasure of the live record.

The time, reason and number of erased records are kept in an operational audit record for at least three years, without the form’s name, phone number or email address. This policy covers website enquiries. Examination and treatment files and copies in the clinic’s email inbox are subject to separate processing and retention arrangements.

This page explains website contact enquiries, aggregate usage counts and technical security operations. Patient information processed during examination, diagnosis and treatment, and other data processing within the clinic, fall outside the scope of this page.

You can contact the company about the legal basis for processing your data, retention periods, who can access it and transfer details. Reading a privacy notice and giving explicit consent to processing are separate actions.

You may contact the company to exercise your rights under Article 11 of Türkiye's Personal Data Protection Law (KVKK). Explain which record or processing activity your enquiry concerns. If identity verification is needed, ask the company for a secure method.

• Ask whether your data is processed and obtain information about its use.
• Request correction of incomplete or inaccurate information, or deletion or destruction when the legal conditions are met.
• Ask about third parties receiving your data and exercise your other rights under the law.

Written requests can be addressed to the company's full legal name at the clinic address below. Phone and email are general contact channels; the nature of a request may require a legally appropriate submission and identity verification method.

When you close an announcement or open its guide, only the announcement identifier and your dismissal preference are kept in session storage so it does not reopen during that browser-tab session. This preference is not sent to the server and contains no personal, health or visitor identifier data. It is not used for advertising measurement. Dismissing a new announcement replaces the previous preference; the record is limited to the tab session.

Your web enquiry is transferred to the clinic’s internal communication panel so the team can respond and coordinate appointments. All authorised coordinators can see operational contact and appointment records; a responsible coordinator may also be assigned. Staff use individual accounts, and access and changes are logged. The panel is not used to keep diagnoses, test results or treatment records.

The panel may hold your name, telephone, email, country/city, communication language, enquiry channel, coordinator, contact outcome, communication note, follow-up date and appointment details. Contact details and notes in patient cards are encrypted; staff access requires additional verification. When a coordinator opens a telephone, WhatsApp or email link, the relevant provider’s own data handling terms also apply.

Operational patient cards enter the daily deletion routine 365 days after the last contact or appointment activity, provided no future appointment or open future follow-up exists. An administrator can delete records earlier when appropriate; permanent deletion from a patient card also covers linked web enquiries. Security event logs are kept for approximately three years and rotating database backups for no more than 14 days. These are not the retention periods for the clinic’s medical records.

When a form is submitted, only a broad enquiry channel, such as Google advertising or social media, may be attached. Link markers are reduced to this broad category in page memory while the page is open. Raw advertising click identifiers, search terms, visitor identifiers and full referring addresses are not stored for this purpose. This feature uses no cookies or persistent browser storage and does not send patient data to advertising platforms. Automatic source classification is disabled when the browser’s Do Not Track or Global Privacy Control preference is enabled.