Data Controller: Prof. Dr. Bülent Düz
Healthcare Practice: Uzm. Dr. Bülent Düz Muayenehanesi
Field: Neurosurgery
Address: Fikirtepe Mahallesi, Yıldırım Sokak No: 10/33, Optimist Residence D Blok, Kadıköy, Istanbul, Türkiye
Telephone: +90 216 428 04 56
Website: www.drbulentduz.com
Version: KVKK-2026-10-20-EN
1. Purpose and scope
This Notice explains how personal data submitted through the appointment request and international patient consultation forms on www.drbulentduz.com are processed under Türkiye's Personal Data Protection Law No. 6698 (KVKK). It covers initial contact, appointment requests, requests for first or second medical opinions, and any medical information or documents voluntarily provided in connection with those requests. Separate notices may apply to subsequent examinations and healthcare services.
2. Categories of personal data
Depending on the form and the information you choose to provide, we may process:
- Identity and contact data: your name, contact details, date of birth if supplied, and other details entered in the form.
- Request and communication data: the service requested, preferred contact method, correspondence and appointment-related information.
- Health data: symptoms, medical history, prior diagnoses or treatments, and any MRI or CT images, laboratory results, medical reports, discharge summaries or other records that you choose to send. Health data are special-category personal data under the KVKK.
- Technical and notice records: information required to operate and secure the submission process and record which version of this Notice was presented and whether its receipt was acknowledged.
3. Purposes of processing
Data are processed, as applicable, to receive and respond to enquiries; contact applicants; arrange appointments and healthcare services; assess requests for first or second medical opinions; review documents voluntarily supplied for the requested evaluation; maintain relevant administrative and patient records; safeguard submission systems; and comply with applicable legal obligations.
4. Methods of collection
Personal data are collected electronically when you complete a website form or communicate with the practice and when you voluntarily submit supporting information or records. Authorized practice staff may handle incoming requests within the scope of their duties.
5. Legal grounds
Depending on the specific activity, ordinary personal data may be processed under Article 5 of the KVKK, including where processing is necessary to establish or perform a contract, comply with a legal obligation, establish, exercise or protect a right, or pursue a legitimate interest that does not override the individual's fundamental rights and freedoms.
Health data and other special-category personal data are processed only where a condition under Article 6 of the KVKK applies, including, where its requirements are met, processing for medical diagnosis, treatment, care or management of healthcare services by persons subject to confidentiality obligations. Where explicit consent is legally required for a distinct processing activity, it will be requested separately. Acknowledging receipt of this Notice does not constitute consent to every processing activity.
6. Recipients and disclosures
Where legally permitted and necessary for the purposes above, personal data may be disclosed to authorized public bodies; authorized healthcare professionals or institutions involved in the relevant service; providers of patient record and appointment systems; and providers supporting website forms, electronic communication, hosting and related technical services. Any disclosure is subject to the applicable legal conditions.
Health data are not disclosed to third parties for advertising or marketing without an appropriate legal basis.
7. International transfers
Electronic communication, website services and technical infrastructure may involve service providers operating outside Türkiye. Where a transfer of personal data abroad occurs, the requirements of Article 9 of the KVKK and other applicable rules must be satisfied. The relevant transfer arrangements and safeguards require verification for the systems actually used; this paragraph is not, by itself, authorization for international transfers.
8. Retention and security
Personal data are retained for periods necessary for the relevant purposes and applicable legal recordkeeping requirements. Appropriate technical and organizational measures are to be applied to safeguard confidentiality and restrict access to authorized persons. When no lawful reason for retention remains, data are deleted, destroyed or anonymized in accordance with applicable law.
9. Your rights
Under Article 11 of the KVKK, you have statutory rights concerning the processing of your personal data, including obtaining information, requesting correction or erasure where legally applicable, learning about disclosures to third parties, objecting in the circumstances specified by law and seeking compensation for harm caused by unlawful processing. All rights granted under Article 11 remain available, subject to applicable legal conditions.
10. How to contact the data controller
Requests concerning personal data may be submitted to Prof. Dr. Bülent Düz using the procedures prescribed by applicable law, including by written application to the practice address stated above. Applications will be handled within the statutory time limits.
11. Website form acknowledgment
Before submitting a form, you may be asked to confirm that you have been given access to and have read this Notice. The practice may retain an audit record identifying the notice version presented, the form concerned, the acknowledgment and its time. This acknowledgment is not general consent to the processing of your health data, nor is it an authorization for marketing.