This section provides information under the General Data Protection Regulation (GDPR / DSGVO) for visitors located in the European Union. Requests from Germany and other EU countries are assessed under this section.
Data controller (Controller / Verantwortlicher)
Tayfun Türkaslan · Teşvikiye, Hakkı Yeten Cad. No:1 Fulya Terrace, Kat:7 D:23, 34394 Şişli/Istanbul, Türkiye · Tax no: 8770044236 · info@migrenameliyati.com · +90 533 144 56 13.
The data controller is established in Türkiye. Under Article 3(2) of the GDPR, this Regulation applies to the extent that services are offered to individuals located in the EU.
Legal basis for processing (Art. 6 GDPR)
- Art. 6(1)(b) — Taking pre-contractual steps at your request: responding to your appointment request.
- Art. 6(1)(f) — Legitimate interest: preventing misuse of the form (IP logging).
- Art. 9(2)(a) — Explicit consent where you choose to share health data. For this reason, separate consent is obtained in the form for health data.
- Art. 6(1)(f) — Legitimate interest: using Meta (Facebook) Pixel to measure website visits and evaluate advertising performance.
Health data is a special category of data under Article 9. We recommend that you do not share detailed health information in the form; this information is collected during your consultation.
Retention period (Art. 13(2)(a))
Requests that do not result in an appointment are retained for a maximum of 2 years and are then deleted. If a treatment relationship is established, patient records are retained in accordance with the retention periods set out in Turkish health legislation.
Transfer to a third country (Art. 44 et seq.)
Your appointment/contact form data is processed on servers located in Türkiye. Türkiye is not covered by an adequacy decision issued by the European Commission. The transfer of form data therefore takes place on the basis of Art. 49(1)(b), as it is necessary for the performance of a contract at your request, and Art. 49(1)(a), on the basis of your explicit consent; by submitting the form, you consent to this transfer. In addition, the Meta (Facebook) Pixel used on this site sends technical data about your visit to Meta Platforms Ireland Ltd. and, where applicable, to Meta's servers in the United States; this transfer is subject to Meta's own standard contractual clauses (SCCs) and data processing framework.
Your rights (Art. 15–22 GDPR)
- Right of access (Art. 15) — Auskunftsrecht
- Right to rectification (Art. 16) — Berichtigung
- Right to erasure / right to be forgotten (Art. 17) — Löschung
- Right to restriction of processing (Art. 18) — Einschränkung
- Right to data portability (Art. 20) — Datenübertragbarkeit
- Right to object (Art. 21) — Widerspruch
- Right to withdraw consent (Art. 7(3)) — processing carried out before withdrawal remains lawful
You can send your requests to info@migrenameliyati.com; your request will be answered within one month at the latest, in accordance with Art. 12(3).
Complaint to a supervisory authority (Art. 77)
You have the right to lodge a complaint with the data protection supervisory authority in the EU member state where you are located. In Germany, this is the data protection authority of the federal state in which you reside (Landesdatenschutzbeauftragte). In Türkiye, you may apply to the Personal Data Protection Authority (KVKK).
Automated decision-making
No automated decision-making or profiling is carried out (Art. 22).