This privacy notice explains how Rönesans Diş Hekimliği (“we”, “the clinic”) processes personal data when you use this website, contact us by form, phone or WhatsApp, or receive treatment at the clinic. It is prepared under Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) and, for people in the European Union and the European Economic Area, the EU General Data Protection Regulation (GDPR), where it applies.
Who is the data controller?
The data controller is:
- Legal entity: Rönesans Diş Hekimliği Tic. Ltd. Şti. (a limited liability company under Turkish law)
- Healthcare facility (name on the operating licence): Özel RD Rönesans Diş Hekimliği Ağız ve Diş Sağlığı Polikliniği
- Trading name: Rönesans Diş Hekimliği
- Address: İstiklal Mahallesi, Muhsin Yazıcıoğlu Bulvarı No:13/A, Serdivan, Sakarya, Türkiye
- Phone: 444 9 734 (within Türkiye) or our landline +90 264 606 09 43 (also from abroad); WhatsApp +90 532 363 49 54
- Email for data protection requests: info@ronesansdis.com
- Registered electronic mail (KEP):
ronesansdis@hs09.kep.tr - Tax number: 7351687963 (Gümrükönü tax office, Sakarya)
- MERSİS number: 0735168796300001
What personal data do we collect?
Depending on how you contact us or use our services, we may process:
- Identity and contact details: name, phone number, email address, country of residence and preferred language.
- Your enquiry: the treatment you are interested in, your message, how you would like us to contact you (WhatsApp or phone call) and your preferred contact times.
- Health data: photos of your teeth, X-rays, scans, medical history, medicines and treatment records. Under both KVKK and GDPR, health data is a special category of personal data and receives extra protection.
- Communication records: messages and calls exchanged by WhatsApp, phone or email.
- Appointment and treatment information: visit dates, treatment plans, consent forms and invoices.
- Technical data: IP address, browser and device information and, only if you consent, analytics data collected through cookies. See our cookie policy.
Please share only the information needed for your enquiry.
Why do we process your data?
- to answer your enquiry and give a preliminary assessment of the photos and X-rays you send
- to arrange appointments and help you plan your visit
- to examine you, plan and provide treatment, and keep medical records
- to provide aftercare and follow-up after you return home
- to issue invoices and meet our legal, tax and health-sector obligations
- to establish, exercise or defend legal claims
- to understand how the website is used and improve it, only with your consent
What are the legal bases for processing?
Under KVKK (Articles 5 and 6), we rely on:
- processing being necessary for the establishment or performance of a contract with you
- compliance with our legal obligations
- the establishment, exercise or protection of a right
- our legitimate interests, provided they do not override your fundamental rights and freedoms
- for health data: processing by persons under a duty of confidentiality for the purposes of medical diagnosis, treatment and care services and the planning and management of health services; and, where no other basis applies, your explicit consent
Under the GDPR, where it applies, we rely on:
- Article 6(1)(b) – steps taken at your request before entering into a contract, and performance of that contract
- Article 6(1)(c) – compliance with legal obligations
- Article 6(1)(f) – legitimate interests, such as keeping records to defend legal claims
- Article 6(1)(a) – your consent, for analytics cookies
- Article 9(2)(h) – health data processed for medical diagnosis and health care by professionals bound by confidentiality, and Article 9(2)(a) – your explicit consent, for example when you send photos or X-rays before any treatment relationship exists
Where processing is based on consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.
Who do we share your data with?
We share personal data only where necessary, with:
- dental laboratories that make crowns, bridges or other appliances, limited to what they need
- other healthcare providers involved in your care, such as your local dentist, when you ask us to
- IT, hosting, communication and analytics service providers that support the clinic and this website
- public authorities, health authorities and courts, where required by law
- banks and payment providers, to process payments
Is my data transferred outside Türkiye?
The clinic is located in Türkiye, so your data is mainly processed in Türkiye. If you live in the EU or EEA, please note that the European Commission has not adopted an adequacy decision for Türkiye.
Some of our service providers – for website hosting, delivery of form messages by email, WhatsApp and, only with your consent, Google Analytics – may process data on servers outside Türkiye, including in the United States. Such transfers are made in line with Article 9 of KVKK, for example on the basis of standard contracts published by the Personal Data Protection Board and notified to the Personal Data Protection Authority, or other safeguards permitted by law.
How long do we keep your data?
- Medical and treatment records: for the periods required by Turkish health legislation.
- Enquiries that do not lead to treatment: for as long as needed to answer and follow up the enquiry, after which they are deleted or anonymised.
- Invoices and financial records: for the periods required by Turkish tax and commercial law.
- Analytics data: according to the data retention setting in Google Analytics.
When a retention period ends, the data is deleted, destroyed or anonymised.
What are my rights?
Under Article 11 of KVKK, you have the right to:
- learn whether your personal data is processed, and request information about it
- learn the purpose of processing and whether your data is used for that purpose
- know the third parties in Türkiye or abroad to whom your data is transferred
- request correction of incomplete or inaccurate data
- request erasure or destruction of your data under the conditions in Article 7 of KVKK
- request that correction, erasure or destruction be notified to third parties to whom your data was transferred
- object to a result against you arising from analysis exclusively by automated systems
- claim compensation for damage arising from unlawful processing
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time.
How can I exercise my rights or make a complaint?
Send your request in writing to the clinic’s address above, by registered electronic mail (KEP) to ronesansdis@hs09.kep.tr, or by email to info@ronesansdis.com. We may ask you to confirm your identity. Under KVKK, we reply free of charge within 30 days at the latest; a fee may be charged only where the reply involves an additional cost, as set by the Personal Data Protection Board. Under the GDPR, we reply within one month, which may be extended in certain cases.
If you are not satisfied with our reply, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) in Türkiye within the time limits set by KVKK. If you live in the EU or EEA, you can also complain to the data protection authority in your country.
How do we use cookies?
We use necessary cookies and, only with your consent, analytics cookies. Details are in our cookie policy.
Can this notice change?
We may update this notice when our practices or the law change. The date of the latest update is shown on this page.