Privacy Notice (KVKK)
Last updated: 3 November 2026
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), Dt. Buket Çikolar (“the Clinic”), as data controller, informs you about the personal data processed through buketcikolar.com (“the Site”). The Turkish version of this notice prevails.
1. Data controller
Dt. Buket Çikolar
Metropol İstanbul, Atatürk Mah. Ertuğrul Gazi Sk. No: 2H, 34758 Ataşehir / İstanbul
Phone: +90 541 683 27 27 · Email: buketcikolar@gmail.com
2. Data we process
- Identity and contact: name, phone number, email address.
- Appointment request: preferred date, treatment of interest and your message.
- Health data (special category): the treatment you select or complaints you mention may qualify as health data and are processed only with your explicit consent. Please share only what is necessary; details are discussed at the consultation.
- Newsletter: your email address, only if you subscribe.
- Security logs: technical records kept by our hosting provider (IP address, browser, time of visit).
3. Purposes and legal grounds
To receive and plan your appointment request and contact you (KVKK art. 5/2-c, 5/2-f); to process health data (art. 6, explicit consent); to send the newsletter and to transfer data abroad (explicit consent); and to keep the Site secure and meet legal obligations (art. 5/2-ç, 5/2-f).
4. Transfers
Form notifications are delivered directly to the Clinic’s email address. Our website maintenance provider (PilClinics / PilMedya) may access data only when technical support requires it and only to the extent necessary. When you submit the appointment form, your message is also sent to the Clinic via WhatsApp (Meta Platforms) at your choice. Servers of our hosting (Cloudflare), form delivery (FormSubmit) and email (Google) providers may be located outside Türkiye; your data is therefore transferred abroad based on your explicit consent (KVKK art. 9). Data may also be shared with authorised public authorities where required by law.
5. Retention
Appointment requests are kept for up to 1 year after the request is concluded; newsletter data until you unsubscribe. Treatment records are kept for the periods set by health legislation. Expired data is deleted, destroyed or anonymised.
6. Your rights (KVKK art. 11)
You may request information about whether and how your data is processed, its correction or deletion, learn the third parties it was transferred to, object to adverse results of automated analysis, claim compensation for unlawful processing and withdraw your consent at any time. Send your request to buketcikolar@gmail.com or in writing to the address above; it will be answered free of charge within 30 days.
7. Explicit consent
By ticking the consent box on the appointment form, you consent to the processing of the identity, contact and health data you share for evaluating your appointment request and contacting you, and to its transfer abroad to the service providers listed above. Without consent the form cannot be sent; you may call us instead.