Privacy Notice

Privacy Notice

This notice explains which personal data we process when you contact us through yildiransongur.com, why we process it, which legal grounds may apply, who may receive the data, how cookie preferences work, and which rights you may have under applicable data protection law.

Last updated: March 29, 2026

Controller details and scope

This policy applies to yildiransongur.com, the contact form on the website, and the first-contact and appointment request processes carried out through email, phone, WhatsApp, Telegram, and similar digital channels.

The website and communication workflows are managed by the Prof. Dr. Yıldıran Songür team as part of the clinic's operations at Yesilbahce Mah. 1470 Sk. Kadam 2 Is Merkezi No:10 D:1, Muratpasa, Antalya.

  • Email: bilgi@nyklinik.com
  • Phone: +90 (242) 322 07 07
  • Address: Yesilbahce Mah. 1470 Sk. Kadam 2 Is Merkezi No:10 D:1, Muratpasa, Antalya

Personal data we process

In the contact form, we process your name, phone number, email address, country, requested treatment type, message content, language preference, and technical anti-spam fields.

When you contact us by email, phone, WhatsApp, or Telegram, we may process the contact details you share, your appointment request, and the content of your message. If you include health-related information in your message, we handle it only to review your request and respond to you.

  • Identity and contact details
  • Appointment, pre-consultation, and information request records
  • Message content and health information you voluntarily provide
  • Technical data such as IP address, browser, device, and connection logs

How we collect data and legal grounds

Your data may be collected by automated or partially automated means through website forms, email correspondence, phone calls, messaging applications, server logs, and embedded third-party services such as Google Maps.

This notice is provided as an information obligation and is not itself subject to approval. We process data so that we can respond to your request, manage communication, keep the website secure, comply with legal obligations, and rely on a separate explicit consent statement only where consent is required.

  • Handling your contact and appointment request
  • Keeping and following up relevant records
  • Preventing fraud, spam, and misuse
  • Meeting legal and operational obligations

Why we use data

We use the collected data to reply to you, manage appointment or pre-assessment communication, provide the information you asked for, and help the clinic team contact you through the correct channel.

Technical data may also be processed to maintain service continuity, detect system errors, investigate security incidents, and preserve website performance.

  • Replying to your message
  • Recording communication history
  • Identifying the relevant specialty or procedure type
  • Coordinating internal operations and patient communication workflows
  • Protecting website security and service quality

Recipients and service providers

Data submitted through the contact form may be forwarded to authorized clinic recipients through the configured email notification infrastructure so that the clinic team can review and follow up on your request.

When the email notification system is enabled, contact form submissions may be sent to authorized recipients through the Resend email infrastructure.

Your data may also be shared, to the extent necessary, with hosting providers, IT support services, and public authorities that are legally authorized to request it.

  • Authorized clinic staff and patient communication team
  • Configured email notification infrastructure, including Resend when enabled
  • Hosting and technical support providers
  • Public authorities where disclosure is legally required

Explicit consent, international transfers, and third-party platforms

Some of the services we use, including Resend, Google Maps, WhatsApp, and Telegram, may rely on servers outside Turkey or on global infrastructure. When you use those services, relevant data may be processed abroad under the service provider's own privacy terms.

The contact form includes a separate explicit consent checkbox that is independent from this notice and is blank by default. Because the form workflow may use cross-border services such as Resend when enabled, you must actively provide consent before submitting the form; otherwise you may contact the clinic by phone or email instead.

Cookies and preference management

Strictly necessary cookies or similar local technologies may be used for security, session continuity, and the basic operation of the website. These technologies are required for the site to function and therefore are disclosed through the banner and this notice, rather than being subject to opt-in consent.

Non-essential cookies and third-party embedded content are disabled by default. They become active only after you actively choose to accept them through the cookie preferences panel, and you can update your choices later from the footer link.

  • Necessary cookies: security and core site functionality
  • External media cookies: third-party embeds such as Google Maps
  • Analytics cookies: enabled only if you opt in

Retention and security

Personal data is kept until your communication request has been resolved, for as long as operational retention is needed for appointment and patient communication records, and for any additional period required by applicable law.

We apply access controls, account authorization, record monitoring, and other reasonable technical and organizational safeguards to reduce the risk of unauthorized access, loss, disclosure, or misuse. No internet-based transmission method can guarantee absolute security.

  • Restricting access permissions
  • Reviewing records on a regular basis
  • Deleting, destroying, or anonymizing data when it is no longer needed
  • Maintaining password and authorization controls on service accounts

Your rights and how to apply

You may send your request to us directly under the rights available to you under applicable law. We may ask for additional information in order to verify that the request belongs to you.

Requests are reviewed within the time limits set by law, and the outcome is communicated through your registered contact channel.

  • Learn whether your personal data is being processed
  • Request information if your personal data has been processed
  • Learn the purpose of processing and whether the data is used in line with that purpose
  • Know the third parties to whom the data has been transferred in Turkey or abroad
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction where the legal conditions are met
  • Request that correction or deletion be notified to relevant third parties
  • Claim compensation if you suffer damage due to unlawful processing