Privacy Policy

Last updated: May 2026

1. Data Controller

The party responsible for the processing of personal data on this website is:

Uzm. Dt. Aykut Gürel
Oral & Maxillofacial Surgery Specialist
Flora Rezidans, No:1 Defne Sokak
Ataşehir, İstanbul 34750
Türkiye

E-mail: info@drgurel.com
Phone: (0533) 473 45 85

Applicable law: Our practice is based in Türkiye and processes personal data in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698). For visitors and patients in the European Union, we additionally apply the principles of the General Data Protection Regulation (GDPR).

2. Data We Collect

We only collect personal data that you actively share with us — for example through our contact form, appointment form, e-mail or WhatsApp.

Categories of data

  • Name
  • E-mail address
  • Phone or WhatsApp number (if provided)
  • Content of your message and any imaging you choose to send (e.g. panoramic X-ray, CBCT)
  • Travel dates and treatment preferences (if provided)

Purpose of processing

  • Responding to your enquiry
  • Preparing a written treatment plan and cost estimate
  • Scheduling and confirming appointments
  • Clinical preparation of treatment
  • Aftercare communication during the healing phase

Legal basis

Processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR / KVKK Art. 5(1)(a)) and to perform pre-contractual and contractual measures (Art. 6(1)(b) GDPR). When processing health data (such as imaging or clinical findings), we rely on Art. 9(2)(h) GDPR (provision of healthcare).

3. Storage Duration

We retain personal data only for as long as is necessary to provide the service requested or as required by statutory retention periods. Patient records are kept for the legally required retention period — typically 10 years from completion of treatment.

4. Server Logs

When you visit our website, your browser automatically transmits technical information (such as browser type, operating system, referrer URL, IP address and access time). This data is processed for the technical operation and security of the website (Art. 6(1)(f) GDPR) and is not combined with other personal data you provide.

5. Cookies

This website uses strictly necessary cookies that are required for the operation of the site. For analytics cookies (e.g. Google Analytics), we obtain your consent where required. You can adjust your browser's cookie settings at any time or delete existing cookies.

6. WhatsApp Communication

Communication via WhatsApp is operated by WhatsApp Ireland Limited / Meta Platforms Ireland Limited. When you contact us via WhatsApp, personal data is transmitted to WhatsApp / Meta. We recommend reviewing the WhatsApp Privacy Policy before contacting us through this channel.

7. Google Maps

Our contact page embeds Google Maps to display the clinic location. The provider is Google Ireland Limited. Loading the map transmits data to Google. For more information, see the Google Privacy Policy.

8. Google Analytics

Where activated, we use Google Analytics to evaluate website usage on a statistical basis. IP addresses are processed in anonymised form. Processing is based on your consent.

9. Your Rights

You have the right at any time to request:

  • Access to the personal data we hold about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data, where no statutory retention obligation applies (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
  • Lodging a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please write to us at info@drgurel.com.

10. Data Security

We apply technical and organisational measures to protect your data against accidental or intentional manipulation, loss and unauthorised access. Our website uses SSL encryption — you can recognise this by the lock icon in your browser and the "https://" in the URL.

11. International Data Transfers

Because our practice is located in Türkiye, your personal data is transferred to Türkiye for treatment delivery. The transfer is based on the necessity of contract performance (Art. 49(1)(b) GDPR).

12. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect current legal requirements. The latest version is always available on this page.

For any questions about data protection, please contact us at info@drgurel.com. See also our contact page.