Privacy Policy

Privacy Policy

This document explains which personal data we process when you contact us through neclasongur.com, for what purposes, on what legal bases, to whom data may be transferred, how we manage cookie preferences, and your rights under the Personal Data Protection Law No. 6698.

Last updated: March 29, 2026

Data controller and scope

This policy applies to the initial contact and appointment request processes conducted through the website neclasongur.com, the contact form on the site, email, phone, WhatsApp, Telegram, and similar digital channels.

The site and communication processes are managed by Prof. Dr. Necla Songür's team within the framework of clinical activities at Yeşilbahçe Mah. 1470 Sk. Kadam 2 İş Merkezi No:10 D:1, Muratpaşa, Antalya.

  • Email: bilgi@nyklinik.com
  • Phone: +90 (242) 322 07 07
  • Address: Yeşilbahçe Mah. 1470 Sk. Kadam 2 İş Merkezi No:10 D:1, Muratpaşa, Antalya

Personal data we process

We process name, phone, email, country, requested procedure type, message content, language preference, and technical fields used for spam control in the contact form.

When you reach us via email, phone, WhatsApp, or Telegram, the contact information you share, your appointment request, and the content of your message may be processed. If you share health-related information in your message, this information is handled only to the extent necessary to evaluate your request and provide a response.

  • Identity and contact information
  • Appointment, preliminary consultation, and information request records
  • Message content and voluntarily shared health information
  • Technical data such as IP address, browser, device, and connection logs

How we collect data and legal bases

Your data may be collected automatically or semi-automatically through forms on the website, email correspondence, phone calls, messaging applications, server logs, and third-party embedded services such as Google Maps.

We inform you within the scope of the disclosure obligation; this notification is not contingent upon separate consent. Processing activities are carried out for the purposes of responding to your request, managing the communication process, ensuring website security, fulfilling our legal obligations, and relying on your separate explicit consent only when necessary.

  • Processing your contact and appointment request
  • Maintaining and tracking related records
  • Preventing fraud, spam, and abuse
  • Fulfilling our obligations arising from legislation

Our processing purposes

We use the collected data to respond to you, manage the appointment or preliminary assessment process, provide the information you requested, and enable the clinical team to communicate with you through the appropriate channel.

Technical data may be processed to ensure service continuity, detect system errors, investigate security incidents, and maintain website performance.

  • Responding to your message
  • Recording communication history
  • Determining the appropriate specialty or procedure type
  • Coordinating internal operations and patient communication processes
  • Maintaining site security and service quality

Parties to whom data is transferred

Data submitted through the contact form may be forwarded to authorized recipients through a structured email notification system for review and follow-up by the clinical team.

When the email notification system is active, form submissions may be delivered to authorized recipients as email via the Resend infrastructure.

Additionally, your data is shared with hosting infrastructure providers, information technology support services, and legally authorized public institutions only to the extent necessary.

  • Authorized clinical staff and patient communication team
  • Structured email notification infrastructure (including Resend if active)
  • Hosting and technical support providers
  • Legally authorized public institutions and organizations

Explicit consent, international transfer, and third-party platforms

Some services such as Resend, Google Maps, WhatsApp, and Telegram may use servers or global infrastructure outside Turkey. When you use these services, your relevant data may be processed abroad according to the respective service provider's own privacy terms.

The explicit consent checkbox in the contact form is presented separately from the Privacy Notice and comes unchecked by default. Because the form may be processed through international infrastructure such as Resend when necessary, you cannot submit the form without giving explicit consent; alternatively, you can use phone or email channels.

Cookies and preference management

Mandatory cookies or similar local technologies may be used on the site for security, session continuity, and basic technical functions. Since these technologies are necessary for the site to operate, they are not subject to separate consent; however, you are informed through this text and the cookie information area.

Non-mandatory cookies related to analytics, marketing, or third-party embedded content are off by default. Such technologies are enabled only when you make an active selection such as 'Accept' from the cookie preference panel; you can change your preferences later from the 'Cookie Preferences' link in the footer.

  • Mandatory cookies: security and basic site functions
  • External media cookies: embedded third-party content such as Google Maps
  • Analytics cookies: enabled only with explicit preference

Retention period and security

Personal data is retained until your contact request is resolved, necessary operational periods for appointment and patient communication records expire, and retention obligations arising from relevant legislation end.

Access restrictions, account authorizations, log tracking, and reasonable technical/administrative security measures are applied to reduce the risk of unauthorized access, loss, disclosure, and misuse. We also remind you that no method transmitted over the internet provides absolute security guarantees.

  • Limiting access authorizations
  • Regularly reviewing records
  • Deleting, destroying, or anonymizing data whose business purpose has ended
  • Authorization and password controls on service provider accounts

Your rights and application method

You can submit your requests directly to us under Article 11 of the KVKK. We may request additional information to verify that the application belongs to you.

Applications are evaluated within the periods prescribed by the applicable legislation, and the result is communicated to you through your registered communication channel.

  • Learning whether your personal data is being processed
  • Requesting information about processing if it has been processed
  • Learning the purpose of processing and whether it is used in accordance with the purpose
  • Knowing the third parties to whom data is transferred domestically or abroad
  • Requesting correction of incomplete or incorrect data
  • Requesting deletion or destruction
  • Requesting that correction or deletion operations be notified to third parties to whom data has been transferred
  • Requesting compensation for damages due to unlawful processing