Privacy Policy
Protection of Your Personal Data
Purpose and Scope
This Privacy Policy regulates the principles regarding the processing of personal data of all individuals who visit the website www.drozguraksan.com, use contact forms, upload files, or share personal data in any way.
Data Controller
Title
Doç. Dr. Özgür AKŞAN
Field of Activity
Neurosurgery Specialist
Privacy Email
privacy@drozguraksan.com
Phone
+90 532 414 35 35
Types of Personal Data Processed
Identity Information
Name, surname, date of birth
Contact Information
Phone number, email address, address
Health Data (Sensitive) ⚠️
Radiological images (MRI, CT, PET-CT, etc.), medical history, diagnosis and preliminary evaluation notes
Technical Data
IP address, device and browser information, cookie records, log records
Communication Records
Form messages, email correspondence, support requests
Purposes of Processing Personal Data
- ✓Providing medical second opinion services
- ✓Establishing patient-physician communication
- ✓Appointment and callback organization
- ✓Evaluation of medical files
- ✓Fulfillment of legal obligations
- ✓Execution of information security processes
- ✓Development of technical infrastructure
Legal Basis
KVKK Madde 5 & 6
- • Explicit consent
- • Establishment and performance of contract
- • Legal obligation
- • Legitimate interest
- • Provision of healthcare services
GDPR Article 6 & 9
- • Consent
- • Contract
- • Legal obligation
- • Healthcare purposes
Data Transfer
Personal data may be transferred only to the extent necessary:
- •To authorized healthcare institutions
- •To public institutions in case of legal obligation
- •To server and hosting service providers
International Data Transfer
- • With explicit consent
- • With GDPR-compliant infrastructure
- • Through secure cloud services
Data Retention Period
| Data Type | Period |
|---|---|
| Health Data | Patient lifetime + 30 years |
| Communication Records | 10 years |
| Log Records | 2 years |
| Financial Records | 7 years |
Data Security
SSL / TLS
Firewalls
Access Control
Regular Backup
Physical Access Control
Server Security
Data Subject Rights
Your rights under KVKK Article 11 and GDPR:
For requests: privacy@drozguraksan.com
Legal period: 30 days
Complaint and Application
- First apply to the data controller
- If no result, you can file a complaint with the KVKK Board
Validity
This Privacy Policy came into effect on January 26, 2026. The current version is always published on the website.