1. Who this is for
For people in the European Union / European Economic Area who use the site or apply to us (EU General Data Protection Regulation, "GDPR").
2. Data controller
- Dr. Özgür Akşan, Mi'Marin Medical, Mimar Sinan Mah. Ziya Gökalp Bulvarı No: 28 Daire: 1, 35220 Konak / İzmir, Türkiye
- [email protected]
3. Legal basis
| Processing | GDPR |
|---|---|
| Pre-assessment, appointment, communication | Art. 6(1)(b) contract |
| Health data | Art. 9(2)(h) healthcare, physician bound by professional secrecy; where necessary Art. 9(2)(a) explicit consent |
| Legal records | Art. 6(1)(c) legal obligation |
| Security, prevention of misuse | Art. 6(1)(f) legitimate interest |
| Analytics and marketing cookies | Art. 6(1)(a) consent — can be withdrawn at any time |
4. Recipients and international transfers
- The full list of recipients and their countries is in KVKK Information Notice section 6. The main ones: Vercel, Cloudflare, Supabase (EU servers), Anthropic and Google (AI), Meta (WhatsApp/Messenger), Resend, Twilio, Cal.com, and — only with permission — Google Analytics/Ads and Meta Pixel.
- Your data is processed in Türkiye; there is no EU adequacy decision for Türkiye. Transfers to providers in the USA are made within the framework of the appropriate safeguards offered by the providers (e.g. Standard Contractual Clauses).
5. AI and automated decision-making (Art. 22)
The AI assistant answers your questions and directs you to an appointment. No fully automated decision producing legal or similarly significant effects is made about you; the medical assessment is made by the physician.
6. Retention
Retention periods are in KVKK Information Notice section 9 (health records 20 years, correspondence 3 years, financial records 10 years, server logs 1 year).
7. Your rights (Art. 15–22)
- access;
- rectification;
- erasure;
- restriction of processing;
- data portability;
- objection, to processing based on legitimate interest;
- withdrawing consent at any time, without affecting earlier processing;
- not being subject to an automated decision.
Applications: [email protected] · reply within one month.
8. Complaints
You have the right to lodge a complaint with the data protection authority of the EU country where you live or work.