CONSULT-IST
Privacy Policy and Personal Data Protection Notice

This Privacy Policy and Clarification Notice has been prepared to explain the principles regarding the processing, storage, and protection of personal data of real persons (“User”) who visit or benefit from the services offered through the website www.consult-ist.com (“Site”), in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation.

By visiting or using the Site, you are deemed to have read and understood this Privacy Policy.

1. Data Controller

In accordance with KVKK, the data controller is:

Name – Surname: Yüksel Uysal
Address: EVLİYA ÇELEBİ MAH. NAZAN SK. NO: 2 İÇ KAPI NO: 6 TUZLA / İSTANBUL
E-mail: info@consult-ist.com

Yüksel Uysal acts as the data controller in connection with the processing of personal data obtained through the Site.

2. Personal Data Processed

Depending on the services offered through the Site and your interaction with the Site, the following categories of personal data may be processed:

Identity Information: Name, surname, year/date of birth (where requested), passport/ID information (only to the extent necessary for appointment arrangements, travel and accommodation arrangements).
Contact Information: E-mail address, telephone number, residence/accommodation address, country information.
Transaction Security Information: IP address, log records, device information, browser information, cookie records, session information.
Financial Information: Payment amount, payment method, invoice data (name, surname, tax office/tax number, address, etc.). Credit card information is processed via secure systems through the relevant payment institution/payment infrastructure and is not stored directly by the Site.
Service Usage Information: Appointment dates, preferred services (for example, hair transplantation, aesthetic procedures, dental treatment, accommodation, transfer, etc.), request and complaint records, support requests.
Health Data (Special Category of Personal Data): Only with your explicit consent, and only to the extent necessary for coordination with the relevant healthcare institution (pre-examination files, photographs, reports, etc.), health data may be processed and shared with authorized healthcare institutions.

3. Purposes of Processing Personal Data

Your personal data is processed within the scope of Articles 5 and 6 of KVKK for the following purposes:

Planning, providing, and managing consultancy, coordination and related services offered through the Site (including support regarding hair transplantation, aesthetic procedures, dental treatment and similar services),
Ensuring the necessary organization and coordination with hospitals, clinics, healthcare institutions, hotels, transfer companies and other business partners in Türkiye,
Receiving, evaluating, and responding to user requests and managing appointment processes,
Managing reservation, quotation, information and confirmation processes,
Issuing invoices, tracking payments and managing financial processes,
Operating membership / contact / quotation / appointment forms on the Site and ensuring communication,
Improving user experience, monitoring and enhancing the performance of the Site,
Fulfilling legal obligations arising from legislation and obligations towards competent authorities and institutions,
Establishing, exercising, or protecting legal rights,
Providing, subject to your explicit consent, marketing communications, campaigns, information or promotions via e-mail, SMS or similar channels.

4. Methods and Legal Grounds for Collecting Personal Data

Your personal data may be collected through:

Forms on the Site (contact form, appointment form, quotation form, etc.),
E-mail correspondence, phone calls, messaging applications with you,
Healthcare institutions, agencies, and business partners we cooperate with,
Cookies and similar tracking technologies,
Contracts, invoices, and similar physical/electronic documents.

Your data is processed on the basis of the legal grounds listed in Articles 5 and 6 of KVKK, including:

It is clearly stipulated by law,
It is directly related to the establishment or performance of a contract,
It is necessary for the data controller to fulfill their legal obligations,
It is necessary for the establishment, exercise, or protection of a right,
Provided that it does not harm your fundamental rights and freedoms, it is necessary for the legitimate interests of the data controller,
Your explicit consent (especially for health data and processing for marketing/communication purposes).

5. Transfer of Personal Data

Your personal data collected may be transferred, for the purposes set out above and in accordance with KVKK, to:

Hospitals, clinics, doctors, and healthcare institutions we cooperate with,
Hotels, agencies, and service providers offering accommodation, transportation, transfer, and tour services,
Competent public institutions and organizations, where required by law,
Business partners providing accounting, finance, information technologies, hosting, e-mail, SMS and similar infrastructure services,
Service providers located in Türkiye and abroad (including cloud systems), provided that necessary security measures are taken.

Special category personal data (such as health data) will only be transferred with your explicit consent and subject to additional security measures required by law.

6. Cookies and Similar Technologies

Cookies are used on the Site to improve user experience, analyse the performance of the Site and, where applicable, provide personalized content.

Strictly Necessary Cookies: Required for the basic functions of the Site to operate.
Performance and Analytics Cookies: Used to analyse Site traffic and usage.
Targeting and Advertising Cookies: Used to support the display of content and advertisements tailored to your interests (where used).

You can disable cookies or delete existing cookies through your browser settings. However, if you disable cookies, some parts of the Site may not function properly.

7. Retention Period of Personal Data

Your personal data is retained only for the period necessary, taking into account:

Retention periods stipulated in relevant legislation,
The nature of the service,
Legal obligations and statutes of limitation.

At the end of these periods, your personal data will be deleted, destroyed, or anonymized in accordance with KVKK and the relevant legislation.

8. Rights of the Data Subject

Pursuant to Article 11 of KVKK, as a data subject you have the following rights:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing of your personal data and whether they are used in accordance with this purpose,
To know the third parties to whom your personal data is transferred, at home or abroad,
To request correction of your personal data if it is incomplete or incorrectly processed,
To request deletion or destruction of your personal data within the framework of the conditions stipulated in KVKK and the relevant legislation,
To request notification of the transactions made pursuant to subparagraphs (5) and (6) above to third parties to whom your personal data has been transferred,
To object to the occurrence of a result to your detriment by means of analysis of your personal data exclusively through automated systems,
To request compensation for damages arising from the unlawful processing of your personal data.

9. Exercising Your Rights

You may submit your requests within the scope of KVKK to us:

In writing, with a signed petition delivered to the postal address above,
Via registered electronic mail (KEP), secure electronic signature, mobile signature, or from your e-mail address that you have previously notified and is registered in our system,

by contacting: info@consult-ist.com

Your applications will be evaluated and responded to as soon as possible and within 30 (thirty) days at the latest, depending on the nature of your request. If the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

10. Personal Data Security

As the data controller, we take appropriate technical and administrative measures to prevent unlawful processing of your personal data, to prevent unlawful access to your personal data, and to ensure appropriate protection, including:

Implementing necessary technical and organizational security measures,
Informing and obtaining necessary undertakings from our employees and business partners regarding data security.

However, due to the nature of the internet and digital systems, no system can be guaranteed to be 100% secure. Nevertheless, we make every effort to implement reasonable and up-to-date security measures.

11. Changes to This Policy

This Privacy Policy and Clarification Notice may be updated from time to time as necessary and in line with changes in legislation. Updates will become effective as of the date they are published on the Site.

You are advised to review this text regularly.

12. Contact

For all questions, requests, and applications regarding this Privacy Policy and the processing of your personal data, you can contact us at:

Data Controller: Yüksel Uysal (Consult-IST)
Address: EVLİYA ÇELEBİ MAH. NAZAN SK. NO: 2 İÇ KAPI NO: 6 TUZLA / İSTANBUL
E-mail: info@consult-ist.com

CONSULT-ISTPrivacy Policy and Personal Data Protection Notice