AESTHETIC & WELLNESS

Privacy and Personal Data Protection Policy

This English translation is provided for convenience. In the event of any discrepancy, the Turkish version prevails.

“Dear visitor; one of the core principles of Dr. Ömer Fatih ŞAHİN is to work with respect for individual rights and freedoms. The lawful processing of personal data and the safeguarding of information security are among our priorities. You may learn more by reading the Privacy and Personal Data Protection Policy below and by contacting us at any time.”

1. Purpose and Scope

This Privacy and Personal Data Protection Policy (the “Policy”) sets out, on behalf of Dr. Ömer Fatih Şahin — who holds the status of data controller under Turkish Law No. 6698 on the Protection of Personal Data (the “Law”, “KVKK”) — the methods by which personal data is obtained and the legal grounds for doing so; the categories of data subjects and personal data; the purposes of processing; to whom and for what purposes personal data is transferred, including transfers abroad; the technical and administrative measures taken to protect personal data; the retention periods; and the rights of data subjects.

This Policy was last updated on 6 August 2026, taking into account the amendments made to Articles 6 and 9 of the Law by Law No. 7499 and the IT infrastructure actually used by our practice.

Your personal data is obtained by Dr. Ömer Fatih Şahin in accordance with the general principles of Article 4 of the Law and the principle of data minimisation;

in each case in fulfilment of the duty to inform, and — where required — with your explicit consent.

Personal data is processed on the legal grounds set out in Article 5 of the Law: the explicit consent of the data subject; processing being expressly provided for by law; factual impossibility; processing being directly related to the conclusion or performance of a contract; processing being necessary for the data controller to comply with a legal obligation; the data having been made public by the data subject; processing being necessary for the establishment, exercise or protection of a right; and processing being necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

Special categories of personal data are processed only where one of the conditions listed in Article 6 of the Law, as amended by Law No. 7499, is met. Your health data is processed primarily by, or under the supervision of, physicians and healthcare staff who are under a duty of confidentiality, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and the planning, management and financing of healthcare services; in all other cases it is processed only with your explicit consent.

3. Data Subjects and Categories of Personal Data

Dr. Ömer Fatih Şahin processes the personal data of the following groups, in the categories indicated:

4. Purposes of Processing

Personal data is processed by Dr. Ömer Fatih Şahin for the following purposes:

5. Transfers of Personal Data

Your personal data is transferred to third parties only for the purposes stated above and in accordance with Articles 8 and 9 of the Law. In all transfer processes the necessary technical and administrative measures are taken, and the need-to-know and data-minimisation principles are observed.

5.1. Domestic Transfers

5.2. Transfers Abroad

Our corporate e-mail is hosted on servers located in Turkey; when you e-mail us, or when contact-form content reaches us, this data is stored domestically. The operation of our website, however, relies on service providers whose servers are located outside Turkey. The personal data indicated below is therefore transferred to the following categories of recipients, in accordance with the conditions of Article 9 of the Law as amended by Law No. 7499:

If you include information about your health in a message sent via the contact form, that information will also pass through the relay service located abroad described above while the form is being delivered. If you prefer not to share health details online, we recommend contacting us by telephone or discussing them during your consultation.

Transfers abroad are carried out in accordance with the safeguards provided for in Article 9 of the Law, the principle of data minimisation and the principle of purpose limitation, taking into account that the relevant services can only be provided in this way; agreements containing data-protection provisions are concluded with the relevant service providers. Patient files and medical records are not kept on our website.

6. Technical and Administrative Measures Taken to Protect Personal Data

Dr. Ömer Fatih Şahin takes the technical and administrative measures required under Article 12 of the Law to ensure the confidentiality, integrity and security of personal data:

7. Retention Periods and Disposal

Dr. Ömer Fatih Şahin retains personal data for the periods prescribed by the applicable legislation or required by the purpose of processing:

At the end of these periods, personal data is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data. The periodic disposal interval is set at 6 months.

8. Rights of Data Subjects and How to Exercise Them

Under Article 11 of the Law, data subjects have the right to:

You may submit requests concerning these rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, with a petition containing information establishing your identity and the subject of your request:

Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature; where the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged.

9. Changes to This Policy

This Policy may be revised in line with changes in legislation or updates to our data-processing activities. The current version is always published on this page; the date of the most recent update is stated in Section 1.

☎