Skip to content

Privacy Policy

How we collect, use and protect your personal data when you visit this website, use its forms or contact the clinic, and the rights you have under Turkish data protection law.

Last updated:

This Privacy Policy explains how personal data are processed when you visit husnususlu.com, use the forms on this website, or contact the clinic by phone, WhatsApp or e-mail. It is the English version of our Turkish privacy notice, prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), which is the law that governs our processing. If the two versions differ, the Turkish version prevails.

Who is responsible for your data

The data controller is Prof. Dr. Hüsnü Süslü Muayenehanesi, the private medical practice of Prof. Dr. Hüsnü Süslü ("the clinic", "we").

  • Address: Göztepe Mah. Bağdat Cad. Alemdar Apt. No:213 D:3, Kadıköy, Istanbul, Türkiye
  • Phone: +90 216 234 18 81
  • WhatsApp: +90 530 171 88 60
  • E-mail: info@husnususlu.com

What we collect

We aim to collect only what we need. What we process depends on how you contact us.

Contact and consultation request forms

  • Identity and contact details: name, phone number and e-mail address
  • Your request: your message and any other fields you complete
  • Health information (optional): details of your symptoms, diagnosis or treatment history that you choose to write in the message field
  • Security and consent records: the date, time and page of submission; your consent record (the consent text and when you gave it); browser information; and an irreversibly transformed (hashed) form of your IP address, used to prevent abuse

The forms ask only for what we need to reply and arrange a consultation. Please do not send ID numbers, detailed test results or full medical records through a form; we will ask for the documents we need when planning your consultation.

Phone, WhatsApp and e-mail

  • Name, phone number and e-mail address
  • The content, date and time of messages and calls
  • Reports, images (MRI, CT, etc.) and other health information that you choose to share

When you message us on WhatsApp or social media, that platform's own privacy terms also apply. You can always reach us by phone or e-mail instead.

Online booking (Doktortakvimi)

The online booking calendar is provided by Doktortakvimi and loads only when you click "Show calendar". If you book through it, Doktortakvimi processes your data under its own privacy notice. So that your appointment can be managed, your booking details (name, contact details, appointment time and, if given, the reason for your visit) are passed to the clinic and processed for the purposes described here.

Visiting the website: cookies and server logs

  • Strictly necessary cookies: used to run the website, keep it secure and remember your cookie choice.
  • Analytics cookies: used only if you consent. Google Analytics 4 then processes usage information such as the pages you visit, time spent on them, device and browser type, approximate location (country and city level) and how you reached the site.
  • Server and security logs: when you access the site, technical records such as your IP address, the date and time, the page requested and browser information are created.

For details, see our Cookie Policy.

If you become a patient

Records created during your consultation and treatment (for example your history, examination findings, test results and treatments given) are processed by the physician, who is bound by medical confidentiality, for diagnosis and treatment. They are kept for the periods required by Turkish health legislation. You will receive separate information about this at the clinic.

Why we use your data

  • To answer your questions and stay in touch with you
  • To assess your consultation request, arrange an appointment and, where needed, remind you of it or change it
  • To review the symptoms and documents you share before your consultation and plan it accordingly
  • For international patients, to carry out a preliminary review of reports and plan the timing of a visit
  • To keep the website secure, prevent spam and abuse, and fix technical problems
  • With your consent, to measure how the website is used and improve its content
  • To comply with legal obligations, respond to competent authorities and protect legal rights in the event of a dispute

We do not send you marketing messages, and we do not use your data for profiling or advertising.

Data are collected electronically, partly by automated means, through the website's forms, cookies and server logs, and through the information you send us by phone, WhatsApp, e-mail or Doktortakvimi. Under KVKK we rely on the following legal bases:

  • Contract (Article 5(2)(c)): assessing your consultation request and planning your visit
  • Legitimate interests (Article 5(2)(f)): answering your questions, keeping the website secure, preventing abuse and using strictly necessary cookies
  • Legal obligation (Article 5(2)(ç)): record-keeping and reporting duties under Turkish law, and requests from competent authorities
  • Establishing, exercising or defending legal rights (Articles 5(2)(e) and 6(3)(d)): in the event of a dispute
  • Explicit consent (Article 5(1)): analytics cookies
  • Explicit consent (Article 6(3)(a)): health information you choose to share in forms and messages, used to reply to you and to review your case before a consultation (see Explicit Consent)
  • Medical diagnosis and treatment (Article 6(3)(e)): processing of your health data during consultation and treatment by the physician, who is bound by medical confidentiality

Health data are a special category of personal data. When processing them, we apply the adequate measures set by the Turkish Personal Data Protection Board.

Who we share data with

Your data are shared only with the following recipients, and only as far as necessary:

  • IT service providers: the hosting, content delivery and security providers that run the website, and those who provide technical support (acting as data processors)
  • E-mail service provider: to deliver form notifications and e-mail correspondence
  • Analytics provider: Google (Google Analytics 4), only if you accept analytics cookies
  • Healthcare facilities: if an interventional procedure is planned after your consultation, the information needed for your treatment is shared, with your knowledge, with the facility where the procedure will take place
  • Competent public authorities and courts: where required by law or requested by an authority with legal power to do so

We do not sell or rent your data, and we do not share it with third parties for marketing.

International transfers

Some of the services we use may store data on servers outside Türkiye. Your data are transferred abroad in these cases:

  • If you accept analytics cookies, usage data collected by Google Analytics 4
  • If you choose to contact us on WhatsApp, your messages and any documents you send
  • If our hosting or e-mail providers' servers are located outside Türkiye, the data processed through those services

These transfers are made in line with Article 9 of KVKK and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad. Where possible, we rely on appropriate safeguards such as the standard contract published by the Personal Data Protection Board. Where these cannot be put in place, an occasional transfer may rely on one of the grounds listed in Article 9(6), such as your explicit consent after being informed of the possible risks. If you prefer a channel that does not involve a transfer abroad, you can contact us by phone.

How long we keep data

  • Form submissions and messages: up to 2 years after your request has been completed. If your request leads to a consultation or treatment, the information that becomes part of your medical record is kept for the periods required by health legislation.
  • Consent records: kept with the related submission and deleted with it.
  • Server and security logs: for the period required by law, and no longer than 2 years.
  • Analytics data: no longer than 14 months in Google Analytics.
  • Your cookie choice: up to 12 months, after which we ask again.

At the end of these periods, data are deleted, destroyed or anonymised. If there is a legal dispute or a request from a competent authority, the relevant data may be kept until the matter is resolved.

How we protect your data

In line with Article 12 of KVKK, we take appropriate technical and organisational measures to protect your data. Traffic to the website is encrypted (HTTPS). Only authorised people can access form submissions, and actions in the website's admin panel are logged. Access to health data is limited to those who need it for their work, and they are informed of their confidentiality obligations.

Your rights

Under Article 11 of KVKK, you can apply to the clinic to:

  • Find out whether your personal data are processed
  • Request information about the processing
  • Find out the purpose of the processing and whether your data are used accordingly
  • Know the third parties in Türkiye or abroad to whom your data are transferred
  • Ask for incomplete or inaccurate data to be corrected
  • Ask for your data to be erased or destroyed under the conditions set out in Article 7
  • Ask for any correction, erasure or destruction to be notified to third parties to whom your data were transferred
  • Object to a result against you that arises solely from automated analysis of your data
  • Claim compensation if you suffer damage because of unlawful processing

Where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before that date.

If you live in the EU, the EEA or the UK: depending on the circumstances, the EU General Data Protection Regulation (GDPR) or the UK GDPR may also apply to some of our processing. Where it does, you also have the rights those laws provide, such as the rights to restrict processing, to object and to data portability, and you may complain to the data protection authority in your country. We will assess each request under the law that applies to it.

How to make a request

You can send your request in one of these ways:

  • By a signed letter, delivered by hand or sent by post to Göztepe Mah. Bağdat Cad. Alemdar Apt. No:213 D:3, Kadıköy, Istanbul, Türkiye
  • By e-mail to info@husnususlu.com, either signed with a secure electronic signature or mobile signature, or sent from an e-mail address you have previously given us

Under Turkish rules, your request must include:

  • Your name and surname, and your signature if the request is in writing
  • For Turkish citizens, your Turkish ID number; for foreign nationals, your nationality and passport number, or ID number if you have one
  • Your address for official correspondence
  • Your e-mail address, phone or fax number, if any
  • What you are asking for

We will respond as soon as possible and within 30 days at the latest, free of charge. If responding involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. We may ask for further information to confirm your identity.

If your request is rejected, you find our response insufficient or we do not respond in time, you can complain to the Turkish Personal Data Protection Board within 30 days of learning of our response, and in any case within 60 days of the date of your request.

Children

The forms on this website are intended for adults. For a patient under 18, the request should be made by a parent or legal guardian.

Changes to this policy

We may update this policy when the law or our processing changes. The current version is always published on this page.

Last updated: 4 October 2026