Privacy Policy and Data Protection Notice
This notice explains how personal data is processed on hanifisahin.com (the “Site”) and informs you under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”). For visitors in the European Economic Area and the United Kingdom, it also describes the main rights available to you under data protection law.
Data controller
Prof. Dr. Hanifi Şahin — Halaskargazi Cad. No: 93 Floor 2, Şişli / Istanbul, Türkiye. E-mail: info@hanifisahin.com. Phone: +90 (542) 483 24 24.
What data do we process?
- Appointment / contact form: full name, phone number, selected subject, e-mail address (optional), country (optional) and your message.
- Phone and WhatsApp: the contact details and message content you share when you contact us, including any medical reports or images you choose to send; these are health data and are used only to prepare your consultation.
- Usage data: IP address, browser and device information, pages visited; if you arrive from an advertisement, the
gclidandutm_*parameters. Analytics and advertising measurement data are processed only if you give cookie consent. - Security records: server and form logs to prevent spam and abuse; when you use the form, a Cloudflare Turnstile check (IP address and browser signals) may be processed.
- Automatic reply: if you enter an e-mail address, a confirmation e-mail is sent to you.
Important: The forms are not designed for emergencies or for detailed health information. Please do not write diagnoses, reports or your detailed medical history in the form; you can share them at the consultation. In an emergency, contact your local emergency services or go to the nearest emergency department.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your appointment request and contacting you | Steps taken at your request prior to entering into a contract; explicit consent |
| Health information you choose to send us (message, reports sent by WhatsApp or e-mail) | Your explicit consent (GDPR Art. 9(2)(a); KVKK Art. 6), which you can withdraw at any time |
| Site security, preventing spam and abuse | Legitimate interest |
| Visit statistics and measuring advertising performance | Explicit consent (cookie preference) |
| Meeting legal obligations | Legal obligation |
Sharing of data
Your data is not sold. Where necessary it may be shared with hosting and e-mail service providers, with Cloudflare (Turnstile) for form security, and with public authorities if legally required. Google services (Google Analytics, Google Tag Manager, Google Ads) are used for analytics and advertising measurement; these providers, as well as Cloudflare and WhatsApp (Meta), may process data outside Türkiye and outside the EEA/UK, in particular in the United States. Google services are enabled only with your consent. If you contact us via WhatsApp, the conversation is subject to WhatsApp’s own terms.
Retention
Appointment and contact records are kept until your request has been concluded and for the relevant legal periods; security records are kept for a reasonable period. After that they are deleted, destroyed or anonymised.
Your rights
You have the right to learn whether your personal data is processed, to request information about it, to learn its purpose and whether it is used accordingly, to know the third parties to whom it is transferred within or outside Türkiye, to request correction of incomplete or inaccurate data, to request deletion or destruction, to request that these actions be notified to third parties, to object to a result to your detriment arising from the analysis of your data exclusively by automated systems, and to claim compensation for damage caused by unlawful processing. Where EU/UK data protection law applies you also have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time (without affecting processing carried out before withdrawal), and the right to lodge a complaint with your supervisory authority.
Send requests to info@hanifisahin.com or to the postal address above. We reply within 30 days. You may also complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr).
Security
The Site is served over an encrypted (SSL/TLS) connection. Forms have spam protection and rate limiting, and administrative access is restricted to authorized personnel.
Cookies
For cookies and how to manage your preferences, see the Cookie Policy.
Medical content and legal notice
The content of the Site is for general information and does not replace diagnosis, treatment planning or a physician’s examination. See the Legal Notice.
Last updated: November 2026.