Data Protection Disclosure (KVKK)

1. Identity of the Data Controller

Bursa Eurofertil IVF Centre acts as the data controller within the scope of KVKK.

• Name: Bursa Eurofertil IVF Centre
• Address: Bursa, Türkiye
• E-mail: [email protected]
• Website: bebekistiyorum.com

2. Personal Data Processed and Collection Methods

The following categories of personal data are collected via website forms, telephone calls, and in-person applications:

• Identity data: Name and surname
• Contact data: Phone number and e-mail address
• Health data: Medical information submitted through appointment and question request forms (sensitive personal data)
• CV data: Resume information shared in HR applications
• Transaction security data: IP address, cookie records, and website usage logs

3. Purposes of Processing and Legal Bases

Your personal data is processed for the following purposes and on the following legal bases:

• Appointment management - KVKK Art. 5/2(c): establishment and performance of a contract
• Provision of healthcare services - KVKK Art. 6/3: processing of health data for preventive medicine and medical diagnosis
• HR processes - KVKK Art. 5/2(c): establishment of an employment contract
• Fulfilment of legal obligations - KVKK Art. 5/2(ç): legal obligation
• Website security and functionality - KVKK Art. 5/2(f): legitimate interest

4. Recipients of Personal Data Transfers

Your personal data may be shared with the following parties for the stated purposes:

• Authorised public authorities: For compliance with legal obligations, within the scope of applicable legislation
• Healthcare infrastructure providers: For operating appointment and patient management systems
• Technical service providers: For website hosting and security services

5. Cross-border Transfer of Personal Data

Your personal data is not transferred abroad. Should this change, the transfer will be carried out in compliance with Article 9 of KVKK and only with your explicit consent.

6. Data Retention Periods

Your personal data is deleted, destroyed, or anonymised once the purpose of processing has been fulfilled or the retention period prescribed by applicable legislation has expired:

• Medical records and health data: At least 20 years under applicable healthcare regulations
• Appointment and contact records: 5 years
• HR application records: 2 years following the recruitment process
• Website log records: 2 years

7. Your Rights as a Data Subject (KVKK Art. 11)

Pursuant to Article 11 of KVKK, you may exercise the following rights by applying to the data controller:

• To learn whether your personal data has been processed
• To request information if it has been processed
• To learn the purpose of processing and whether data is used in accordance with that purpose
• To know the third parties to whom data has been transferred, domestically or abroad
• To request correction of incomplete or inaccurate data and to request that such correction be notified to third parties
• To request deletion or destruction of data under the conditions set out in KVKK Art. 7
• To object to a result that arises against your interests through automated analysis of your data
• To claim compensation for damages suffered due to unlawful processing of your data

8. How to Exercise Your Rights

You may submit your requests concerning the rights listed above by delivering a written application to our centre together with identity-verifying documents, or by sending an e-mail to [email protected]. Your request will be responded to within 30 days depending on its nature. If the request incurs an additional cost, the tariff determined by the Personal Data Protection Board will apply.