Notice
EU/EEA Privacy Notice
Last Updated: 7 September 2026
This Privacy Notice explains how Özel Renewa Suadiye Polikliniği (“Renewa”, “the Clinic”, “we”, “us” or “our”), a healthcare provider located in Istanbul, Türkiye, collects, uses and protects personal data relating to individuals located in the European Union (“EU”) and European Economic Area (“EEA”).
Where the General Data Protection Regulation (“GDPR”) applies to our processing activities, we process your personal data in accordance with the principles and requirements of the GDPR.
1. Data Controller
The data controller is:
Özel Renewa Suadiye Polikliniği
Suadiye, Emin Ali Paşa Cd. No:43
34740 Kadıköy/İstanbul, Türkiye
Email: info@drkayiran.com
Telephone: +90 549 242 40 40
2. Personal Data We May Collect
Depending on how you interact with us, we may process:
- Identification information, such as your name and surname;
- Contact information, including your email address and telephone number;
- Country or location information provided by you;
- Appointment, consultation and enquiry information;
- Information about treatments or procedures in which you express an interest;
- Messages and other information you voluntarily provide;
- Health or medical information you voluntarily provide in connection with a consultation or treatment request;
- Photographs, documents or other materials you choose to submit where such functionality is provided;
- Technical information, including IP address, browser, device and security information;
- Cookie and website usage information where applicable.
Please avoid providing unnecessary medical or other sensitive information through general-purpose website forms.
3. Special Category Data
Information concerning your health constitutes special category personal data under the GDPR.
Where we process health information, we will do so only where an appropriate legal basis under Article 6 GDPR and an applicable condition under Article 9 GDPR exist.
Depending on the circumstances, this may include processing necessary for the provision or management of healthcare, processing necessary for the establishment, exercise or defence of legal claims, or processing based on your explicit consent where required.
4. Why We Process Your Personal Data
We may process personal data to:
- Respond to enquiries;
- Process appointment or consultation requests;
- Communicate with you regarding treatments and healthcare services;
- Assess whether and how we may be able to provide a requested service;
- Arrange and provide healthcare services;
- Maintain appropriate patient and communication records;
- Operate and secure our website and systems;
- Detect and prevent misuse or security incidents;
- Comply with applicable legal and regulatory obligations;
- Establish, exercise or defend legal claims;
- Send marketing communications where permitted and, where required, with your consent.
5. Legal Bases for Processing
Depending on the particular processing activity, we may rely on:
- Your consent;
- Steps taken at your request before entering into a contract or performance of a contract;
- Compliance with a legal obligation;
- Our legitimate interests, where those interests are not overridden by your rights and freedoms;
- Establishment, exercise or defence of legal claims; and
- Applicable conditions permitting the processing of health or other special category data.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Recipients and Service Providers
Where necessary, personal data may be shared with appropriately authorised:
- Clinic personnel and healthcare professionals;
- Website and hosting providers;
- IT, cybersecurity and infrastructure providers;
- Email and communications providers;
- Appointment or patient-management service providers;
- Professional advisers;
- Government, regulatory, judicial or law-enforcement authorities where legally required.
We limit disclosures to what is reasonably necessary for the relevant purpose.
7. International Transfers
Renewa is located in Türkiye. If you are located in the EU or EEA, submitting personal data to us may therefore involve the transfer and processing of your personal data outside the EU/EEA.
Where GDPR requirements concerning international transfers apply, we use an appropriate transfer mechanism or safeguard as required by applicable law.
Some technology service providers used by the website may also process information in other countries.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including the provision of healthcare services and compliance with applicable medical, legal, accounting and regulatory obligations.
Different retention periods may apply to patient records, general enquiries, technical logs and consent records.
When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of in accordance with applicable requirements.
9. Your GDPR Rights
Where the GDPR applies, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete data;
- Request erasure of your personal data;
- Request restriction of processing;
- Object to certain processing;
- Receive certain personal data in a portable format;
- Withdraw consent where processing is based on consent;
- Object to direct marketing;
- Lodge a complaint with a competent data protection supervisory authority.
These rights are subject to the conditions and exceptions established by applicable law.
10. Automated Decision-Making
We do not use information submitted through this website to make decisions based solely on automated processing that produce legal or similarly significant effects on you, unless expressly stated otherwise.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies necessary for its operation and security.
Where optional analytics, advertising or other non-essential technologies are implemented, information about their purposes and your choices will be provided through our Cookie Policy and, where required, a consent mechanism.
12. Children’s Data
Our website and international enquiry services are not intended for children to submit personal information independently. Where healthcare services concerning a minor are requested, we may require information and authorisation from a parent, guardian or other legally authorised person as appropriate.
13. Security
We implement appropriate organisational and technical measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet-based system can, however, be guaranteed to be completely secure.
14. Contact and Complaints
Questions, requests or concerns regarding your personal data may be submitted to:
Özel Renewa Suadiye Polikliniği
Suadiye, Emin Ali Paşa Cd. No:43
34740 Kadıköy/İstanbul, Türkiye
Email: info@drkayiran.com
Telephone: +90 549 242 40 40
Where applicable, you may also have the right to lodge a complaint with the data protection supervisory authority competent for your circumstances.
15. Changes to This Notice
We may update this Privacy Notice to reflect changes to our services, technologies or legal obligations. The latest version will be published on this page with its updated revision date.