Privacy & Data Protection Notice

(GDPR & Turkish Personal Data Protection Law – KVKK)

GG Smile Clinic Oral and Dental Health Services Inc. (“Clinic”, “we”, “our”) is committed to protecting the privacy of personal data in compliance with the General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK – Law No. 6698). This notice explains how we collect, use, store, and protect your data.

1. Data Controller Information

  • Clinic: GG Smile Clinic Oral and Dental Health Services Inc.

  • Address: Üçgen Mah. Tonguç Cad. No: 55 B Muratpaşa, Antalya, Turkey

  • E-mail: info@ggsmileclinic.com

  • Phone: +90 545 559 72 60

2. Personal Data We Process

Depending on your relationship with our clinic (patient, dentist, employee, or supplier), we may process the following categories of personal data:

  • Identity details (name, surname, ID/passport number)

  • Contact details (address, phone, e-mail)

  • Health and treatment information (dental history, X-rays, prescriptions, medical reports)

  • Financial details (billing, payment, insurance information)

  • Professional/employment details (diplomas, contracts, working hours, perfor

3. Purposes of Processing

We process personal data only for legitimate purposes, including:

  • Providing dental health services and treatment planning

  • Fulfilling legal and regulatory obligations

  • Managing appointments, payments, and insurance processes

  • Ensuring workplace safety and quality control

  • Communication with patients and healthcare professionals

  • Compliance with tax, social security, and public authority requirements

4. Legal Basis for Processing

Your personal data are processed on the following legal grounds:

  • Explicit consent (GDPR Art. 6(1)(a), KVKK Art. 5)

  • Performance of a contract (GDPR Art. 6(1)(b))

  • Legal obligations (GDPR Art. 6(1)(c), KVKK Art. 5/2)

  • Legitimate interests pursued by the Clinic (GDPR Art. 6(1)(f))

  • Processing of health data for medical purposes under professional secrecy (GDPR Art. 9, KVKK Art. 6)

5. Transfer of Data

We may transfer data only when legally required or necessary for treatment:

  • To authorized public authorities (Ministry of Health, Social Security Institution, Tax Office)

  • To insurance companies and payment service providers

  • To laboratories, medical suppliers, or partner healthcare institutions (for treatment purposes)

  • To third-party IT providers, with appropriate data protection safeguards

6. Data Retention & Security

  • Personal data are stored securely and retained only for as long as necessary to fulfill the purposes above or as required by law.

  • We apply strict hygiene, sterilization, and cybersecurity standards to protect data against unauthorized access, alteration, or disclosure.

7. Your Rights (GDPR & KVKK)

You have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • File a complaint with the Turkish Data Protection Authority (KVKK) or a GDPR Supervisory Authority in your country

8. Contact for Data Protection

To exercise your rights, please contact us via:

📧 info@ggsmileclinic.com
📍 Üçgen Mah. Tonguç Cad. No: 55 B Muratpaşa, Antalya, Turkey