DENTAKAY ORAL AND DENTAL HEALTH SERVICES LTD. CO.
CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA
In accordance with the Personal Data Protection Law No. 6698 ("KVKK" or "Law"), as Dentakay Oral and Dental Health Services Limited Company ("Dentakay" or the "Company"); we attach the utmost importance to the privacy and security of the personal data of our patients, potential patients, visitors, and business partners. In our capacity as Data Controller, we process, record, and store your personal data within the scope explained below, in accordance with the law and the rules of honesty, and transfer it to third parties in cases permitted by legislation.
This Clarification Text covers the data processing activities carried out through all clinics within Dentakay (Nish Istanbul, Şişli, Antalya, Ankara, etc.), websites (www.dentakay.com), call centres, and other communication channels.
1. Your Processed Personal Data and Categorisation
Due to the nature of the health and tourism services provided by Dentakay, your data declared by you or obtained through automatic/semi-automatic methods during the provision of services are collected in the following categories:
| Data Category | Data Content and Examples |
|---|---|
| Identity Information | Name, surname, T.R. Identity Number, place and date of birth, marital status, gender, protocol number. For foreign patients; passport number, nationality information, temporary identity number. |
| Contact Information | GSM number, landline phone number, e-mail address, residential address, country/city information, emergency contact person (name-surname, phone). |
| Special Categories of Personal Data (Health Data) | All kinds of anamnesis information regarding dental and oral health, panoramic/periapical x-ray images, tomography (CBCT) records, intraoral and extraoral photographs, treatment plans, prescription information, laboratory results, chronic diseases, allergy information, medications used, blood group, pregnancy status. |
| Visual and Auditory Records | CCTV (Closed Circuit Camera) records taken for clinic security purposes, call centre voice records, pre-treatment/post-treatment (Before/After) aesthetic smile photographs and videos. |
| Financial Data | Bank account information (IBAN), credit card information (masked information on the POS device slip), invoice details, payment plans, insurance policy information, and provision records. |
| Marketing and Transaction Security Data | Website cookie records (IP address, browser information, browsing history), campaign preferences, survey responses, message contents sent via appointment request forms. |
| Logistics and Travel Data | Flight information (PNR, date, time), hotel reservation details, location information for transfer services, passport details required for visa invitation letters. |
2. Purposes of Processing Personal Data
Your personal data is processed by Dentakay for the following specific purposes, in accordance with the basic principles specified in Articles 4, 5, and 6 of the KVKK:
A. Execution of Medical Diagnosis, Treatment, and Care Services
Your personal health data and identity information are processed for the purposes of performing oral and dental health examinations, making diagnoses, creating treatment plans, performing surgical and aesthetic dentistry applications, producing and fitting dental prostheses in a laboratory environment, providing medicine/materials, and managing post-treatment control processes. This process is our primary activity within the scope of the Basic Law on Health Services No. 3359 and Decree-Law No. 663.
B. Health Tourism and Operational Logistics Processes
For our patients coming from Turkey and abroad; identity, contact, and travel data are processed for the purposes of organising airport-hotel-clinic transfers, making accommodation reservations, supporting visa procedures (issuing invitation letters), and providing translation services.
C. Fulfilment of Legal and Administrative Obligations
Fulfilment of notification obligations (E-Nabız, USS, etc.) arising from the legislation of the T.R. Ministry of Health, Provincial Health Directorates, Social Security Institution (SGK), and other relevant public institutions; issuing invoices, making tax payments, and ensuring financial reconciliations; storing patient files for legal periods (in accordance with the Regulation on Private Hospitals and relevant legislation).
D. Patient Relations Management and Increasing Service Quality
Making appointment reminders (SMS, call, e-mail), implementing patient satisfaction surveys, evaluating requests and complaints, and carrying out call centre services in accordance with quality standards.
E. Promotion and Marketing Activities (Subject to Explicit Consent)
Providing personalised treatment suggestions, informing about new services and campaigns, and sharing success stories (before/after images) on the website and social media channels. Note: The use of health data for marketing purposes and visual sharing is subject to the separate explicit consent of the patient.
3. Method and Legal Grounds for Collecting Personal Data
Your personal data is collected in oral, written, visual, or electronic media through Dentakay clinics, websites (dentakay.com and subdomains), mobile applications, call centres, e-mail, SMS, WhatsApp lines, social media platforms (Facebook, Instagram, LinkedIn, etc.), and our authorised business partners (health tourism agencies).
- Explicitly Provided for in Laws: Ministry of Health legislation, Tax Procedure Law, Labour Law, etc.
- Performance of Contract: Fulfilment of the requirements of the treatment and service contract established between the patient and Dentakay.
- Actual Impossibility: Protection of the life of a patient who is unconscious or unable to express their consent.
- Legal Obligation: Enabling the data controller to fulfil its legal responsibilities (notification, storage, security).
- Medical Diagnosis and Treatment (KVKK Art. 6/3): Processing of data regarding health and sexual life by our physicians under the obligation of confidentiality for the purpose of carrying out treatment and care services.
- Legitimate Interest of the Data Controller: Appointment tracking, ensuring the physical security of the clinic (camera recordings), and improving business processes (provided that it does not harm fundamental rights).
- Explicit Consent: Obtained separately from the relevant person for special cases such as marketing activities, data transfer abroad, and sharing treatment visuals on social media.
4. Transfer of Personal Data
Your collected personal data may be transferred to the following parties for the purpose of achieving the aforementioned objectives and in accordance with Articles 8 (Domestic Transfer) and 9 (International Transfer) of the KVKK:
- Official Institutions and Organisations: T.R. Ministry of Health, Provincial Health Directorates, General Directorate of Security, Courts and Execution Offices, Tax Offices, SGK (within the scope of legal obligations).
- Medical Business Partners: DentakayLabs (for prosthesis production), external laboratories, pathology centres, specialist physicians consulted, and imaging centres.
- Operational Suppliers: Information technology infrastructure providers, companies providing database and server services, financial advisors, law firms, and translation offices.
- Tourism and Logistics Partners: Contracted hotels (for accommodation), transfer companies (for transport) - limited only to the necessary identity and location information.
- International Stakeholders (Transfer Abroad): The insurance company in the patient's own country, Dentakay's overseas liaison offices (London, Riyadh, etc. - for coordination purposes), and servers abroad of global technology providers used (Google, Meta, WhatsApp). These transfers are carried out in accordance with Article 9 of the Law in cases where; (i) the explicit consent of the relevant person exists, or (ii) the countries where sufficient protection is available are declared by the Board, or (iii) the data controllers in Turkey and the relevant foreign country undertake sufficient protection in writing and the Board's permission is obtained (signing of Standard Contracts).
5. Data Security and Retention Periods
Dentakay takes all necessary technical and administrative measures (firewalls, encryption, authorisation matrices, personnel training, etc.) to protect your personal data against loss, theft, and unauthorised access. Your personal data is stored for the periods stipulated in the relevant legislation:
- Patient Medical Records: 20 years from the end of treatment.
- Deceased Patient Records: 30 years (in accordance with the amendment to the Regulation on Personal Health Data).
- Forensic Case Records: During the period of the statute of limitations for the lawsuit (at least 20 years).
- CCTV Records: Average 2 months (depending on recording device capacity).
- Accounting Records: 10 years.
Data whose period has expired is deleted, destroyed, or anonymised periodically in accordance with the Dentakay Data Retention and Destruction Policy.
6. Your Rights under the KVKK (Article 11)
As a data subject, you can use the following rights by applying to Dentakay:
- Learning whether your personal data is processed,
- If processed, requesting information regarding this,
- Learning the purpose of processing and whether they are used in accordance with their purpose,
- Knowing the third parties to whom data is transferred domestically or abroad,
- Requesting correction if it is incomplete or incorrectly processed,
- Requesting its deletion or destruction within the framework of Article 7 of the KVKK,
- Requesting notification of the correction, deletion, and destruction processes to the third parties to whom the data is transferred,
- Objecting to the emergence of a result against you by analysing it exclusively through automatic systems,
- Requesting compensation for the damage in case you suffer damage due to unlawful processing.
You can submit your requests regarding your rights by filling out the "Data Controller Application Form":
- In writing: In person or through a notary public to the address "Çobançeşme Mah. Sanayi Cd. Nish İstanbul No: 44A Kat: 10 34196 Bahçelievler / İstanbul"
- Via Registered Electronic Mail: To the address [email protected]
- Via e-mail: To the address [email protected] through your e-mail address registered in our system.
Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature.
DENTAKAY COOKIE POLICY
Effective Date: 16 January 2026
1. Introduction and Purpose
As Dentakay Oral and Dental Health Services Ltd. Co. ("Dentakay"), we use cookies, pixels, local storage technologies, and similar tracking tools to improve your experience during your visit to our website (www.dentakay.com), to measure site performance, and to offer personalised content suitable for your interests. This policy has been prepared to inform you transparently about what these technologies are, how they are used, and how you can manage your preferences.
2. What is a Cookie?
Cookies are small data files that are recorded on your device (computer, tablet, mobile phone) through your browser when you visit a website and enable information exchange between the site server and your device. Cookies allow the website to remember you (for example, your language preference or session information) and contribute to the site working more efficiently.
3. Cookie Categories and Purposes of Use
The cookies used on the Dentakay website are collected in four main categories according to their purposes of use:
A. Mandatory (Strictly Necessary) Cookies
These cookies are essential for the technical operation of our website, ensuring security, and providing the basic services you request (page navigation, access to appointment forms, saving privacy preferences). These cookies are not used for marketing purposes and are not subject to your consent. If you block these cookies from your browser settings, some parts of the site may not work.
Examples: Session ID, CSRF security tokens, cookie consent status record.
B. Analytical and Performance Cookies
Help us understand how visitors use our website, measure traffic sources, and identify the most popular pages. Thanks to these cookies, we improve site performance and optimise user experience. The information collected is aggregate and anonymous; it does not directly identify you.
Services Used: Google Analytics 4, Hotjar.
Function: Number of visitors, bounce rate, time spent on the page, click maps (heatmap).
C. Functional Cookies
Enable our website to remember the choices you make (language preference, region, username, etc.) and provide you with more advanced, personalised features.
Example: Live Chat history, preferred currency.
D. Targeting and Advertising (Marketing) Cookies
These cookies are used to show you relevant advertisements on other websites or social media platforms (Facebook, Instagram, Google) based on your interests and browsing habits on our website. They can be placed by Dentakay and its advertising business partners. These cookies are only activated with your explicit consent (by clicking the "Accept" button). If you do not allow them, general content will be shown instead of advertisements specific to you.
Services Used: Meta (Facebook) Pixel, Google Ads Conversion Linker.
4. List of Specific Cookies Used on Our Website
The table below details the main cookies used on dentakay.com, their providers, and their retention periods:
| Cookie Name | Provider | Category | Duration | Description and Purpose |
|---|---|---|---|---|
| _ga | Google Analytics | Analytical | 2 Years | Used to distinguish users with a unique ID (Client ID) and calculate session statistics. |
| _gid | Google Analytics | Analytical | 24 Hours | Used to analyse daily visitor traffic and differentiate users. |
| _gat / _dcgtm | Google Analytics | Analytical | 1 Minute | Used to limit request rate and control data flow. |
| _fbp | Meta (Facebook) | Marketing | 3 Months | Placed by Facebook; used to track conversion of advertisements and for retargeting purposes. |
| _hjSession | Hotjar | Analytical | 30 Minutes | Collects behavioural data (click, scroll) belonging to the user's current session and creates a heat map. |
| _hjSessionUser | Hotjar | Analytical | 1 Year | Unique user ID that enables Hotjar to understand whether the same user visits the site again. |
| _hjAbsoluteSessionInProgress | Hotjar | Analytical | 30 Minutes | True/False flag used to detect the user's first page view session. |
| cookieconsent | Dentakay | Mandatory | 1 Year | Used to remember the user's consent or refusal given to the cookie policy. |
| lang | Dentakay | Functional | Session | Remembers the user's preferred language option (TR, EN, FR, AR). |
5. Cookie Management and Changing Preferences
You can manage your preferences through the "Cookie Banner" that appears on your first entry to our website.
- Accept All: You allow all cookie categories.
- Settings / Manage Preferences: You can turn Analytical and Marketing cookies on and off separately.
- Decline: Only Mandatory cookies work, others are blocked.
You can change your preferences at any time by clicking the "Cookie Settings" link at the bottom of our website. Additionally, you can delete or block cookies using your internet browser's settings:
- Google Chrome: Settings > Privacy and Security > Cookies
- Mozilla Firefox: Options > Privacy and Security
- Safari: Preferences > Privacy
- Internet Explorer / Edge: Settings > Site Permissions
6. Data Controller Contact
For your questions regarding our cookie policy or your personal data, you can review our Clarification Text page or contact us at [email protected].