Last updated: 20 August 2026
This Privacy & Data Protection Notice explains how Op. Dr. Bilgehan Aydın (Specialist in Aesthetic, Plastic and Reconstructive Surgery), acting as data controller, collects and processes your personal data through the website https://bilgehanaydin.com.tr, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable to patients residing in the European Union, the principles of the EU General Data Protection Regulation (“GDPR”).
1. Data Controller
| Controller | Op. Dr. Bilgehan Aydın |
| Address | Defterdar Mah. Fethi Çelebi Cad. No.15 Eyüpsultan / Istanbul, Türkiye |
| info@bilgehanaydin.com.tr | |
| Phone | +90 501 350 63 44 |
2. Data We Collect
- Identity and contact data: name, surname, phone number, e-mail address, country; passport details where required for treatment organisation of international patients.
- Health data (special category): the complaints, requests and medical information you share via the appointment form, WhatsApp, phone, e-mail or during consultations; diagnosis, treatment and care records once a doctor–patient relationship is established.
- Visual records: before/after photographs and videos, only with your separate written consent.
- Technical data: IP address, browser and language preferences, log records and cookies (see our Cookie Policy).
- Financial data: invoicing and payment records required by law.
3. Purposes and Legal Bases
Your data are processed to: respond to appointment requests and communicate with you; plan and provide medical examination, diagnosis, treatment and care services; organise international health tourism services; fulfil legal record-keeping, invoicing and reporting obligations under Turkish healthcare law; establish, exercise or defend legal claims; and ensure website security.
The legal bases are: performance of a contract and pre-contractual steps; compliance with legal obligations; legitimate interests (website security, quality improvement); and — for health data — the provision of medical diagnosis, treatment and care by persons bound by professional secrecy (KVKK Art. 6/3-e; cf. GDPR Art. 9/2-h), or your explicit consent where required (e.g. health information submitted through the online form before a doctor–patient relationship exists, promotional use of images, certain international transfers). You may withdraw your consent at any time with effect for the future by writing to info@bilgehanaydin.com.tr.
4. Data Sharing and International Transfers
Your data may be shared, strictly on a need-to-know basis, with: hospitals, laboratories and healthcare professionals involved in your treatment; the Turkish Ministry of Health and other competent authorities where legally required; our accounting and legal advisers; and IT/hosting service providers. As an international patient, your data may be transferred to or from your country of residence (e.g. your local physician, hospital or insurer) in accordance with Article 9 of the KVKK — on the basis of an adequacy decision, appropriate safeguards, or your explicit consent. We never sell your personal data or use your health data for advertising.
5. Retention
Medical records are retained for the statutory periods prescribed by Turkish healthcare legislation (in practice at least 20 years for patient records); appointment enquiries that do not lead to treatment are kept for a maximum of 3 years; invoicing records for 5–10 years under tax and commercial law; website traffic logs for up to 2 years under Law No. 5651. Thereafter, data are erased, destroyed or anonymised.
6. Your Rights
Under Article 11 of the KVKK (and, where applicable, Articles 15–21 of the GDPR) you have the right to: learn whether your data are processed; request information, access and rectification; request erasure or destruction; be informed of third parties to whom data are transferred; object to results produced exclusively by automated analysis; and claim compensation for damages caused by unlawful processing. To exercise these rights, contact us at info@bilgehanaydin.com.tr or by post at the address above. Requests are answered free of charge within 30 days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr) and, for EU residents, with your local supervisory authority.
7. Security
Data are transmitted over SSL-encrypted connections and stored with access restricted to authorised personnel bound by professional secrecy. Appropriate technical and organisational measures are applied to prevent unlawful processing and access.
8. Updates
This notice may be updated from time to time; the current version is always published on this page with the date of the last revision.