en
TR 
SK 
ITA 
FR 
DE 
ES 
BG KVKK Information Notice
- Last updated: 21 August 2026
- Scope: Website visitors, prospective patients and patients.
This notice is provided by Hoi Sağlık Hizmetleri Turizm İnşaat Sanayi ve Ticaret A.Ş as data controller, under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1) Data controller
Healthcare provider — controller of patient and health data
Company name: Hoi Sağlık Hizmetleri Turizm İnşaat Sanayi ve Ticaret A.Ş
Health institution licence: Certificate of Compliance (Uygunluk Belgesi) No. 08/09/2010-37, Istanbul Provincial Health Directorate
Address: Ataköy 2–5–6. Kısım Mah. Rauf Orbay Cad. No:4 Yalı Ataköy C Blok Daire: 36, Bakırköy / İstanbul, Türkiye
MERSİS / company no.: 0463093931200001
Email: info@hairofistanbul.com · KEP: hoiturizm@hs01.kep.tr
Phone: +90 532 650 51 51
The Dubai office provides consultation and follow-up only. All surgical procedures are performed at the Istanbul clinic.
2) Data processed and purposes
- Identity and contact: managing enquiries, appointments and communication.
- Health data: assessment, treatment and aftercare.
- Financial data: invoicing and payment.
- Visual and audio data: processed only with explicit consent.
- Marketing and analytics data: processed only with explicit consent.
3) Legal bases
- Art. 5/2 (c), (ç), (e), (f): necessity for a contract, compliance with a legal obligation, establishment or exercise of a right, and legitimate interest.
- Art. 6/3: health data processed by persons under a duty of confidentiality for the purposes of diagnosis, treatment and care.
- Explicit consent: marketing, profiling, publication of visuals, and transfers abroad that are not otherwise permitted.
4) Transfers
- Within Türkiye: public authorities, hospitals and laboratories, logistics and accommodation providers, interpreters, and IT suppliers, to the extent necessary.
- Abroad: under Art. 9 KVKK, to countries with adequate protection, on the basis of a standard contract, or with your explicit consent.
5) Method of collection
Data is collected through electronic channels (website forms, email, WhatsApp, telephone, CRM) and through physical documents provided at the clinic.
6) Retention
Data is retained for the period prescribed by the applicable legislation, or until the purpose of processing ceases, and is then deleted, destroyed or anonymised.
7) Consent texts
Where processing depends on your explicit consent, the following texts are presented to you separately. Consent is optional and may be withdrawn at any time; withdrawal does not affect the lawfulness of processing carried out before it.
7.1. Commercial communication
I consent to receiving commercial electronic messages from Hoi Sağlık Hizmetleri Turizm İnşaat Sanayi ve Ticaret A.Ş by SMS, email and telephone.
7.2. Marketing and analytics cookies
I consent to the use of non-essential cookies on this website and to the related transfer of data for advertising and measurement purposes.
7.3. International transfer
I consent to my personal data being transferred to and processed on servers located abroad.
7.4. Publication of visuals
I consent to the publication of my before-and-after photographs on the Hair of Istanbul website and social media accounts.
8) Data subject application (Art. 13)
You may submit an application concerning your rights through any of the following channels:
- Email: info@hairofistanbul.com
- Registered electronic mail (KEP): hoiturizm@hs01.kep.tr
- Post: Ataköy 2–5–6. Kısım Mah. Rauf Orbay Cad. No:4 Yalı Ataköy C Blok Daire: 36, Bakırköy / İstanbul, Türkiye
- In person: a signed written application, or a petition bearing a secure electronic signature.
Your application should state your name, surname, a signature if written, your Turkish ID number or, for foreign nationals, your nationality and passport number, your address for notification, and the subject of your request. We respond within 30 days at the latest. The request is free of charge unless a separate cost arises, in which case the tariff set by the Personal Data Protection Board applies.
9) Your rights (Art. 11)
- to learn whether your personal data is processed;
- to request information if it has been processed;
- to learn the purpose of processing and whether it is used accordingly;
- to know the third parties to whom it has been transferred, in Türkiye or abroad;
- to request correction, deletion or destruction, and notification of this to third parties;
- to object to an adverse result produced by automated analysis, and to claim compensation for damage caused by unlawful processing.
10) Frequently asked questions
Do I have to communicate through WhatsApp?
No. Email and telephone are equally available, and choosing them does not affect the service you receive.
Why are photographs requested?
For a preliminary assessment of your hair loss. Photographs are used for publication only if you give separate explicit consent.
What happens if I withdraw my consent?
Marketing communication stops and consent-based processing ends. Data that we are legally required to keep, such as medical and financial records, is retained for the statutory period.
Who can I complain to?
You may apply to us first. If you are not satisfied with the outcome, you may lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) within the time limits set by law.
