§ 1 Information on the Collection of Personal Data
(1)
The following provides information on how personal data is processed when using our website. Personal data, as defined in Art. 4 para. 1 GDPR, includes all data that can be related to you personally, such as your name, address, email addresses, and user behaviour. This policy serves to inform you about our data processing activities and to comply with legal obligations, particularly those under the EU General Data Protection Regulation (GDPR).
(2)
The data controller, as defined in Art. 4 para. 7 GDPR, is HSC AĞIZ VE DİŞ SAĞLIĞI MERKEZİ TİCARET LİMİTED ŞİRKETİ, Address: Altunizade Kısıklı St. Sarkuysan-Ak Business Center No:4/2 / Inner Door No:9 / 34662, Üsküdar/Istanbul, Turkey, hello@hsctr.com (see our legal notice). You can contact our Data Protection Officer at fatih@hsctr.com or via our postal address with the addition “for the attention of the Data Protection Officer.”
(3)
If you contact us via email or using a contact form, the data you provide (your email address, your name if given, and any voluntary details such as your phone number) will be stored by us to answer your inquiries. Data arising in this context will be deleted if it is associated with a contractual matter, after the retention period ends. Otherwise, we delete data when it is no longer required or restrict processing if there are statutory retention obligations.
(4)
If we use third-party service providers for specific functions of our offerings or intend to process your data for promotional purposes, we will carefully select and monitor these providers. Details of such processing are provided below, including the established criteria for data retention.
§ 2 Your Rights
(1)
You have the following rights regarding your personal data:
- Right to access,
- Right to rectification or deletion,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
(2)
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
§ 3 Processing of Personal Data When Visiting Our Website
(1)
When using the website for informational purposes only (i.e., without registering or providing information in another way), we process only the personal data your browser transmits to our server. This data, stored temporarily in a server log file, is technically necessary to display the website and ensure its stability and security. The processed data includes:
- IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page visited),
- Access status/HTTP status code,
- Transferred data volume,
- Referring website,
- Browser,
- Operating system,
- Language and version of the browser software.
(2)
The legal basis for processing this data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(3)
The recipient of this data is our server host, who processes the data on our behalf under a data processing agreement. The host’s processing is based on Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR (interest in secure, efficient website hosting). The host processes your data only to the extent necessary for the performance of its obligations and follows our instructions regarding this data.
§ 4 Additional Functions and Services of Our Website
(1)
Beyond informational use, we offer various services and features, including analytical and marketing tools, that may require additional personal data. Such data is processed based on the principles outlined above.
(2)
We sometimes engage third-party service providers for data processing. These providers are carefully selected, bound by our instructions, and monitored regularly. Data is transferred to third parties only if:
- You have explicitly consented (Art. 6 para. 1 sentence 1 lit. a GDPR),
- The transfer is necessary for the establishment, exercise, or defence of legal claims (Art. 6 para. 1 sentence 1 lit. f GDPR),
- There is a legal obligation to transfer the data (Art. 6 para. 1 sentence 1 lit. c GDPR),
- The transfer is required to fulfil a contractual obligation with you (Art. 6 para. 1 sentence 1 lit. b GDPR).
(3)
If third-party providers are located outside the European Economic Area (EEA), we will inform you of the implications of this when collecting your data or in the description of the relevant service.
§ 5 Objection or Withdrawal of Consent for Data Processing
(1)
If you have given consent to process your data, you can withdraw it at any time. Such withdrawal affects the legality of processing from the time it is communicated to us.
(2)
You may object to data processing based on legitimate interests (Art. 6 para. 1 lit. f GDPR). If you object, please explain your reasons. After reviewing your objection, we will either stop or modify the data processing or demonstrate compelling legitimate grounds to continue processing.
(3)
You can object to the processing of your personal data for advertising or data analysis purposes at any time. Please direct such objections to the contact details provided above.
§ 6 Data Processing Through Cookies
(1)
Our website uses cookies for various functions. You can manage cookie preferences via your browser or a consent tool available on our website.
(2)
Cookies are small text files stored on your device, enabling the exchange of specific information. They enhance the usability of the website and are categorised as:
- Session Cookies: Automatically deleted when you close your browser.
- Persistent Cookies: Remain until their predefined expiration date.
(3)
Essential cookies are required for the technical functioning of the website and cannot be disabled. Their processing is based on Art. 6 para. 1 lit. f GDPR.
(4)
Optional cookies (e.g., for analytics or advertising) are used only with your explicit consent (Art. 6 para. 1 lit. a GDPR). You can withdraw consent anytime via the consent tool on the website.
§ 7 Encryption
Our website uses SSL/TLS encryption for security and to protect the transmission of confidential content. Encrypted connections are indicated by “https://” in the browser address bar and a padlock icon.
§ 8 Contact via Email or Phone
(1)
When contacting us via email or phone, your provided data, including any personal details, will be stored for the purpose of processing your inquiry.
(2)
The legal basis for processing is Art. 6 para. 1 lit. b GDPR (contract-related inquiries) or Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication).
(3)
Your data will be stored until you request deletion, withdraw consent, or the purpose for processing is no longer applicable. Statutory retention periods remain unaffected.
