Privacy Notice

This notice has been prepared to inform you in accordance with Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK").

It explains which of your personal data are processed when you visit the site and use the contact form, for what purpose and on what legal basis. You will also find here how long your data are kept and what your rights are.

Data controller

The data controller for your personal data (the party responsible for your data) is umuttandogan.com. In this notice it is referred to as the "Site" or "we".

The postal address is given below, in the section on applications.

Which data do we process?

When you fill in the contact form

Identity and contact details: full name and e-mail address (required), telephone number and country (optional).
Message content: the subject line and the message you write.
Record of information: the fact that you ticked the box stating that you have read the privacy notice, together with the date and time.
Security record: your IP address at the moment you send the form and the time of sending.

When you only browse the site

Technical session record: your IP address, the information your browser uses to identify itself (type of browser and operating system) and the address of the last page you visited. This record is kept so that the site can work and the form can be sent securely.
Server access and error logs: your IP address, your browser information, the address of the page requested and the time of the request. These logs are kept for the security of the site and for fixing errors.

The site has no membership, payment, online appointment system, visit measurement (analytics) or advertising tool. No data are collected in connection with any of these.

About health information

Under Article 6 of KVKK, health information counts as "special category personal data"; in other words, it is among the information the law protects more strictly.

The contact form is not a tool for examination or medical assessment. Nor is separate explicit consent for your health information obtained in the form. For this reason, we kindly ask you not to send health information, test results, reports or imaging records through the form. A short note is enough; the details are discussed during the consultation.

If you nevertheless write information about your health in your message, that information is used only to reply to your request and is not processed for any other purpose. If you would like your message to be deleted before the 6-month period ends, you can request this by writing to the postal address below.

In an emergency, do not wait for a reply to the form; call 112 or go to the nearest emergency department.

For what purposes do we process your data?

To read and consider the question or request you send us and to get back to you.
If you are writing from abroad, to be able to arrange a consultation time that suits you.
To keep a record that the obligation to inform has been fulfilled.
To prevent misuse of the form and unwanted bulk submissions, and to keep the site secure.
To keep the site working technically.

Your data are not used for advertising, marketing, profiling or automated decision-making. No newsletters or promotional messages are sent.

Legal grounds

A legal ground is the basis on which the law permits a piece of data to be processed. There are two on this site:

Legitimate interest (KVKK Art. 5/2-f): the processing needed for us to be able to reply to you and keep the site secure. Your full name, e-mail, telephone, country, subject and message are processed in order to reply to your request. Your IP address, the time of sending, the technical session record and the server logs are processed in order to prevent misuse of the form and keep the site secure. This processing is carried out to an extent that does not harm your fundamental rights and freedoms.
Compliance with a legal obligation (KVKK Art. 5/2-ç): keeping your record of information and its date, so that we can show the obligation to inform has been fulfilled.

How do we collect your data?

Your data are collected electronically, by fully or partly automated means: through what you yourself write in the contact form, and through the technical records the server keeps while you visit the site.

When you send the form, your message is saved in the site's database and a copy is forwarded as a notification to a mailbox belonging to us. No automatic reply e-mail is sent to you.

Are your data shared with anyone?

Your data are kept on our own servers.

They are not transferred abroad.
They are not sold, rented out or shared with third parties.

The only exception is a legal requirement: if a law expressly requires it, or if an authorised public body or judicial authority lawfully requests it, only the information requested is shared, only with that authority and only in order to fulfil that obligation.

Only the people authorised to manage the site can access your messages.

These statements apply only to the site and the contact form. If you write to us through another service such as WhatsApp, that service may process your data on its own servers, including abroad; whether or not to use these channels is your choice.

How long do we keep your data?

Contact form messages (including the contact details kept with the message, the record of information, the IP address and the notification copy that arrives in our mailbox): kept for 6 months from the date they are sent, then deleted.
Technical session record: expires about 2 hours after you last use the site and is deleted shortly afterwards.
Form submission counter: kept in a form that does not reveal your identity, and for a few minutes at most, in order to block a large number of submissions in a row.
Server access and error logs: kept for a limited period for security and troubleshooting purposes.
Backups: the database is backed up against data loss. A deleted message may remain in a backup until the backup containing it is deleted. Backups are used only for restoring data after a loss.

If you would like your message to be deleted before the 6-month period ends, you can apply in the way described below.

Your rights

Under Article 11 of KVKK, by applying to the data controller you can:

Find out whether your personal data are being processed.
Request information about the processing if they have been processed.
Find out the purpose for which your data are processed and whether they are used in line with that purpose.
Know the third parties, in Türkiye or abroad, to whom your data are transferred.
Ask for your data to be corrected if they have been processed incompletely or inaccurately.
Ask for your data to be erased or destroyed, within the conditions set out in Article 7 of KVKK.
Ask for correction, erasure or destruction to be notified to the third parties to whom your data have been transferred.
Object to a result against you arising from the analysis of your processed data solely by automated systems.
Claim compensation for your loss if you suffer damage because your data have been processed unlawfully.

How can you apply?

Applications are accepted only in writing and by post. You can send your application to this address:

Arapsuyu Mah. Atatürk Bulvarı, M. Gökay Plaza No:23 Kat:4 D:16, 07070 Konyaaltı / Antalya

The application must be made in Turkish; you may enclose any documents relating to the matter. So that we can reply to the right person, your written application must include:

Your first name, surname and signature.
If you are a citizen of the Republic of Türkiye, your Turkish ID number; if not, your nationality together with your passport number or, if you have one, your ID number.
The home or work address to which the reply is to be sent.
An e-mail address or telephone number on which we can reach you, if you have one.
The subject of your request. Stating the e-mail address you used when sending the form and the approximate date makes it easier for us to find your record.

Depending on its nature, your application is answered free of charge as soon as possible and no later than 30 days from the date it reaches us. If replying involves an additional cost, the fee in the tariff set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) may be charged.

Right to complain to the Board

If your application is refused, if you find the reply given insufficient, or if you do not receive a reply in time, you can lodge a complaint with the Personal Data Protection Board. A complaint can be made within 30 days of the date you learn of the reply and, in any event, within 60 days of the date of your application.

For the cookies used on the site, see the Cookie Policy; for a general, plain-language summary, see the Privacy Policy.

This notice is updated whenever something changes on the site. The version that applies is the latest one published on this page.

Last updated: 10 October 2026