Op. Dr. Burak Olgun

Privacy Policy for Patient Data

How Op. Dr. Burak Olgun’s practice handles personal data under Turkish KVKK and European GDPR, including cookies and consent.

Illustrative editorial image: consultation desk detail with notes and anatomy models

Effective date: 13 July 2026.

We treat the information you share with us with care and discretion. This notice explains, in plain language, how your personal data is collected, used, stored, and protected when you visit this website or contact the practice. It is written to reflect both the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies to visitors in the European Union, the General Data Protection Regulation (“GDPR”). For visitors in Germany, cookie and device-access choices are also considered under TDDDG (formerly TTDSG) §25.

Who is responsible for your data

The data controller is the practice of Op. Dr. Burak Olgun, Ear, Nose & Throat — Otorhinolaryngology, Head & Neck Surgery, located at Bahçelievler Mah. D-100 Yan Yol Sk., Metroport Busidence No:14-B D:909, 34180 Bahçelievler/İstanbul, Turkey. You can reach us by telephone or WhatsApp on +90 544 243 72 67.

Information we collect

We collect only what is necessary to respond to you and to arrange care:

  • Contact details you provide — such as your name, telephone number, email address, and the country you are writing from, when you reach out through WhatsApp, telephone, Instagram, or email if you choose to use it.
  • The content of your enquiry — the questions you ask and any background you choose to share so that we can answer helpfully.
  • Photographs you choose to send for an initial assessment. Where these relate to your health, they are treated as special-category (sensitive) personal data and handled with particular care.
  • Limited technical data — such as basic security logs and, only if you consent, privacy-friendly usage statistics and minimized technical error diagnostics through the cookie banner described below.

We do not ask for more than we need, and you are never required to share health information to make a first contact.

How we collect your data

We collect data directly from you when you contact us by WhatsApp, telephone, Instagram, or email if you choose to use it. Limited technical data is collected automatically through server and security logs when the website is delivered to your browser. Your privacy choice is stored locally in your browser through strictly necessary similar storage so the site can remember whether you accepted or rejected non-essential features.

Your data is used solely to communicate with you, answer your questions, and prepare for an in-person or remote consultation. Under the KVKK and the GDPR, we rely on the following grounds:

  • Your explicit consent — for processing health-related information, such as photographs sent for an initial assessment, and for non-essential analytics or error monitoring.
  • Performance of, or steps toward, a service you request — to respond to your enquiry and arrange a consultation.
  • Our legitimate interests — to operate and secure this website and to communicate with people who contact us, balanced against your rights.
  • Legal obligation — where retention or disclosure is required by applicable Turkish law.

Your information is never sold, rented, or shared for advertising purposes.

Sharing and international transfers

Access to your data is limited to those directly involved in your care and correspondence. We do not sell your data. Limited processors may support us — for example WhatsApp/Meta when you message us there; Cloudflare for hosting/CDN/security and, if enabled after consent, Cloudflare Web Analytics; Sentry (Functional Software, Inc.) for minimized technical error diagnostics if enabled after consent; and Instagram/Meta when you choose to open the outbound Instagram profile link. Some providers may process data outside Turkey or the European Economic Area. The configured Sentry project uses the US region. No provider-specific transfer mechanism or legal review for this Sentry processing is recorded here; this notice does not verify an adequacy decision, contractual safeguard, transfer exception, or legal compliance for that processing.

Storage and retention

Your data is kept secure using appropriate technical and organisational measures. Non-patient enquiries are kept only for as long as needed to answer and manage the request. Optional photos from people who do not proceed to care are deleted or anonymised when they are no longer needed for the enquiry. Patient records, if a treatment relationship begins, are retained under applicable Turkish healthcare record rules. Consent choices are stored in this browser for up to 180 days unless changed or cleared earlier. Analytics data, if enabled, is retained only for the provider’s configured reporting period; Sentry diagnostics are retained for the configured provider/account retention period.

Strictly necessary cookies or similar storage that allows the site to remember your privacy choice may be used without consent. The current Instagram section is a static first-party gallery and does not load an Instagram embed. Optional analytics and error monitoring remain inactive until you give explicit consent through our cookie banner. You can accept or decline at any time and change your decision whenever you wish through the cookie preferences on this site. Withdrawing consent stops future optional loading in this browser. Declining does not affect your ability to contact the practice.

Cookie and storage details:

  • localStorage: cookie-consent — stores your Accept/Reject/settings choice in this browser for up to 180 days.
  • Cloudflare Web Analytics — loads only after Accept, if a production token is configured.
  • Sentry error monitoring — loads only after Accept, if a DSN is configured. The client removes arbitrary user, request, message, and context data; tracing and session replay are disabled. Retained diagnostics are limited by the client allowlist to event ID/timestamp, platform/level/environment/release metadata, standard error types, sanitized same-origin stack paths with line/column/in-app metadata, same-origin path-only navigation/fetch/XHR breadcrumbs with allowlisted method/status/level data, and a fixed lifecycle breadcrumb. Form, enquiry, and health data are not intentionally sent.
  • Outbound Instagram/WhatsApp links — no third-party content is loaded by this website before you choose to open those services.

Your rights

Under the KVKK (Article 11) and, where applicable, the GDPR, you may at any time ask us to:

  • confirm whether your data is processed, and obtain a copy of it;
  • correct data that is inaccurate or incomplete;
  • erase your data or restrict its processing, where permitted;
  • object to certain processing, and withdraw consent you have given;
  • request portability of data you have provided, where applicable.

Withdrawing consent does not affect the lawfulness of processing carried out beforehand. If you believe your rights have not been respected, you may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU, your local supervisory authority.

How to contact us about your data

To exercise any of these rights, or if you have questions about this notice, please contact the practice using the details on our contact page or by telephone and WhatsApp on +90 544 243 72 67. We will respond within the timeframes set by applicable law, including the KVKK response period and, where GDPR applies, normally within one month.