Privacy policy

Prof. Dr. Ferit Demirkan, Halaskargazi Cd. No:38-66, 34371 Şişli / İstanbul, Republic of Türkiye.

Telephone: +90 533 975 69 00. E-mail: demirkanclinicglb@icloud.com.

We are established outside the European Union but deliberately address our offering to people in Germany, Austria and Switzerland as well. The GDPR therefore applies directly to that processing under Art. 3 (2).

We process personal data only where a legal basis permits it. Depending on the case, that basis is your consent (Art. 6 (1) (a) GDPR), the performance of or steps prior to a contract (Art. 6 (1) (b) GDPR), or our legitimate interest in operating and securing this website (Art. 6 (1) (f) GDPR).

Where the data concerns your health, we process it only on the basis of your explicit consent (Art. 9 (2) (a) GDPR). Providing such data is always voluntary. Health data is never required in order to register for an online seminar.

Data you send us is processed by us in Türkiye. The European Commission has not issued an adequacy decision for Türkiye. In concrete terms: the level of data protection there is not deemed equivalent to that of the EU, your data subject rights may not be enforceable in the same way, an effective remedy before European courts may not be available to you, and access by Turkish public authorities cannot be ruled out.

We tell you this before you send us any data, so that you can decide in full knowledge whether to register or to contact us.

Several of the providers we use are based in or process in the USA: our host Vercel Inc., the storage service Vercel Blob, the video service Zoom, the e-mail delivery service Resend, and Meta. These transfers rest on the data processing agreements concluded with each provider together with the EU standard contractual clauses, or, where the provider is certified, on the EU-US Data Privacy Framework.

You can request a copy of the relevant safeguards from us at demirkanclinicglb@icloud.com.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access a page, our host automatically processes technical data such as the requested address, date and time, referring page, browser and operating system, and your IP address. This is necessary to deliver the site and to protect it against attack (Art. 6 (1) (f) GDPR).

We advertise our online seminars on Instagram and Facebook. Registration takes place there in an instant form displayed inside those apps and operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

In that form we collect your name and e-mail address. In addition, you may voluntarily answer one optional question about physical symptoms. That answer is health data and is processed only where you have given explicit consent in the form (Art. 9 (2) (a) GDPR); leaving the question blank has no effect on your registration.

Meta acts as a separate controller for the operation of its platform and processes the form data under its own privacy policy, available at facebook.com/privacy/policy. We retrieve the submitted entries from Meta and then process them ourselves as controller, for the sole purpose of organising the seminar. Meta may transfer data to the USA.

You can also register directly on our webinar page. For registration alone we collect your name, e-mail address and country (Art. 6 (1) (a) and (b) GDPR).

If you additionally apply for a free assessment, we also collect whether a diagnosis has already been made, the suspected stage, the duration and nature of your symptoms, height and weight, previous treatments, and one to four photographs of the affected body areas. These are health data and are processed solely on the basis of your separate explicit consent (Art. 9 (2) (a) GDPR). Applying is voluntary and attendance does not depend on it.

The photographs are uploaded from your device directly to Vercel Blob, a storage service operated by Vercel Inc. (USA). They are held there under randomly generated, unguessable addresses that are technically retrievable without a further sign-in. We do not disclose those addresses.

Registration and application data is passed to our own separately operated administration system, which manages seminar places, the assessment and, where applicable, the subsequent appointment.

The seminar runs on Zoom, operated by Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. When you join, Zoom processes the details you enter together with technical connection data.

The session including the question and answer part is recorded for internal clinical use, to improve future seminars. Your camera stays off and your microphone muted, and questions can be asked in writing without giving your name. The recording is never published. The legal basis is the consent you give at registration (Art. 6 (1) (a), and where questions contain health information, Art. 9 (2) (a) GDPR). The recording is kept for at most one year and then deleted.

Our quotation form lets you request a personal quotation. We collect your name, e-mail address, country, telephone number, gender, age, the procedure you are interested in, details of the planned trip, your free-text notes, and optionally photographs. The procedure and the photographs are health data and are processed only on the basis of your explicit consent (Art. 9 (2) (a) GDPR). What is said above about Vercel Blob applies to the photographs.

Our booking page lets you choose a consultation slot using a personal, single-use code. We process the code, the slot you choose and the contact details we already hold (Art. 6 (1) (b) GDPR).

We use the e-mail address you provide to send you the access link, practical details and reminders for the seminar you registered for. We do so on the basis of your consent (Art. 6 (1) (a) GDPR) and we do not use the address for any other advertising.

For technical dispatch we use Resend, Inc. (USA) as a processor, bound by an agreement under Art. 28 GDPR. Your address is passed on for that purpose only and is not disclosed to any other third party.

If you contact us by e-mail or telephone, we process the details you provide in order to deal with your enquiry (Art. 6 (1) (b) and (f) GDPR).

Our contact page also links our profiles on Instagram and Facebook, operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. If you message us there, Meta processes the message under its own terms.

For the paid online consultation we use the Introwise platform. Booking and payment take place there, and the data you enter is processed by the platform provider under its own terms.

On the contact page and on the hospital page we embed a Google Maps map, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading the map transmits your IP address and browser details to Google, possibly also to the USA. We use the map to help you find us (Art. 6 (1) (f) GDPR). If you would rather avoid this, please do not open those two pages; the addresses are also available as text in the imprint and in the page footer.

We use Vercel Speed Insights to measure the loading performance of our pages. The measurements are aggregated, contain no cookies and are not used to identify you personally. The legal basis is our legitimate interest in a fast and stable website (Art. 6 (1) (f) GDPR). We do not use audience measurement or user tracking tools on this website.

As soon as the purpose falls away and no retention obligation stands in the way, we delete the data.

To exercise any of these rights, write to demirkanclinicglb@icloud.com.

You may withdraw any consent you have given at any time with effect for the future, without giving reasons, for instance by replying to one of our e-mails. Withdrawal does not affect the lawfulness of processing carried out before it.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or place of work.

We update this policy whenever changes to our processing make it necessary. The version published here is the one that applies.