Last updated: 6 September 2026.
This Personal Data Protection Notice explains how İsmail Oktay BAL, as the website operator and data controller, processes personal data through ismailoktaybal.com in accordance with applicable data-protection rules, including Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) and, where relevant, the GDPR.
1. Data controller and contact
Data controller: İsmail Oktay BAL. Privacy and data-subject requests may be sent to [email protected].
2. Personal data processed
Depending on how you use the website, we may process identity and contact details such as name, email address, telephone number, organisation and message content; enquiry or appointment information; consent records; and technical data such as IP address, device, browser, referring page and website interactions.
Please do not send patient files, medical histories or other sensitive health data through general contact forms.
3. Purposes and legal grounds
Data may be processed to respond to enquiries, arrange meetings, provide requested information, establish or perform a service relationship, operate and secure the website, measure and improve performance, maintain business records, prevent misuse and comply with legal obligations. Processing may rely on explicit consent, steps requested before entering a contract, performance of a contract, legal obligations, the establishment or protection of rights and legitimate interests, as applicable.
4. Collection methods
Data is collected electronically through forms, email, telephone or messaging initiated by you, scheduling tools, cookies, server logs and analytics technologies. Non-essential cookies are controlled through the website’s consent mechanism.
5. Recipients and international transfers
Data may be shared, only as necessary, with trusted providers supporting hosting, security, email, scheduling, analytics, cloud infrastructure and professional advice, and with authorised public bodies where legally required. Some providers may process data outside Türkiye. Where required, transfers rely on applicable safeguards, contractual arrangements or explicit consent.
6. Retention and security
Personal data is retained only for as long as necessary for the relevant purpose and applicable legal, accounting, dispute-resolution and security requirements. Reasonable technical and organisational measures are used to protect data, although no internet-based system can provide absolute security.
7. Your rights
Under Article 11 of the KVKK, you may request information about whether and how your data is processed, its purpose, recipients and transfers; request correction, deletion or destruction where the legal conditions are met; object to certain automated outcomes; and seek compensation where permitted by law. Additional rights such as restriction, objection, portability and withdrawal of consent may apply under the GDPR.
Send a clear request to [email protected]. We may request reasonable information to verify identity and respond within the period required by applicable law.
8. Related policies and updates
For further information, see the Privacy Policy and Cookie Policy. This notice may be updated when processing activities, technology or legal requirements change.