Booking Page Privacy Notice

2.1. For the information you submit on the booking page, the controller is the clinic that publishes the booking page and whose name is shown on it (“Clinic”). The Clinic’s name is shown on the booking page; if the Clinic has entered a telephone number or address, those are shown as well.

2.2. Clinigim provides the appointment and clinic management software the Clinic uses; it processes this information only on the Clinic’s instructions, on the Clinic’s behalf and as a processor, and does not use it for its own purposes. The technical records Clinigim keeps as a controller in its own right so that the page works securely are explained in the Clinigim Privacy Policy.

3.1. The first name, last name, telephone number, optional e-mail address and note you enter in the booking form; the branch, service, clinician, date and time you choose; your reminder preference and the link through which you reached the page (channel). Because an appointment request shows that you want a service from a health provider, this information may count as special category personal data (health data) for clinics that provide health services. Please write in the note only what the appointment needs.

3.2. Technical records such as the IP address, date and time and browser details are created so that the page works securely. The information is collected electronically and by automated means through the form on this page.

4.1. Your information is processed for the following purposes and on the following legal bases:

• Creating, confirming, changing and cancelling your appointment and contacting you about it — being directly related to the formation or performance of a contract (KVKK art. 5(2)(c)).
• For clinics that provide health services, planning and providing the health service — processing, where necessary for the provision of medical diagnosis, treatment and care services and the planning and management of health services, by persons under a duty of confidentiality or by authorised institutions (KVKK art. 6(3)(e)).
• Sending a reminder message before the appointment if you tick the box in the form — performance of the appointment relationship (KVKK art. 5(2)(c)) and, for clinics that provide health services, KVKK art. 6(3)(e). The reminder is optional; if you do not tick the box, none is sent and your appointment is not affected.
• If you use the review link the Clinic sends after your visit, passing the score and comments you give to the Clinic — legitimate interest (KVKK art. 5(2)(f)); feedback is optional and is shown only to the Clinic’s management.
• Keeping records for the period the law requires and meeting lawful requests of competent authorities — being expressly provided for by law and compliance with a legal obligation (KVKK art. 5(2)(a) and (ç)).
• Keeping the page secure and preventing abuse — legitimate interest (KVKK art. 5(2)(f)); Clinigim is the controller of the technical records kept for this purpose.

5.1. If the Clinic switches them on in its settings, it may also send other messages, such as a review request after a visit, a check-up reminder, or a welcome or birthday message. These messages do not depend on the reminder box in section 4; they are delivered through the Clinigim platform by messaging providers outside Türkiye. Obtaining the consent these messages require and complying with the law on commercial electronic messages are the Clinic’s responsibility.

5.2. If you do not want these messages, it is enough to tell the Clinic; the Clinic marks your record so that no messages are sent.

6.1. If the booking page is published by a business that does not provide health services (for example a beauty salon), your information is as a rule processed on the basis of forming and performing the appointment (KVKK art. 5(2)(c)). If such a business needs to process health data, obtaining the required legal basis, and your explicit consent where necessary, is its own responsibility.

7.1. Your information may be transferred to Clinigim, the Clinic’s service provider (processor), to the sub-processors Clinigim uses for hosting, storage, e-mail and message delivery, and, where there is a legal obligation, to competent public authorities. The current list of sub-processors is published on Clinigim’s Sub-processors page.

7.2. Clinigim’s application server and database are in Türkiye; the encrypted backup copy of the database is kept in data centres in the European Union, so your information is also transferred abroad within the meaning of Article 9 of the KVKK. If you enter an e-mail address, the appointment confirmation (your name, the clinic, branch and clinician names, the date and time of the appointment and your appointment link) is sent through an e-mail provider established in Türkiye. If you choose a reminder, your telephone number, your name, the date and time of the appointment, the clinic’s name and your appointment link are delivered through WhatsApp by communication providers established in the United States of America.

7.3. As at the date of this notice, the Personal Data Protection Board has not issued an adequacy decision for any country. For these transfers, the standard contract announced by the Board must be signed and notified to the Authority under Article 9(4)(c) of the KVKK; the completion status and date for each provider are published on the Sub-processors page.

8.1. Appointment and patient records are kept for the period the Clinic sets and the law it is subject to requires; at the end of that period they are deleted or anonymised on the Clinic’s instructions. If the Clinic closes its Clinigim account, the information is also deleted from Clinigim’s systems according to the deletion schedule in the Clinigim Terms of Service. Technical records are kept for the periods in the Clinigim Privacy Policy.

9.1. Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request its correction if it is incomplete or inaccurate, its deletion or destruction under the conditions of Article 7 of the KVKK and the notification of those operations to the third parties to whom it was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

9.2. You can apply to the Clinic, the controller, in writing, from a registered electronic mail (KEP) address or from an e-mail address you gave the Clinic earlier and that is in the Clinic’s records; the Clinic concludes your application within 30 days at the latest. If you cannot reach the Clinic with the details on the page, you can send your application to [email protected]; Clinigim forwards it to the Clinic concerned without delay and assists the Clinic in answering it.

10.1. An appointment for a person under 18 must be requested by a parent or guardian; in that case the contact details in the form must be the parent’s or guardian’s.

11.1. If the booking page is published by a clinic established outside Türkiye, the processing of your information is governed by the data protection law that clinic is subject to (for example, in the European Economic Area, Regulation (EU) 2016/679, the General Data Protection Regulation); the KVKK-specific legal bases and application rules in this notice are read for that clinic together with the clinic’s own privacy notice. Your rights under that law to access, rectification, erasure, restriction of processing, data portability and objection, and your right to lodge a complaint with the data protection authority of your country, remain unaffected; you apply to the clinic.

12.1. Clinigim is not a party to the health or care relationship between the Clinic and its patient. Accepting, changing and cancelling the appointment, the price of the service and the service itself are the Clinic’s responsibility; the information published on the booking page belongs to the Clinic.

Earlier versions of this document and what changed in each:

• 6 November 2026 — The transfer abroad section (7.2) updated after the server, the database and e-mail delivery moved to Türkiye.
• 29 October 2026 — The post-visit review form added to the purposes.
• 23 October 2026 — First version.