Version 2.0 · Last updated: 09.09.2026
- Forms collect only your name, phone and the message you write; e-mail is optional.
- Health information (your complaint, test answers) is processed only with your explicit consent, for a preliminary assessment.
- Form data stays in Türkiye; data goes to Google and Meta only if you accept cookies.
- You can access, correct and erase your data; requests are answered free of charge within 30 days.
This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how personal data of visitors of drmuhsinbalaban.com, users of its forms and patients of our clinic is processed, to whom it may be transferred and what your rights are.
1. Data controller
Data controller: Assoc. Prof. Muhsin Balaban, MD — Androfert Men’s Health Clinic
Address: Karat 34 Center, Yenibosna Merkez Mah. 1. Asena Sk. No:23 D Block Floor 5 Unit 41, 34197 Bahçelievler / Istanbul, Türkiye
Phone: +90 532 450 05 09 · E-mail: info@drmuhsinbalaban.com
2. Definitions
| Personal data | Any information relating to an identified or identifiable natural person (name, phone, IP address…). |
|---|---|
| Special categories | Data listed in KVKK Art. 6 and protected more strictly, including health and sexual life. |
| Processing | Any operation on data: collection, recording, storage, alteration, transfer, erasure. |
| Data controller | The person who determines the purposes and means of processing: our clinic. |
| Data subject | The natural person whose data is processed: you. |
| Explicit consent | Freely given, specific and informed consent (see Explicit Consent). |
3. Scope
This notice covers (a) website visitors, (b) people who send the contact/treatment forms or use the online tests, (c) people who contact us by phone or WhatsApp and (d) patients examined at the clinic. Detailed information on medical records created during examination is provided in writing at the clinic.
4. Data we process
| Category | Data | Source |
|---|---|---|
| Identity | Name and surname | Forms, phone/WhatsApp, clinic records |
| Contact | Phone number, e-mail (optional), WhatsApp profile | Forms, WhatsApp, phone |
| Health (special category) | Complaint/medical history written in the message field; IIEF-5 and PEDT answers and score; diagnosis and treatment records after examination | Forms, online tests, examination |
| Technical / security | IP address, browser and device, date-time, pages viewed, referrer, form submission log | Server logs, visit statistics |
| Marketing (consent-based) | Cookie identifiers, ad interactions | Google Analytics, Meta Pixel — only after “Accept” |
| Legal | Requests, complaints and correspondence | E-mail, request form |
The online tests do not ask for name, phone or e-mail; answers are scored and stored anonymously. If you then submit the contact form, answers sent from the same device are linked to your request so the physician can make a preliminary assessment.
5. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Receiving appointment and information requests, contacting you, appointment reminders | Identity, contact | KVKK Art. 5/2-c (contract), 5/2-f (legitimate interest) |
| Physician’s preliminary assessment of the complaint and test answers you send | Health | KVKK Art. 6/2 — your explicit consent |
| Examination, diagnosis, treatment, follow-up; patient file | Identity, contact, health | KVKK Art. 6/3 (medical confidentiality); Turkish health legislation |
| Statutory notifications, requests of authorities, invoicing | Identity, contact, financial | KVKK Art. 5/2-a and 5/2-ç (legal obligation) |
| Secure operation of the site, abuse prevention, traffic logs | Technical | KVKK Art. 5/2-f; Law No. 5651 |
| Visit statistics and advertising measurement (GTM, GA4, Meta Pixel) | Marketing | KVKK Art. 5/1 — consent given in the cookie bar |
| Informational commercial electronic messages | Contact | Law No. 6563 Art. 6; your consent |
| Management of legal disputes | As necessary | KVKK Art. 5/2-e |
6. Collection method
Data is collected through the website forms and online tests, phone and WhatsApp conversations, e-mail, clinic visits and cookies, by partly automated or non-automated means as part of a filing system. Form submissions travel over HTTPS to our management panel, accessible only to authorised staff, and are e-mailed to the physician. We do not profile visitors or take decisions solely by automated means; test scores are informational and reviewed by a physician.
7. Transfers
| Recipient group | Purpose | Data | Legal basis |
|---|---|---|---|
| Turkish Ministry of Health and its systems | Statutory notification and record duties | Identity, health | KVKK Art. 8/2 — 5/2-a, ç |
| Courts and competent authorities | Legal obligation on request | As necessary | KVKK Art. 8/2 — 5/2-ç, e |
| Partner hospitals and laboratories | Tests, surgery and treatment | Identity, health (as necessary) | KVKK Art. 6/3, 8/2 |
| Legal, accounting and IT service providers (processors) | To the extent required by the service | Identity, contact, financial, technical | KVKK Art. 5/2-ç, f; written confidentiality undertaking |
| Google LLC (Tag Manager, Analytics), Meta Platforms (Pixel) — abroad | Statistics, ad measurement | Marketing (cookie identifiers) | KVKK Art. 9 — explicit consent in the cookie bar |
| Meta Platforms (WhatsApp) — abroad | Messaging you initiate on WhatsApp | Identity, contact, message content | KVKK Art. 9 — explicit consent |
Form data is not transferred abroad; our servers are located in Türkiye. Your data is never sold or rented for advertising.
8. Retention
| Data | Period | Basis |
|---|---|---|
| Contact requests (non-patients) | 2 years after completion | Legitimate interest |
| Online test answers (anonymous) | Indefinitely (not linked to identity); if linked, as long as the request | Statistics |
| Patient files and medical records | Statutory minimum periods (generally 20 years) | Turkish health legislation |
| Invoices and financial records | 10 years | Tax and commercial law |
| Server and traffic logs | 1–2 years | Law No. 5651 |
| Commercial message consent/refusal records | 3 years after withdrawal | Commercial communication regulation |
| Cookies | See Cookie Policy | — |
9. Your rights and requests
Under KVKK Art. 11 you may: learn whether your data is processed; request information; learn the purpose and whether data is used accordingly; know the third parties to which it is transferred in Türkiye or abroad; request rectification; request erasure or destruction under Art. 7; request that these operations be notified to recipients; object to a result produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.
Use the Data Subject Request Form and send it in writing (by hand or notary) to the address above, or by e-mail from the address registered with us to info@drmuhsinbalaban.com. Requests are answered free of charge within 30 days. If your request is rejected, the answer is insufficient or no answer is given in time, you may lodge a complaint with the Turkish Personal Data Protection Board within 30 days of the answer and in any case within 60 days of your request.
10. Security
- The site and forms use HTTPS; submissions are protected against abuse by honeypot and rate limiting.
- Access to the management panel is password-protected; logins and actions are logged.
- Database and backups are accessible only to authorised persons; backups are encrypted.
- Additional measures required by the Board’s decision No. 2018/10 apply to health data.
- Data breaches are notified to the Board within 72 hours (KVKK Art. 12/5) and to affected persons within a reasonable time.
11. Children
The site is not directed at persons under 18. Where data of a minor must be processed, parental/guardian consent is obtained.
12. Changes
This notice may be updated; the current version and date are published on this page.
