KVKK / GDPR Privacy Notice
Last updated: October 5, 2026
This notice covers information you share through the website: the pre-assessment form, any documents you attach to it, contact made over WhatsApp, and the AI-assisted patient assistant where it is offered. Turkish Law No. 6698 (KVKK) applies; GDPR rights also apply where the processing falls within its scope.
Data Controller
The data controller is Doç. Dr. Müslüm Ergün (ME Urology Clinic), Bahçelievler Mahallesi, E-5 Karayolu / Kültür Sok No:1, 34180 Bahçelievler/İstanbul. Contact: info@meurology.com / 0532 063 09 69.
Personal Data Processed
Through the pre-assessment form we collect directly from you your name, country, email address or phone number, treatment selection and optional message.
You may attach up to three files to the form (PDF, JPG or PNG; at most 10 MB each). Documents you attach may contain health data such as laboratory results, imaging reports or a discharge summary. Attaching files is not required; attach only the documents you consider necessary for a pre-assessment, and you may cover details such as identity numbers printed on them if you prefer not to share those.
The submission is processed on the site server and sent to the clinic email inbox; your attachments are included only in that notification email. No attachment is added to the automatic acknowledgement sent to you.
Your IP address is also processed briefly in order to prevent misuse of the form.
Purposes of Processing
Responding to your enquiry and carrying out a pre-assessment in line with your request. Treatment and travel coordination is carried out only if you wish to proceed on that basis.
Keeping the form and contact channels secure and preventing automated or malicious submissions.
Legal Basis
Contact details are processed under KVKK art. 5/2-c for steps taken at your request towards a possible healthcare relationship; health data is processed under KVKK art. 6/3-a on the basis of your separate explicit consent. Technical records kept for security rest on legitimate interest. Applicable legal obligations may additionally require relevant records to be processed.
Processing of Health Data
Your treatment selection, your message and the documents you attach may contain health data. Health data is special-category personal data under KVKK art. 6 and is processed for pre-assessment only on the basis of your separate explicit consent.
You are not obliged to share health data. The form can be sent without it; in that case we can give general information only and cannot make an individual assessment.
A pre-assessment made through the website is not a diagnosis and does not replace an examination by a doctor or the investigations that may be needed.
Health data is NOT sent to measurement tools. Your complaint, your treatment selection and your documents are never passed on as analytics event parameters; only technical information such as the page path and a source tag reaches measurement.
Contact over WhatsApp
When you click a WhatsApp link on the site, the conversation takes place over WhatsApp, operated by Meta Platforms Ireland Limited. That conversation is separate from the pre-assessment form; the form is not submitted through WhatsApp.
The content of WhatsApp messages is end-to-end encrypted. However, data such as your phone number, message timing and usage information is processed by WhatsApp under its own terms and may be held on servers outside Türkiye. Doç. Dr. Müslüm Ergün is not the data controller for WhatsApp’s own processing.
You are not obliged to share health data through this channel. If you would rather send documents by a more protected route, please use the pre-assessment form or info@meurology.com.
WhatsApp correspondence is kept on the clinic phone for as long as it is needed to follow up your request.
AI-Assisted Patient Assistant
The site may offer an AI-assisted patient assistant to help with frequently asked topics. The assistant is for information only: it does not diagnose, does not recommend medication or treatment, does not replace assessment by a doctor, and must not be used in an emergency.
Messages you write to the assistant are processed on the servers of an AI service provider established abroad in order to generate a reply. For that reason we advise you not to write information such as identity numbers, full address, test documents or a detailed medical history into the assistant.
Conversations with the assistant may be logged for a limited period for the security and quality of the service. Using the assistant is entirely optional; you can put the same questions through the pre-assessment form, by phone or by email.
No decision about you is taken solely by automated analysis; the pre-assessment is in every case made by a doctor.
Transfers, Including Transfers Abroad
Your submissions may be processed by suppliers providing site hosting, email delivery, bot protection and, where used, the AI assistant service. Some of these providers are established outside Türkiye, in particular in the European Union and the United States; your data may therefore be transferred abroad.
Transfers abroad are made within the framework of KVKK art. 9, either by meeting the conditions the legislation sets out or on the basis of your separate explicit consent to that transfer. Where GDPR applies, appropriate safeguards such as standard contractual clauses are relied on.
If you request treatment or travel coordination, the necessary information may be shared with the relevant healthcare institution or service provider. Such sharing takes place only in line with your request and only to the extent needed.
Lawful requests from competent public authorities are reserved.
Retention Periods
Pre-assessment submissions and the documents you attach are kept for as long as is needed to conclude your request. If your enquiry does not lead to a treatment relationship, that period is at most 24 months; at the end of it the records are deleted or anonymised.
If a treatment relationship is established, patient records are kept within the record-keeping system of the relevant healthcare institution for the minimum retention period required by health legislation.
Technical records processed for security, such as the IP address, are kept briefly. Cookies and measurement records are kept, where you have consented, for the periods set out in the cookie policy.
Where the AI assistant is used, conversation logs are kept for a limited period for the security of the service and deleted at the end of it.
Your Rights and How to Apply
Under KVKK art. 11 you have the right to learn whether your personal data is being processed; to request information if it is; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it is incomplete or inaccurate; to request erasure or destruction where the conditions are met; to request that correction and erasure be notified to the third parties the data was transferred to; to object to a result adverse to you arising from analysis solely by automated systems; and to claim compensation for damage caused by unlawful processing.
You can apply by writing to info@meurology.com or in writing to the clinic address above. Your application must clearly set out your request and include information establishing your identity. Applications are concluded within thirty days at the latest; where the process entails a separate cost, the fee in the tariff set by the Board may be charged.
If your application is refused, if you find the response inadequate, or if no response is given in time, you may complain to the Turkish Personal Data Protection Board.
You may withdraw your explicit consent at any time through the same contact channels; withdrawal does not affect earlier lawful processing. Where GDPR applies, your rights of access, rectification, erasure, restriction of processing, data portability and objection, together with the right to complain to the relevant supervisory authority, may also apply.