1. Identity of the Data Controller

• Name: Florya Clinics
• Address: [Insert Address]
• Email: [Insert Email Address]
• Phone: [Insert Phone Number]

2. Scope and Purpose of the Privacy Policy

This Privacy Policy outlines how we collect, use, and share personal data in connection with our services.

By utilizing our services, you consent to the processing of your personal data as described in this policy.

3. Types of Data We Collect

We may collect the following categories of personal data:

 Identity Data:

• Full Name
• Date and Place of Birth
• National ID or Passport Information
• Gender and Nationality

 Contact Data:

• Phone Number
• Email Address
• Residential Address, including City, State, and Zip Code

 Health Data (Sensitive Data):

• Medical History and Conditions
• Current and Past Treatments
• Allergies, Blood Type, and Medication Information
• Procedure Records (e.g., details of hair transplants, dental X-rays)
• Photos taken before and after procedures

 Financial Data:

• Payment Information (e.g., Credit Card or Bank Details)
• Billing Address

 Technical Data:

• IP Address
• Device and Browser Type

 Visual and Audio Data:

• CCTV Footage (for security purposes)
• Photos and Videos (shared for medical or promotional purposes, with explicit consent)

4. Purposes of Data Processing

Your personal data is processed for the following purposes:

• Providing Services: Creating patient records, conducting examinations, diagnoses, and treatments.
• Operational Support: Scheduling appointments, issuing invoices, and providing post-treatment care.
• Legal Compliance: Fulfilling obligations to public authorities and adhering to health regulations.
• Marketing: Sharing testimonials, before-and-after photos, and success stories on our website or social media, with explicit consent.
• Security: Ensuring the safety of our premises through CCTV monitoring.

5. Legal Basis for Data Processing

We process your personal data based on one or more of the following legal grounds:

• Your explicit consent
• The necessity of processing for the performance of our services
• Compliance with legal obligations
• Legitimate interests, such as improving our services

6. Sharing and Transferring Data

Your personal data may be shared with the following parties under strict confidentiality obligations:

• Service Providers: Laboratories, imaging centers, and other third-party service providers supporting your treatment.
• Public Authorities: Regulatory bodies, ministries, or other government entities as required by law.
• Business Partners: Collaborators assisting in marketing, advertising, or operations.
• International Transfers: Personal data may be transferred abroad, where necessary, to ensure continuity of service,
• subject to the safeguards outlined under KVKK Articles 8 and 9.

7. Data Retention Period

Your personal data will be retained only for as long as necessary to fulfill the purposes outlined in this policy or as required by

applicable laws. Once the retention period expires, your data will be securely deleted, anonymized, or destroyed.

8. Your Rights Under KVKK

Under Article 11 of KVKK, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed.
• To request information about the processing of your data.
• To understand the purpose of data processing and whether your data is being used appropriately.
• To know the third parties to whom your data is transferred, both locally and internationally.
• To request correction of incomplete or inaccurate data.
• To request the deletion or destruction of your data under certain conditions.
• To object to any unfavorable outcomes arising from automated processing.
• To request compensation for damages caused by unlawful processing of your data.

You can submit requests regarding these rights by contacting us at [Insert Contact Email].

9. Data Security Measures

We implement industry-standard technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, please note that no method of transmission or storage is completely secure.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Any updates will be communicated through our website, and the "Effective Date" will be revised accordingly.