PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

YÜCELEN DENTAL CLINIC

Effective Date: October 8, 2026

This Privacy Notice (Clarification Text) has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") to inform you regarding the processing of your personal data.

1. DATA CONTROLLER

Under Law No. 6698 on the Protection of Personal Data, the data controller responsible for your personal data is:

Yücelen Oral and Dental Health Polyclinic (Yücelen Ağız ve Diş Sağlığı Polikliniği)

Address: Zafertepe Mah. Eşrefpaşa Cad. No:407, 409C, Konak / İzmir / Türkiye

Email: yucelenadsp@gmail.com

Mobile / WhatsApp: +90 552 443 42 40

Landline: +90 232 438 38 20

Website: www.yucelenadsp.com

2. PERSONAL DATA PROCESSED

Depending on the nature of the healthcare services provided and the transactions performed, the following personal data may be processed by our clinic:

• Full name and identity information,

• Turkish Republic Identity Number (T.C. Kimlık No) or passport/foreign ID numbers,

• Date of birth and similar demographic information,

• Phone number, email address, and other contact details,

• Appointment and patient registration records,

• Health data and medical history,

• Information regarding examination, diagnosis, treatment, and treatment plans,

• Clinical records related to dental and oral health,

• Dental imaging and radiological records,

• Prescriptions, medical reports, and health documentation,

• Payment, collection, and billing details,

• Request, suggestion, and complaint records,

• Contact and appointment request information submitted via the website,

• Visual and audio recordings where necessary,

• Other personal data required to be processed pursuant to relevant legislation.

Note: Your health data falls under the category of special categories of personal data (sensitive personal data) under the KVKK.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes:

• Providing oral and dental healthcare services,

• Executing examination, diagnosis, treatment, and patient care processes,

• Creating and managing appointment requests,

• Generating and maintaining updated patient records,

• Planning and following up on treatment processes,

• Conducting necessary dental imaging and diagnostic tests,

• Ensuring the continuity of healthcare services,

• Carrying out payment, collection, and invoicing operations,

• Fulfilling legal, regulatory, and administrative obligations,

• Responding to binding requests from authorized public institutions and organizations,

• Managing legal obligations and legal proceedings,

• Ensuring patient and workplace safety,

• Evaluating requests, suggestions, and feedback/complaints,

• Responding to appointment and contact inquiries submitted through our website,

• Managing information security processes,

• Fulfilling record-keeping and archiving obligations mandated by relevant legislation.

4. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Your personal data is processed within the scope of the personal data processing conditions set forth in Articles 5 and 6 of Law No. 6698 (KVKK).

Your special categories of personal data—primarily your health data—are lawfully processed for the purposes of carrying out health services, medical diagnosis, treatment, and care services, planning and management of health services, and other purposes specified under health legislation.

Additionally, depending on the nature of the processing activity, your personal data may be processed based on the following legal grounds:

• It is explicitly provided for in laws,

• It is directly related to the establishment or performance of a contract,

• It is mandatory for the data controller to fulfill its legal obligations,

• Data processing is mandatory for the establishment, exercise, or protection of a right,

• Other legal grounds specified in the legislation, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. METHODS OF PERSONAL DATA COLLECTION

Your personal data may be collected through automatic or non-automatic methods via:

• Face-to-face consultations at our clinic,

• Telephone communications,

• Appointment scheduling systems,

• Contact and appointment forms on our website,

• Email communications,

• Patient registration and clinic management systems,

• Examination, diagnostic, and treatment procedures,

• Dental imaging and radiological procedures,

• Payment and billing processes,

• Information and documents provided by authorized individuals, institutions, or official entities.

6. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the following recipients, limited strictly to the relevant processing purposes and in accordance with the conditions specified in the KVKK:

• Authorized public institutions and official entities,

• Relevant health professionals and healthcare providers when necessary for the delivery of healthcare services,

• Authorized audit and regulatory bodies pursuant to legislation,

• Service providers necessary for managing financial and accounting operations,

• Legal and financial advisors, to the extent required,

• Information technology and technical infrastructure service providers,

• Other legally authorized private or public entities.

Your personal data is transferred solely within the framework of applicable legislation and strictly limited to the purpose of processing.

7. TRANSFER OF PERSONAL DATA ABROAD

In cases where the transfer of your personal data abroad becomes necessary, such transactions will be carried out in compliance with the provisions of Article 9 of Law No. 6698 (KVKK) regarding international data transfers and relevant regulations, ensuring that appropriate safeguards and statutory conditions are implemented.

8. RETENTION PERIOD OF PERSONAL DATA

Your personal data will be stored for the retention periods specified in the relevant legislation or for the duration required by the processing purposes.

Upon the expiration of the legal retention periods or once the legal grounds requiring data processing cease to exist, your personal data will be deleted, destroyed, or anonymized in compliance with the KVKK.

9. DATA SECURITY

Our clinic takes all necessary technical and administrative measures to prevent:

• Unlawful processing of your personal data,

• Unlawful access to your personal data,

• Loss, alteration, or unauthorized disclosure of your data.

To ensure the security of special categories of personal data (health data), additional specialized security measures prescribed by the Personal Data Protection Authority and health regulations are strictly applied.

10. YOUR RIGHTS UNDER ARTICLE 11 OF KVKK

As a data subject, pursuant to Article 11 of Law No. 6698 (KVKK), you have the right to:

1. Learn whether your personal data is being processed,

2. Request information if your personal data has been processed,

3. Learn the purpose of the processing and whether the data is used in accordance with its purpose,

4. Know the third parties to whom your personal data is transferred domestically or abroad,

5. Request correction of your personal data if it is incomplete or incorrectly processed,

6. Request the deletion or destruction of your personal data within the framework of conditions stipulated in KVKK,

7. Request notification of corrections, deletions, or destruction carried out to the third parties to whom your personal data has been transferred,

8. Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,

9. Claim compensation for damages in case you suffer damage due to unlawful processing of your personal data.

11. APPLICATION METHOD

To exercise your rights under the KVKK, you may submit your formal requests to the data controller via the following communication channels:

Data Controller: Yücelen Oral and Dental Health Polyclinic

Address: Zafertepe Mah. Eşrefpaşa Cad. No:407, 409C, Konak / İzmir / Türkiye

Email: yucelenadsp@gmail.com

Your application must clearly state your full name, identity details, application topic, and specific request, accompanied by relevant documentation verifying your identity where required. Applications will be evaluated and finalized within the procedures and timeframes set forth by the KVKK and related regulations.

12. UPDATES TO THIS PRIVACY NOTICE

This Privacy Notice has been prepared under Law No. 6698 on the Protection of Personal Data and related legal frameworks.

This text may be updated in response to changes in applicable legislation or modifications in our clinic’s personal data processing workflows. The most up-to-date version will always be published on our website at www.yucelenadsp.com.

Effective Date: October 8, 2026

Data Controller: Yücelen Oral and Dental Health Polyclinic

Address: Zafertepe Mah. Eşrefpaşa Cad. No:407, 409C, Konak / İzmir / Türkiye

Email: yucelenadsp@gmail.com

Phone: +90 552 443 42 40 / +90 232 438 38 20