Skip to content
Prof. Dr. Melahat Atasever

KVKK Privacy Notice

This privacy notice is issued by Prof. Dr. Melahat Atasever, the data controller, under Turkish Personal Data Protection Law No. 6698 (KVKK). Contact: Muhsin Yazıcıoğlu Cad. 1456. Sok. No:8/19, Çankaya / Ankara; +90 552 332 23 66; drmelahatataseverclinic@gmail.com.

Personal data processed

  • Appointment/contact form: name, phone number, email address, city, age, area of interest and free-text message.
  • Chat security record: session ID, IP address pseudonymised as a salted, truncated SHA-256 hash, user agent and attachment count. CHAT_LOG_CONTENT is off by default, so chat-message content is not stored by default.
  • The message and attachments you submit in chat, the last 20 messages of that session's history, and the selected topic and language are sent to the model provider while a response is generated.

Purposes of processing

  • To handle your requested appointment or contact process and respond to you.
  • To generate an automated preliminary-information response to chat questions.
  • To prevent abuse, enforce rate limits, and protect service and information security.

Legal basis

Form data and chat messages/attachments are processed on the explicit consent you provide through the relevant interface, under KVKK Article 5(1). Content-free chat security metadata is processed under Article 5(2)(f), where necessary for the controller's legitimate interest in preventing attacks and abuse, provided your fundamental rights and freedoms are not harmed. These are purpose-specific bases, not a general catch-all.

Recipients and international transfers

Your chat message and attachments are transferred to Anthropic outside Türkiye for model inference; appointment/contact form data is transferred to Brevo outside Türkiye to deliver the transactional email. Under KVKK Article 9, these recurring international transfers must be supported by an appropriate safeguard, including execution of the standard contract published by the Board with the relevant provider; the transfer feature should not be used until that safeguard is in place. The appointment/contact form notification is also sent to DijitalPi, the service provider that operates the site technically; this transfer is domestic and limited to technical support and request follow-up. Site usage statistics are measured with Google Analytics 4 as soon as the page loads; that data is transferred to Google outside Türkiye and your IP address is processed in anonymised form. Measurement is not tied to a separate consent step; the cookie notice on the site is informational. You can block or delete analytics cookies through your browser settings. No other processor is listed as a recipient in this notice.

Retention

Chat security records are retained for no more than 90 days from creation and are physically deleted from disk by a daily cleanup job. Chat-message content is not stored by default. Form data is not written to a separate database on this site; it remains as a transactional email in the recipient mailbox and Brevo delivery system only as long as necessary to conclude the contact request and address potential legal claims.

Security measures

IP addresses are irreversibly hashed using SHA-256 with a configured or session-random salt; requests are subject to IP-based rate limiting; request bodies have byte limits; provider communications and site traffic are encrypted in transit with TLS. Lead-form personal data is not written to server logs. Chat-content logging is off by default.

Your rights under KVKK Article 11

  • Learn whether your personal data is processed and request information if it is.
  • Learn the purpose of processing and whether the data is used consistently with that purpose.
  • Know the third parties in Türkiye or abroad to whom data is transferred.
  • Request correction of incomplete or inaccurate data and notice of that correction to recipients.
  • Request erasure or destruction under Article 7 and notice of that action to recipients.
  • Object to an adverse result produced solely by automated analysis.
  • Claim compensation for damage caused by unlawful processing.

Send an application identifying you and your request to drmelahatataseverclinic@gmail.com or to the controller address above. It will be handled under the KVKK and the Communiqué on Application Procedures and Principles.