Legal

Privacy notice under KVKK

Last updated: 16 October 2026

drhakanbulam.com (the “Site”) is the website of the medical practice of Op. Dr. Mehmet Hakan Bulam, providing information and receiving contact, appointment and pre-consultation requests. This notice explains how personal data you share through the Site and its contact channels is processed under Kişisel Verilerin Korunması Kanunu (KVKK No. 6698) and the European Union General Data Protection Regulation (“GDPR”).

1. Data controller

Your personal data is processed by Op. Dr. Mehmet Hakan Bulam Muayenehanesi as the data controller. The address and contact details are provided at the end of this page.

2. Personal data processed

Appointment and contact form: full name, phone number, email address (optional), country and city, treatment of interest, and your note.
Pre-consultation form: topic of interest, whether you have previously had cosmetic surgery, consultation preference (online or at the practice), full name, phone number, email address (optional), and note.
AI assistant: messages you write in the chat and photographs or documents you upload; if you leave a note for the clinic through the chat, your full name, phone number and the most recent messages in the conversation.
WhatsApp, phone and email: messages and photographs you send through these channels.
Technical data: IP address, browser and device information, chat session identifier, cookies and browser storage records (see the Cookie policy for details).

Health information contained in your messages and photographs constitutes special categories of personal data and is processed on the basis of your explicit consent.

3. Purposes of processing

Handling your appointment and pre-consultation requests and contacting you
Generating answers to your questions in the AI assistant
Enabling a preliminary assessment using the photographs you send
Helping plan the examination and surgery day for patients traveling from abroad
Keeping the Site secure and preventing misuse
Monitoring the Site's operation and performance and improving the service
Fulfilling statutory obligations and responding to requests from competent authorities

4. Collection methods and legal bases

Your personal data is collected electronically through the Site's forms, AI assistant, WhatsApp, phone and email. This data is processed on the legal bases set out in Article 5 of KVKK: being directly related to the conclusion or performance of a contract, compliance with the data controller's legal obligations, and the data controller's legitimate interests. Your health data is processed on the basis of your explicit consent under Article 6 of KVKK. The checkbox in the forms records this consent; you may withdraw your consent at any time.

5. Transfers of personal data

Email service provider (Brevo): form submissions and chat notes are sent to the clinic by email; if you have provided your email address, a copy is also sent to you.
Artificial intelligence service provider (Anthropic, USA): the messages you write and files you upload to the AI assistant are transmitted to generate a response.
Website and software service provider (DijitalPi): hosting and maintenance of the Site; review of chat records to improve service quality.
Google and YouTube: these services process your technical data when the map or video on the page loads.
OpenAI (USA): for measuring ChatGPT ads, a cookie identifier, the page visited and whether a form, phone or WhatsApp link was used are transmitted.
WhatsApp (Meta): if you choose to contact us through WhatsApp, your messages are transmitted through this service.
Competent public authorities and bodies: where required by law.

Some of these service providers process data abroad (in the USA and the European Union). Transfers take place under the relevant companies' contractual and privacy terms, with the necessary technical and organizational measures in place.

6. Retention periods

AI assistant chat records: 90 days; automatically deleted when this period expires
Contact form and pre-consultation notifications: 3 years
Appointment records: 5 years
Examination and treatment records: for the period required by health legislation
Cookies and browser storage records: the periods specified in the Cookie policy

Data whose retention period has expired is deleted, destroyed or anonymized.

7. Data protection measures

The connection to the Site is encrypted using SSL
IP addresses in chat records are stored as irreversible hashes rather than in plain form
Server firewall and access logs
Requesting only the data needed for your request
Technical and organizational measures against unauthorized access

8. Your rights (Article 11 of KVKK and GDPR)

To learn whether your personal data is processed and, if so, to request information about that processing
To learn the purpose of processing and whether the data is used in accordance with that purpose
To know the third parties to whom your data is transferred domestically or abroad
To request correction of incomplete or inaccurate data
To request deletion or destruction of your data
To request that third parties to whom the data has been transferred be notified of corrections and deletions
To object to an outcome that is to your detriment resulting from analysis exclusively by automated systems
To request compensation for damage caused by unlawful processing
To withdraw your explicit consent

You may submit your request in writing to the practice address or by email. Your request will be resolved free of charge within 30 days at the latest; if the procedure entails an additional cost, a fee determined by Kişisel Verileri Koruma Kurulu (the Personal Data Protection Board) may be charged.

9. Changes

This notice may be updated to reflect changes in legislation and the Site. The current version is always published on this page. For the general principles governing use of the Site, see the Privacy policy.

Data controller and contact

Op. Dr. Mehmet Hakan Bulam Muayenehanesi, Valikonağı Caddesi No:26 Daire:5, Nişantaşı, 34367 Şişli/İstanbul.
Contact: +90 532 252 95 92 · info@drhakanbulam.com