This is a working draft based on the current website. Organisational details and actual practices are subject to review by legal counsel.
Scope
This draft sets out an information framework for data that may be processed when you receive or enquire about clinical services. The general website contact form does not create a patient record; health data should be handled through a suitable separate process.
Data categories
Depending on the service, identity, contact, appointment, examination, treatment and follow-up information may be processed, including health information and treatment photographs where needed. The data actually collected must be explained at the relevant stage of care.
Purposes and legal basis
Data is handled as needed for assessment, appointments, care, follow-up and applicable record-keeping duties. Health data is special-category data. The specific statutory condition, responsible healthcare provider and any separate consent process must be identified in the final patient notice.
Access, disclosure and retention
Access to patient data should be limited to those who need it for their duties. Actual disclosures to healthcare providers, public authorities or technical providers must be described. Retention periods and disposal methods need confirmation against the organisation’s data inventory.
Rights and contact
For requests under Turkish Law No. 6698, contact info@istanbulstellahair.com. Clinical decisions and treatment explanations are provided separately by the relevant healthcare professionals.
