GDPR

This GDPR Notice is provided pursuant to Articles 13 and 14 of the EU General Data Protection Regulation 2016/679 ("GDPR") and Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Its purpose is to inform you about how Livera Dental Clinic ("Livera", "the clinic") processes your personal data. Your explicit consent will be sought separately wherever required.

1. Data Controller

Controller: Livera Dental Clinic
Address: Florya Asfaltı No:3/18, Bakırköy 34140, Istanbul, Türkiye
E-mail: info@liveradentalclinic.com
Phone: +90 543 207 13 24
Contact representative: Dt. Ahmet Eren Baş

2. Categories of Personal Data Processed

• Identity: First name, last name, date of birth (for treatment planning).
• Contact: Phone, e-mail, country, city.
• Health (special category - GDPR Art. 9 / KVKK Art. 6): Medical history, current oral and dental status, medications used, allergies, radiological images (panoramic X-rays, CBCT), pre- and post-treatment clinical photographs.
• Customer transactions: Appointment dates, treatment type, payment information.
• Security: IP address, session information, log records.
• Marketing: Communication preferences based on your explicit consent.

3. Purposes of Processing

• Provision of dental and aesthetic dental treatment services,
• Management of appointment processes and communication with the patient,
• Conclusion, performance and follow-up of clinical agreements,
• Post-treatment follow-up and measurement of patient satisfaction,
• Fulfilment of financial obligations (invoices, taxation),
• Statutory reporting to authorised public institutions,
• Improvement of in-clinic service quality and operational planning,
• Ensuring site security and preventing abuse or fraud,
• Promotion and marketing activities, subject to your explicit consent.

4. Lawful Basis

Your personal data is processed on the following legal grounds (GDPR Art. 6 and 9 / KVKK Art. 5(2) and 6(3)):

• Necessity for the performance of a contract (treatment contract, appointment process),
• Compliance with a legal obligation (health legislation, tax legislation, record keeping),
• Necessity for the establishment, exercise or defence of legal claims,
• Our legitimate interests (clinic security, prevention of fraud),
• Explicit consent: Health data, use of pre/post-treatment photographs for marketing, direct marketing communication.

5. Data Transfers

Your personal data may be shared with the following parties, limited to the purposes of processing and subject to appropriate contractual and technical security measures:

• Within Türkiye: Hosting provider (Türkiye data center), accounting office, payment service provider, partner laboratories, authorized public institutions (upon request).
• International: Google Analytics (USA - EU-US Data Privacy Framework), Meta Platforms (USA), Mailgun (USA), WhatsApp Business API. International transfers are made under appropriate safeguards (adequacy decision, standard contractual clauses or explicit consent) pursuant to Art. 46 GDPR / Art. 9 KVKK.

6. Methods of Collection

Your personal data is collected through contact and appointment forms on our website, telephone calls, our WhatsApp Business line, e-mail correspondence, medical history forms you fill in at the clinic and verbal statements, in automated and partially automated ways.

7. Your Data Subject Rights

Under the GDPR (Art. 15-22) and KVKK Art. 11 you have the right to:

• Know whether your personal data is being processed,
• Request information about processing carried out,
• Know the purpose of processing and whether it is being used in line with that purpose,
• Know the third parties to whom your data has been transferred at home or abroad,
• Request rectification of incomplete or inaccurate data,
• Request erasure ("right to be forgotten") under the conditions of Art. 17 GDPR / Art. 7 KVKK,
• Request restriction of processing (Art. 18 GDPR),
• Receive your data in a portable format (Art. 20 GDPR),
• Object to processing based on legitimate interests or direct marketing (Art. 21 GDPR),
• Not be subject to automated decision-making (Art. 22 GDPR),
• Withdraw your consent at any time.

8. How to Exercise Your Rights

To exercise your rights you may either submit a hand-signed petition to the address above by post, or send your request to info@liveradentalclinic.com from the e-mail address registered in our system. Requests are processed free of charge within 30 days; in exceptional cases the fee tariff set by the Personal Data Protection Authority may apply.

9. Right to Lodge a Complaint

If your request is denied, the response is insufficient or no response is given within the legal time limit, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (www.kvkk.gov.tr) or with the supervisory authority in your country of residence within the EU/EEA.

10. Explicit Consent for Sensitive Health Data

By the nature of dental services, we process special category personal data (health data). This data is processed only to plan, deliver and follow up your treatment, based on your explicit consent and on the applicable health legislation. Separate written consent is obtained for the use of pre- and post-treatment photographs in marketing materials; this consent can be withdrawn at any time.