Last updated: 29 June 2026
This page provides information about the processing of personal data, WhatsApp communications, the use of this website and the limitations of the medical information published on it.
1. Website and Patient Candidate Privacy Notice
1.1 Data Controller
The data controller responsible for the processing of personal data described in this Notice is:
Data Controller: İbrahim Giray Genç
Professional name: Dr. Giray Genç
Address: Terrace Fulya Center, Teşvikiye, Hakkı Yeten Cd. No: 13 C2/32, 34394 Şişli, İstanbul, Türkiye
Email: info@drgiraygenc.com
Telephone: +90 543 952 39 69
Website: https://drgiraygenc.com
This Notice applies to website visitors, prospective patients, patients and persons who contact Dr. Giray Genç or the authorised patient coordination team through the website, WhatsApp, email, telephone, social media or other communication channels.
1.2 Personal Data We May Collect
Depending on your interaction with us, we may process the following categories of personal data:
Identity and contact information
- Full name;
- Telephone number;
- Email address;
- Country or city of residence;
- Preferred language;
- Preferred communication method;
- Social media username, where voluntarily provided.
Consultation and communication information
- The procedure or treatment you are interested in;
- Your preferred consultation or surgery period;
- Messages, questions and consultation requests;
- WhatsApp, email and telephone correspondence;
- Appointment, follow-up and communication records;
- Communication permissions and opt-out requests.
Health and medical assessment information
Where voluntarily provided or necessary for a preliminary medical assessment, we may process:
- Relevant medical history;
- Previous medical or surgical procedures;
- Medication and allergy information;
- Height, weight and other information relevant to medical assessment;
- Photographs submitted for physician review;
- Information concerning your health, concerns or requested treatment.
Health information and medical photographs are special-category personal data and are handled with additional care.
Please do not submit identity documents, payment-card details or medical information that is not necessary for your consultation request through the general website form.
Appointment, quotation and transaction information
Where applicable, we may process:
- Preliminary treatment-plan information;
- Quotation and pricing records;
- Appointment and consultation details;
- Deposit or payment-status information;
- Hospital, accommodation, transportation or patient-support arrangements requested by you.
Payment-card information should not be sent through a website form, email or WhatsApp.
Technical and security information
When you visit or use the website, we may process:
- IP address;
- Browser and device information;
- Operating-system information;
- Website security and access logs;
- Page and form interaction information;
- Date, time and source of a consultation request;
- Consent and communication-preference records.
Information about cookies and similar technologies is provided in our separate Cookie Policy.
1.3 How Personal Data Is Collected
Personal data may be collected through:
- Website consultation and contact forms;
- WhatsApp and other business-messaging channels;
- Email and telephone communications;
- Social media enquiries;
- Online or in-person consultations;
- Documents, photographs and information submitted by you;
- Customer relationship management and patient-coordination systems;
- Healthcare professionals and healthcare facilities involved in your request, where legally permitted;
- Website, hosting and security systems.
Personal data may be collected electronically, verbally or in writing, depending on the communication or service involved.
1.4 Purposes of Processing
Personal data may be processed for the following purposes:
- Receiving and responding to consultation requests;
- Contacting you through your selected communication channel;
- Conducting a preliminary medical assessment;
- Submitting relevant information and photographs for physician review;
- Requesting information necessary for an assessment;
- Preparing a preliminary treatment plan or quotation;
- Coordinating consultations, appointments and treatment processes;
- Coordinating hospital, accommodation, transportation or translation support where requested;
- Managing patient-coordination and follow-up processes;
- Recording communication preferences and opt-out requests;
- Maintaining the security of the website and information systems;
- Preventing misuse, unauthorised access and fraudulent activity;
- Responding to questions, complaints and legal requests;
- Establishing, exercising or protecting legal rights;
- Fulfilling applicable legal, regulatory and professional obligations.
Personal data will not be used for unrelated promotional or marketing communications unless separate and valid permission has been obtained for that specific purpose.
1.5 Legal Grounds for Processing
Depending on the relevant processing activity, general personal data may be processed where:
- Processing is necessary to take steps at your request before establishing a treatment or service relationship;
- Processing is necessary for the establishment or performance of a contractual relationship;
- Processing is necessary to comply with a legal obligation;
- Processing is necessary for the establishment, exercise or protection of a legal right;
- Processing is necessary for legitimate interests, provided that your fundamental rights and freedoms are not adversely affected;
- You have provided explicit consent where consent is legally required.
Health information, medical photographs and other special-category personal data are processed only where an applicable condition under Turkish Personal Data Protection Law No. 6698 exists.
Depending on the circumstances, this may include:
- Your explicit consent, where required;
- Processing necessary for medical diagnosis, treatment or care;
- Processing necessary for the management or planning of healthcare services;
- Processing by persons or authorised organisations subject to professional confidentiality obligations;
- Processing required for the establishment, exercise or protection of a legal right.
The applicable legal ground is assessed according to the type of personal data, the purpose of processing and the stage of the consultation or treatment process.
1.6 Persons and Organisations to Whom Data May Be Transferred
Where necessary and proportionate, personal data may be shared with the following recipient groups:
- Dr. Giray Genç;
- Authorised patient coordinators and personnel;
- Healthcare facilities, hospitals and authorised healthcare professionals involved in the assessment or treatment;
- Medical laboratories and diagnostic-service providers, where necessary;
- Customer relationship management, patient-coordination and appointment-management service providers;
- Cloud hosting, data storage, backup and information-technology service providers;
- Business-messaging, telephone and email service providers;
- Website hosting, form-integration, cybersecurity and technical-support providers;
- Payment, accounting and financial-service providers, where applicable;
- Accommodation, transportation, translation and patient-support providers, where requested by you;
- Legal advisers, accountants, auditors and professional consultants;
- Courts, public authorities, regulatory bodies and other competent institutions where disclosure is legally required.
Only the information reasonably necessary for the relevant purpose should be transferred.
Personal data is not sold to third parties.
1.7 International Data Transfers
Some customer relationship management, cloud hosting, business-messaging, email, data-storage, security and other technology service providers may operate outside Türkiye or use infrastructure located outside Türkiye.
As a result, certain personal data may be transferred abroad or made accessible from abroad.
International transfers of personal data are subject to Article 9 of Turkish Personal Data Protection Law No. 6698 and applicable secondary legislation.
Where an international transfer takes place, an applicable transfer condition or safeguard must be used, such as:
- An applicable adequacy decision;
- Appropriate safeguards;
- Standard contractual clauses;
- Binding corporate rules;
- Another legally permitted transfer mechanism.
International transfers are limited to the information necessary for the relevant service and purpose.
1.8 Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected and for applicable legal, regulatory, contractual and limitation periods.
Prospective-patient enquiry, consultation and communication records that do not result in treatment are generally retained for up to 24 months from the date of the last meaningful interaction.
Spam, irrelevant, duplicate or incomplete enquiries may be deleted within a shorter period, generally within three months.
Where a treatment or doctor–patient relationship is established, relevant information may be transferred to the patient’s medical record and retained for the periods required under applicable healthcare and legal regulations.
Financial, contractual and accounting records may be retained for the periods required by applicable legislation.
Where a person withdraws communication permission or asks not to be contacted:
- Active communication will be stopped without undue delay;
- A limited suppression record may be retained where necessary to prevent future unwanted contact;
- Other information will be deleted when there is no remaining legal or operational ground for retaining it.
At the end of the applicable retention period, personal data is securely deleted, destroyed or anonymised, unless continued retention is legally required.
1.9 Data Security
Reasonable technical and organisational measures are applied according to the nature and sensitivity of the personal data.
These measures may include:
- Role-based access restrictions;
- Limiting access to authorised personnel;
- User authentication and password controls;
- Confidentiality obligations;
- Activity and access logging;
- Secure backup procedures;
- System and security monitoring;
- Staff awareness and access-management procedures;
- Measures designed to prevent unauthorised access, disclosure, alteration or loss.
No method of electronic transmission or storage can be guaranteed to be completely secure. Users should therefore avoid sending unnecessary sensitive information through general communication channels.
1.10 Your Rights
Under Article 11 of Turkish Personal Data Protection Law No. 6698, you may have the right to:
- Learn whether your personal data is being processed;
- Request information about the processing of your personal data;
- Learn the purpose of processing and whether the data is used in accordance with that purpose;
- Learn the third parties to whom your personal data has been transferred in Türkiye or abroad;
- Request correction of incomplete or inaccurate personal data;
- Request deletion or destruction where the legal conditions are satisfied;
- Request notification of correction, deletion or destruction to relevant recipients;
- Object to a result arising exclusively from automated analysis that produces an adverse consequence;
- Request compensation where you suffer damage due to unlawful processing.
1.11 Exercising Your Rights
Requests concerning personal data may be submitted using the following contact details:
Data Controller: İbrahim Giray Genç
Address: Terrace Fulya Center, Teşvikiye, Hakkı Yeten Cd. No: 13 C2/32, 34394 Şişli, İstanbul, Türkiye
Email: info@drgiraygenc.com
Your request should clearly explain:
- Your identity and contact details;
- Your relationship with us;
- The personal-data right you wish to exercise;
- The information necessary to identify the relevant records.
Additional information may be requested where reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.
Formal applications must be submitted using a method permitted under applicable personal-data-protection legislation.
1.12 Persons Under 18
The website is not intended to collect medical or consultation information directly from persons under 18 without the involvement of a parent or legal guardian.
Where the prospective patient is under 18, a parent or legal guardian should participate in the consultation and communication process.
2. WhatsApp Communications
Where you select WhatsApp as your preferred communication method and separately provide the relevant permission, Dr. Giray Genç’s authorised patient coordination team may contact you regarding:
- Your consultation request;
- Information required to evaluate your request;
- Appointment and assessment coordination;
- Physician-review requirements;
- Treatment-related patient support;
- Related administrative arrangements requested by you.
WhatsApp permission for consultation communication does not automatically include permission to send unrelated advertising, campaigns or promotional offers.
You may withdraw your WhatsApp communication permission at any time by:
- Replying STOP to a WhatsApp message; or
- Contacting info@drgiraygenc.com.
Withdrawal of WhatsApp permission does not affect processing that took place lawfully before the withdrawal or information that must be retained under applicable law.
WhatsApp is operated by a third-party messaging provider. Messages and account information may also be processed in accordance with the provider’s own privacy terms and technical infrastructure.
WhatsApp must not be used for medical emergencies.
Please do not send payment-card information, passwords or unnecessary identity documents through WhatsApp.
3. Medical Disclaimer
3.1 General Information Only
The medical and procedural information published on this website is provided for general information and patient-education purposes only.
It does not replace an individual medical examination, diagnosis, professional medical advice or personalised treatment plan.
3.2 No Doctor–Patient Relationship
Visiting the website, submitting a consultation form, sending a message or receiving general preliminary information does not by itself establish a doctor–patient relationship.
A doctor–patient relationship is established only after an appropriate medical assessment and acceptance for treatment in accordance with applicable professional and legal requirements.
3.3 Preliminary Remote Assessment
A preliminary opinion may be provided based on information, photographs or online communications submitted by a prospective patient.
Any preliminary opinion may change following:
- An in-person examination;
- Additional medical information;
- Diagnostic tests;
- Physician assessment;
- Changes in the patient’s health or circumstances.
Final suitability for surgery or treatment can only be determined by an authorised physician following an appropriate assessment.
3.4 No Guaranteed Result
All medical and surgical procedures involve risks, limitations and uncertainty.
Results and recovery periods differ between patients depending on factors including:
- Anatomy;
- General health;
- Age;
- Healing response;
- Lifestyle;
- Medical history;
- Previous procedures;
- Compliance with medical advice.
No specific result, recovery period or outcome is guaranteed.
3.5 Before-and-After Images and Patient Experiences
Before-and-after photographs, reviews and patient experiences represent individual cases only.
They do not promise or guarantee that another patient will achieve the same or a similar result.
Images are published only where the required permission and applicable legal conditions have been satisfied.
3.6 Preliminary Treatment Plans and Quotations
Any treatment plan, service description or price provided before a complete medical assessment is preliminary.
The final treatment plan, included services, hospital arrangements and price may change following:
- Physician examination;
- Medical tests;
- Review of medical history;
- Additional procedures or services;
- Changes in the patient’s condition or requested arrangements.
3.7 Emergencies
The website, consultation forms, email and WhatsApp channels are not emergency medical services.
Do not use these channels for urgent, serious or life-threatening medical situations.
In an emergency, contact the emergency services in your location or attend the nearest emergency healthcare facility.
4. Website Terms of Use
4.1 Website Content
We aim to keep the website content accurate, understandable and reasonably current.
Medical knowledge, regulations, services and clinical practices may change. Website content may therefore be updated, corrected or removed without prior notice.
4.2 Permitted Use
The website may be used for lawful personal-information and consultation purposes.
Users must not:
- Attempt to gain unauthorised access to the website or its systems;
- Submit false, misleading or unlawful information;
- Introduce malicious software or interfere with website operation;
- Copy or commercially exploit protected content without permission;
- Use the website in a manner that violates applicable law or the rights of another person.
4.3 Intellectual Property
Unless otherwise stated, original website text, design, branding, graphics, photographs and other content are protected by applicable intellectual-property laws.
Content may not be reproduced, modified, commercially distributed or used without the required permission.
4.4 External Links
The website may contain links to third-party websites or services.
We are not responsible for the content, availability, security or privacy practices of independent third-party websites.
Users should review the terms and privacy information of any external service they visit.
4.5 Applicable Law
This website and these terms are subject to the laws of the Republic of Türkiye, without limiting any mandatory rights that may apply to patients or consumers under applicable law.
5. Cookie Information
Information about cookies, analytics technologies, advertising measurement, consent preferences and how to change your cookie choices is provided in our separate Cookie Policy.
6. Updates and Contact Information
This page may be updated where necessary to reflect changes in legal requirements, services, technology or personal-data-processing activities.
The current version is identified by the last-updated date displayed at the top of this page.
Website editor contact: info@drgiraygenc.com
Privacy contact: info@drgiraygenc.com
Telephone: +90 543 952 39 69
Address: Terrace Fulya Center, Teşvikiye, Hakkı Yeten Cd. No: 13 C2/32, 34394 Şişli, İstanbul, Türkiye
Medical content reviewed by: Dr. Giray Genç