This notice explains how 07 Dental handles personal data collected through this website, the consultation form, email, phone and WhatsApp. It is written to meet the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Union and the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).
Treatment at the clinic is also covered by the clarification and consent forms you receive at the clinic. You can ask for a copy at any time at info@07dental.com.tr.
Who is responsible for your data
The data controller is:
WHİTEDENT AĞIZ VE DİŞ SAĞLIĞI HİZMETLERİ LİMİTED ŞİRKETİ, trading as 07 Dental (07 Dental Ağız ve Diş Sağlığı Polikliniği)
Uluç Mah. Çamlık Cad. No:81/C (Armina Konakları Sitesi), 07070 Konyaaltı/Antalya, Türkiye
Email: info@07dental.com.tr
Phone: +90 242 228 27 61 · WhatsApp: +90 505 575 93 37
Company and registration details are available on request from info@07dental.com.tr.
If you live in the EU, the EEA, the UK or Switzerland, you can send any question or request directly to the data controller at info@07dental.com.tr.
What we collect and why
The free consultation form
When you ask for a treatment plan, we collect:
- your full name
- your email address and phone number, and whether you use WhatsApp on that number
- the country you live in
- the treatment you are interested in, when you would like to travel and how you prefer us to reply
- anything you write in the message field, for example missing teeth, pain, earlier treatment, medication or budget
- the photos of your teeth and any X-rays you send
Photos of your teeth, X-rays and what you tell us about your health, pain or medication are health data. KVKK (Article 6) and the GDPR (Article 9) treat health data as a special category of personal data that may only be processed under strict conditions.
How the form reaches us: the send button on the form shows which way it works. If the form prepares a WhatsApp message, you send that message and your photos yourself from your own WhatsApp account, and the information reaches the clinic’s WhatsApp account (see “WhatsApp” below) without being stored on the website’s servers. If you use the online upload, the form sends your details and photos to our website, where they are stored as described under “Where your data is stored”.
Purpose: a dentist looks at your information to prepare a written treatment plan with the treatment, the number of days and visits, and the price, and we contact you about that plan.
Legal basis:
- For your health data, your explicit consent, which you give by ticking the consent box before you send the form (KVKK Article 6; GDPR Article 9(2)(a)).
- For your contact details and the rest of the form, the steps you asked us to take before a possible treatment agreement (KVKK Article 5(2)(c); GDPR Article 6(1)(b)), and your consent where it applies.
You can withdraw your consent at any time by writing to info@07dental.com.tr. Withdrawal doesn’t affect processing that took place before it, but without your health data we can’t prepare a plan.
Email and phone
If you email or call us, we use your contact details and what you tell us to answer your question and, if you wish, arrange treatment. The legal basis is the same as for the form. Emails to info@07dental.com.tr are stored by our email service provider.
If you message us on WhatsApp, or send the consultation form through WhatsApp, your messages, photos and phone number pass through WhatsApp, a service run by Meta (WhatsApp Ireland Limited for users in the EU and UK, WhatsApp LLC elsewhere), under WhatsApp’s own terms and privacy policy. Messages are end-to-end encrypted in transit. On our side they are kept on the clinic’s WhatsApp account and read only by the dentists and staff who handle patient enquiries.
If you’d rather not share health information through WhatsApp, email it to us instead or bring it to your appointment.
Where your data is stored and who processes it
We use a small number of service providers who process data on our behalf:
- Cloudflare, Inc. hosts this website and protects it against misuse. If you use the online upload, your form details, photos and X-rays are stored in a private storage area (Cloudflare R2) within the EU, which encrypts stored files. Before upload, photos are reduced in size on your device, and embedded metadata such as location data is not carried over. The form may be protected against bots with Cloudflare Turnstile.
- Resend (Resend, Inc., United States), our email service provider for notifications, sends the email that tells the clinic a new online consultation request has arrived. That email contains your form details and time-limited, signed links to your photos; the photos themselves are not attached.
- Our email provider for info@07dental.com.tr stores the emails you send us and our replies.
- WhatsApp / Meta carries the messages and photos you send us on WhatsApp.
Only the dentists and staff who prepare and discuss your plan can open your photos and X-rays.
If you become a patient, we share data only where needed for your care or required by law: dental laboratories receive only the impressions, scans and information needed to make your restoration, without your contact details where possible; Turkish health authorities receive what the law requires.
Transfers outside Türkiye and the EU
Some of these providers (Cloudflare, our email providers, WhatsApp/Meta and, if you load the map, Google) are based in, or use servers in, the United States and other countries outside Türkiye. Transfers abroad are made under Article 9 of the KVKK and Chapter V of the GDPR, based on the appropriate safeguards those laws require, such as standard contractual clauses, and/or your explicit consent where the law requires it.
How long we keep it
- Consultation requests that don’t lead to treatment, and the photos and X-rays sent with them: deleted at the latest 2 years after our last contact, or sooner if you ask and no legal duty requires us to keep them.
- If you become a patient, your records become part of your patient file and are kept for the periods required by Turkish health legislation for patient records, then deleted, destroyed or anonymised.
- WhatsApp and email conversations: kept as long as needed for your request, then deleted within the same 2-year limit. Information that becomes part of your patient file is kept with that file.
- Server logs: kept by our hosting provider only for short technical periods.
Analytics and cookies
This site doesn’t use advertising or tracking cookies.
When we measure visits, we use only Cloudflare Web Analytics, which counts page views, referring sites, countries and device types in aggregate. It doesn’t set cookies, doesn’t store anything on your device and doesn’t build a profile of you across sites. Its legal basis is our legitimate interest in knowing which pages are used (GDPR Article 6(1)(f); KVKK Article 5(2)(f)).
If you choose a language yourself in the language menu, the site stores one functional cookie called “lang” that remembers your choice. It contains only the language code, lasts up to 12 months and isn’t used to identify you. Cloudflare may also use a strictly necessary security cookie when it needs to protect the site against attacks.
Google Maps
The contact page can show a map from Google Maps (Google Ireland Limited / Google LLC). The map loads only after you click “Show the map”; before that, nothing is sent to Google. When the map loads, your browser connects to Google, which receives your IP address and browser information and may set cookies under Google’s own privacy policy. We don’t receive any of this data.
Your rights
Under the KVKK (Article 11) you may ask us:
- whether we process your personal data, and for information about it if we do
- for what purpose it is processed and whether it is used for that purpose
- which third parties in Türkiye or abroad it has been passed to
- to correct it if it is incomplete or wrong
- to delete or destroy it under the conditions of Article 7
- to tell third parties who received your data about a correction or deletion
- to object to a result against you that comes solely from automated analysis
- for compensation if you suffer damage because your data was processed unlawfully
Under the GDPR (Articles 15–22) you have the right to:
- access your data and receive a copy (Article 15)
- have inaccurate data corrected (Article 16)
- have your data erased (Article 17)
- restrict how we use it (Article 18)
- be told when we pass a correction, erasure or restriction on to others (Article 19)
- receive the data you gave us in a common electronic format and have it passed to someone else (Article 20)
- object to processing based on legitimate interests (Article 21)
- not be subject to a decision based solely on automated processing that significantly affects you (Article 22)
We don’t make automated decisions about you. Every treatment plan is prepared by a dentist.
How to contact us or make a request
Send your request:
- by email to info@07dental.com.tr
- by post or in person to Uluç Mah. Çamlık Cad. No:81/C (Armina Konakları Sitesi), 07070 Konyaaltı/Antalya, Türkiye
- through a notary public
Please say which right you want to use and include enough information for us to identify you. We may ask for proof of identity before releasing health data. We answer KVKK requests within 30 days and GDPR requests within one month, free of charge unless the law allows a fee.
If you’re not satisfied with our answer, you can complain to the Personal Data Protection Authority in Türkiye (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr), to the data protection authority in the EU country where you live or work, or in the UK to the Information Commissioner’s Office (ico.org.uk).
Children
The consultation form is intended for adults. A parent or legal guardian should send the request for anyone under 18.
Changes to this notice
We update this notice when the way we handle data changes. The date at the top shows the latest version.