In accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK”), we attach great importance to the protection and lawful processing of your personal data.
Dr. Nurhan Börekçi Alet, who provides healthcare services under the NBA Clinic brand, acts as the data controller responsible for processing your personal data.
Data Controller: Dr. Nurhan Börekçi Alet
Clinic: NBA Clinic
Address: Serdar Mahallesi, Sınırdere Caddesi, No: 1A-1B-1C, Arda Towers, Başiskele, Kocaeli, Türkiye
Phone: +90 530 614 56 56
Email: info@drnurhanborekcialet.com
Website: drnurhanborekcialet.com
This Privacy Notice has been prepared to inform individuals who visit our website, contact us through our communication channels, or request information about our healthcare services regarding the processing of their personal data.
Depending on the nature of your communication with NBA Clinic and the healthcare services you receive, the following categories of personal data may be processed.
First and last name
Telephone number
Email address
Other information voluntarily provided during communication
Contact inquiries
Appointment requests
Questions regarding our services
Feedback, suggestions, and complaints
IP address
Website access logs
Browser and device information
Data collected through cookies used on the website
Health-related information shared by individuals during communication or in connection with healthcare services is classified as special category personal data under Article 6 of the KVKK.
Such data is processed only where the legal conditions specified in the applicable legislation are met and appropriate technical and organizational security measures are implemented.
Your personal data may be processed for the following purposes, provided that the applicable legal requirements are satisfied:
Responding to communication inquiries
Evaluating appointment requests
Providing information about healthcare services
Managing patient relationships
Evaluating applications, requests, and complaints
Planning and delivering healthcare services
Ensuring patient safety
Maintaining website security and functionality
Managing information security processes
Fulfilling obligations arising from applicable legislation
Responding to lawful requests from authorized public institutions and organizations
Personal data is processed in a manner that is relevant, limited, and proportionate to the specified purposes.
Depending on the nature of the processing activity, your personal data may be collected through the following channels:
Communications through our website
Electronic communication channels
Telephone conversations
Appointment requests
Clinic visits and face-to-face consultations
Records created during the provision of healthcare services
Website access logs and cookies
Personal data may be collected electronically or through physical means, depending on the relevant process.
Your personal data is processed based on the applicable legal grounds specified in Articles 5 and 6 of the KVKK.
Personal data may be processed on the following legal grounds:
Processing is expressly provided for by law.
Processing is necessary for the data controller to fulfill its legal obligations.
Processing is necessary for the establishment, exercise, or protection of a legal right.
Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not adversely affected.
The data subject has provided explicit consent, where required.
Special categories of personal data, including health information, may only be processed when one of the legal conditions specified under Article 6 is satisfied.
Health-related personal data may be processed by persons subject to confidentiality obligations or by authorized institutions and organizations for healthcare-related purposes specified by law.
Additional safeguards and security measures determined by the Turkish Personal Data Protection Board are also taken into consideration when processing special categories of personal data.
Your personal data may be transferred only where necessary and in accordance with Articles 8 and 9 of the KVKK.
Depending on the relevant processing activity, personal data may be transferred to:
Authorized public institutions and organizations
Legally authorized judicial and administrative authorities
Healthcare institutions where permitted by applicable healthcare legislation
Information technology and technical infrastructure service providers
Authorized individuals and organizations providing services necessary to fulfill legal obligations
Where international transfers of personal data are required, the conditions specified under Article 9 of the KVKK shall be observed.
Personal data will not be transferred to third parties without an appropriate legal basis.
Your personal data is retained for the period necessary to fulfill the purposes for which it was collected and in accordance with the retention periods prescribed by applicable legislation.
NBA Clinic adopts appropriate technical and organizational measures to ensure the security and confidentiality of personal data.
These measures include:
Preventing unauthorized access
Restricting access to personal data
Ensuring the security of information systems
Protecting health-related data according to its sensitive nature
Conducting data processing activities in compliance with applicable legislation
Deleting, destroying, or anonymizing personal data when the applicable retention period expires
Under Article 11 of the KVKK, individuals whose personal data is processed have the following rights:
To learn whether their personal data is being processed.
To request information if their personal data has been processed.
To learn the purposes of processing their personal data and whether such data is used in accordance with those purposes.
To know the third parties to whom their personal data has been transferred, whether domestically or internationally.
To request the correction of incomplete or inaccurate personal data.
To request the deletion or destruction of personal data under the conditions specified in Article 7 of the KVKK.
To request that corrections, deletions, or destruction of personal data be communicated to third parties to whom the data has been transferred.
To object to results arising against them from the analysis of their personal data exclusively through automated systems.
To request compensation for damages resulting from the unlawful processing of their personal data.
You may contact the data controller, Dr. Nurhan Börekçi Alet, to exercise your rights under the KVKK.
Data Controller: Dr. Nurhan Börekçi Alet
Address: Serdar Mahallesi, Sınırdere Caddesi, No: 1A-1B-1C, Arda Towers, Başiskele, Kocaeli, Türkiye
Phone: +90 530 614 56 56
Email: info@drnurhanborekcialet.com
Applications may be submitted through the methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.
Applications submitted by email must comply with the requirements established under the applicable legislation.
Requests will be evaluated and concluded as soon as possible and no later than 30 days, depending on the nature of the request.
NBA Clinic may update this Privacy Notice to reflect changes in personal data processing activities or applicable legislation.
The updated version will be published on our website and made accessible to relevant individuals.
This Personal Data Protection and Processing Privacy Notice was prepared on October 25, 2026.
Data Controller: Dr. Nurhan Börekçi Alet
Clinic: NBA Clinic
Website: drnurhanborekcialet.com
NBA Clinic considers the protection of personal data, patient confidentiality, and information security to be fundamental elements of its healthcare services.