Privacy notice (KVKK)

Your personal data is processed by Aleyna Sahillioğlu (Dietitian) as the data controller.

• Address: Ataşehir, 8211/8. Sk. No:23 Kat:1 Daire:1, Çiğli/İzmir
• Phone: 0850 433 38 11

• Identity: first name and surname.
• Contact: phone number; your e-mail address if you ask for an e-mail reply.
• Request details: whether you prefer to meet in person or online, how you want a reply and when suits you.
• Health data (special category): the topic you choose in the form, what you write in your message, and the complaints and goals you tick if you choose to send the result of the "Find your fit" guide.
• Security: IP address, browser details and time of access created when you connect to the site (the hosting provider's server logs).
• Visit statistics: aggregate data that uses no cookies and does not identify you (pages viewed, country, device type and similar).

• Replying to your information and booking requests and planning your session.
• Keeping the website secure and preventing misuse.
• Improving the site with aggregate visit statistics.
• Meeting legal obligations.

Your data is collected electronically through the contact form and the guide on this website, and through phone, e-mail and Instagram messages (@aleynasahillioglu), when you share it. If you fill in the form while site e-mail is not set up, your message is only prepared in your browser; sending it on Instagram or another way is your choice. Online booking happens on Doktorsitesi, whose own privacy notice covers the data you share there.

• Identity, contact and request details: being directly related to entering into a contract (KVKK Art. 5/2-c) and the controller's legitimate interest (Art. 5/2-f).
• Security data: compliance with a legal obligation (Art. 5/2-ç) and legitimate interest (Art. 5/2-f).
• Visit statistics: legitimate interest (Art. 5/2-f).
• Health data: your explicit consent (Art. 6/3-a). You do not have to give consent; you can leave the topic and message fields empty and reach us with just your name and phone number.

Your personal data may be shared only for the purposes above, with:

• Public authorities legally entitled to request it, when they do.
• Vercel Inc. (USA): hosting the website and visit statistics.
• Google LLC (USA): delivering and storing contact form messages by e-mail (Gmail), once site e-mail is set up.
• Meta Platforms (Instagram): if you choose to send your message on Instagram, under Instagram's own terms.

As these providers' servers are outside Turkey, these are transfers abroad under KVKK Art. 9 and are made following the procedures in Art. 9.

The map on the contact page is loaded by Google Maps; when it opens, Google may process data such as your IP address under its own privacy policy.

Your requests are kept for as long as needed to reply to you and run the booking process. When that purpose ends and the legal retention periods expire, the data is deleted, destroyed or anonymised. The website does not keep form messages in a database of its own.

This site does not use cookies. To show the opening animation only once per visit, a marker with no personal data is kept in your browser's session storage (sessionStorage); it is deleted when you close the browser. The Google Maps window on the contact page may use Google's own cookies.

Under KVKK Art. 11 you can apply to the data controller to:

• find out whether your personal data is processed,
• request information about it if it is,
• find out the purpose of processing and whether it is used accordingly,
• know the third parties in Turkey or abroad it is transferred to,
• ask for it to be corrected if it is incomplete or wrong,
• ask for it to be deleted or destroyed under the conditions in KVKK Art. 7,
• ask for corrections, deletions and destruction to be reported to the third parties it was transferred to,
• object to a result against you that arises solely from automated analysis,
• claim compensation if you suffer damage from unlawful processing.

You can also withdraw your explicit consent at any time, with effect for the future.

You can send your application in writing to the address above, following the Communiqué on the Procedures and Principles of Applications to the Data Controller. Your application should include your name and surname, Turkish ID number (for foreign nationals: nationality and passport or ID number), postal address and your request.

Applications are answered free of charge within 30 days at the latest; if the request involves an extra cost, the fee set by the Personal Data Protection Board may apply. If your application is rejected, you find the answer insufficient or it is not answered in time, you can complain to the Board.