DATA PROTECTION
Privacy Notice
This notice explains how personal data collected through the MedicaLeads website, booking calendar and contact channels is processed, in line with Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").
1. Data controller
Your personal data is processed by MedicaLeads (Muhammet Ali Tekayak, Şişli / Istanbul, Türkiye) as the data controller. You can reach us at [email protected] or +90 532 177 39 34.
2. Personal data we process
- Identity and contact details: first and last name, email address, phone number.
- Professional details: clinic name, specialty, job title and business information you share during a meeting.
- Booking details: the date, time and time zone of your meeting and any notes you add.
- Security data: IP address, browser and device information, access logs.
3. Why we process it
- To schedule and manage free analysis and strategy calls,
- To answer your requests and offer suitable services and proposals,
- To enter into and perform contracts,
- To deliver the website securely and quickly and to keep aggregate visitor statistics,
- To keep our systems secure and comply with legal obligations.
4. Legal bases and how we collect data
We collect personal data electronically through the booking calendar and forms on our website, by email and by phone. When you visit the website, technical data such as your IP address and browser information is processed automatically by the infrastructure that hosts the site. We process it because it is necessary to enter into or perform a contract, to comply with our legal obligations, and for our legitimate interests where these do not override your fundamental rights (KVKK Article 5(2); GDPR Article 6(1)(b), (c) and (f)). Where consent is required, for example for marketing messages, we ask for it separately.
5. Transfers
For the purposes above, your data may be shared with Cloudflare (Cloudflare, Inc., USA), which hosts and protects this website; with service providers that run our booking, CRM and communication systems; with business partners; and, when legally required, with competent authorities. Because our website hosting and our booking and CRM infrastructure run on cloud providers located outside Türkiye, your data may be transferred abroad in accordance with Article 9 of KVKK and, where applicable, the safeguards required under Chapter V of the GDPR. We never sell your data.
6. Retention
We keep personal data for as long as the purposes above require and for the periods set by applicable law. When these periods end, the data is deleted, destroyed or anonymised.
7. Cookies and third-party components
This website does not set advertising or analytics cookies of its own. Your language preference is stored only in your browser. Aggregate statistics such as visit and page-view counts are collected with Cloudflare Web Analytics, which does not use cookies and does not track you across websites. Embedded third-party components, such as the booking calendar and the font service (Google Fonts), may process technical data such as your IP address and may use technical cookies or similar technologies to work.
8. Your rights
Subject to applicable law, you have the right to know whether your data is processed and to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties it is transferred to; to have it corrected, erased or restricted; to object to processing, including results arising solely from automated analysis; to data portability and to withdraw consent at any time where processing is based on consent; to claim compensation for damage caused by unlawful processing; and to lodge a complaint with the Turkish Personal Data Protection Authority or, if you are in the EU, with your local supervisory authority.
9. Contact
Send any request about your rights to [email protected]. We will respond free of charge as soon as possible and within thirty days at the latest.