For the clinics and patients who use DeepClinic, we have set out plainly which data we process and why, how long we keep it, and how you can exercise your rights.
This notice is issued under Turkish Law No. 6698 on the Protection of Personal Data (KVKK). This English version is provided for information only; in case of any discrepancy, the Turkish version prevails.
Last updated: 27 August 2026Governing law: Turkish Law No. 6698 (KVKK)
1. Data controller
Your personal data is processed by DeepClinic as data controller within the framework set out below, under Turkish Law No. 6698 on the Protection of Personal Data. For data belonging to your clinic’s own patients, the clinic is the data controller and DeepClinic acts as data processor.
2. Personal data processed
Clinic user data
Full name, clinic name, email address, telephone number, professional title, account and session records, billing details. A telephone number is required at sign-up: it is used to reach you for support requests, to send account security notifications and to carry out account recovery. It is not used to send commercial electronic messages; any such message requires your separate consent.
Patient health data (special categories)
Posture analysis photographs, anatomical landmark measurements, test and questionnaire results, clinical notes, exercise programmes and session records. This data is processed only with the patient’s explicit consent and on the clinic’s instructions.
Technical data
IP address, device and browser information, usage logs, cookie records.
3. Purposes of processing and legal basis
Creating accounts, authenticating users and running the trial process
Conclusion and performance of a contract — Law No. 6698, Art. 5(2)(c)
Producing posture analyses, tests and reports, and maintaining patient follow-up
Explicit consent of the patient — Law No. 6698, Art. 6(2); on the clinic’s instructions
Invoicing, collection of payments and keeping statutory records
Legal obligation — Law No. 6698, Art. 5(2)(ç)
Security, abuse detection and keeping system logs
Legitimate interest — Law No. 6698, Art. 5(2)(f)
Aggregated usage analysis for product development
Explicit consent (optional cookies)
4. Transfers
Your data is shared with the suppliers from which we obtain hosting, email delivery and payment infrastructure services, only to the extent the service requires and subject to confidentiality undertakings. Part of this infrastructure is located outside Türkiye; such transfers are made under Article 9 of the KVKK and only to the extent the service requires. Data may be shared with authorised public institutions where there is a lawful request.
5. Retention period
Data is retained for as long as the clinic account remains active. Upon your account closure request, patient data is deleted or anonymised; records that legislation requires us to keep (invoices, contracts) are retained for the statutory period. You may submit a deletion request using the contact address in this notice.
6. Cookie policy
We use cookies to maintain your session, remember your preferences and measure usage. Non-essential cookies run only with your consent; you may withdraw that consent at any time from your browser settings or through the banner. Before consent is given, measurement tools run in a restricted mode: they set no cookies and create no identifier for you, transmitting only an anonymous signal that a page was viewed.
Strictly necessary cookies
Required for signing in, security and form submission; these cannot be disabled.
NO CONSENT NEEDED
Analytics cookies
Measure which sections are used, in aggregate; they do not identify individuals (Google Analytics).
CONSENT REQUIRED
Marketing cookies
Used for serving advertisements and measuring campaigns (Meta Pixel).
CONSENT REQUIRED
7. Your rights under Article 11 of Law No. 6698
01To learn whether your personal data is being processed
02To request information if it has been processed
03To learn the purpose of processing and whether the data is used in line with that purpose
04To know the third parties to whom the data is transferred, in Türkiye or abroad
05To request rectification if the data is incomplete or inaccurate
06To request erasure or destruction of the data
07To request that rectification, erasure and destruction be notified to third parties
08To object to an adverse outcome produced by analysis through automated systems
09To claim compensation for damage arising from unlawful processing
8. Applications and contact
You may submit requests concerning your rights together with information verifying your identity; applications are answered within 30 days at the latest.
We use cookies that are required for the site to work. Beyond those, we would like to use analytics and marketing cookies to measure how the site is used and whether our ad campaigns work. These run only with your consent. Read the privacy notice