GDPR
At Dentasay, we are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This policy explains how we collect, store, use, and protect personal data when you interact with our website and services.
1. Data Controller
Dentasay is the data controller for the personal data you provide via our website and online platforms.
Contact:
Dentasay Sağlık Hizmetleri LTD
Website: https://dentasay.com
Email: info@dentasay.com
2. Legal Basis for Processing
We collect and process your personal data based on one or more of the following legal grounds:
• Your explicit consent (e.g., contact forms, newsletter sign-ups)
• Contractual necessity (e.g., when you use our services)
• Legal obligations (e.g., tax or security regulations)
• Our legitimate interests (e.g., improving website performance)
3. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
• Right to access – You may request a copy of your personal data we hold.
• Right to rectification – You may request correction of inaccurate or incomplete data.
• Right to erasure (“Right to be forgotten”) – You may request deletion of your data under certain conditions.
• Right to restrict processing – You may request we limit how we use your data.
• Right to data portability – You may request to transfer your data to another provider.
• Right to object – You may object to our processing of your data for specific uses, such as direct marketing.
• Right to withdraw consent – Where processing is based on your consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at: info@dentasay.com
4. International Data Transfers
If we transfer personal data outside of the European Economic Area (EEA), we ensure it is done with appropriate safeguards, such as standard contractual clauses (SCCs) or adequacy decisions.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. For example:
• Comments are stored indefinitely unless deleted by the user or administrator.
• User profiles are stored until the account is deleted or modified.
6. Third-Party Services
Your personal data may be shared with third-party processors (such as analytics, hosting, payment processors) under data processing agreements to ensure GDPR compliance. We never sell your data to third parties.
7. Automated Decision Making
We do not use your personal data for automated decision-making or profiling that has legal or significant effects.
8. Data Security
We apply appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
9. Complaints
If you believe your data protection rights have been violated, you may file a complaint with your local supervisory authority (Data Protection Authority).
In Turkey: KVKK
In EU: List of authorities