KVKK Privacy Notice | PatientPort

Data controller

The data controller is Tolunay Yaşar (PatientPort, sole proprietorship; tax no. 9391154565, Düden Tax Office; Kepez/Antalya, Türkiye) ("PatientPort"). The postal address for legal notices is shared on written request. Contact: info@patientport.com.tr.

Which personal data do we process?

When you contact us through the demo request form, by email or by phone:

Identity details: first name, last name
Contact details: email address, phone number
Professional data: your clinic, city and the plan you are interested in
Request and security data: notes and correspondence you send us; your IP address when the form is submitted, to prevent abuse

For which purposes do we process it?

To reply to your demo and information request
To find the right plan for you and prepare an offer
To carry out talks before a contract
To meet our legal obligations

Legal basis and how we collect data

Your data is collected through the website form, e-mail and phone and processed under KVKK Article 5/2 (c) (directly related to concluding or performing a contract) and (f) (necessary for our legitimate interest). Google Analytics statistics cookies, and the related transfer abroad, rely only on your explicit consent ("Accept" in the cookie notice); you can withdraw it at any time via the link in the Cookie Policy.

Who do we share it with?

Your data may be shared only for the purposes above and only as needed with our service providers: Vercel Inc. (hosting, Frankfurt region), Supabase Inc. (database; IP log to prevent abuse, Frankfurt), Resend Inc. and Brevo SAS (e-mail delivery) and, only if you accept cookies, Google LLC (Google Analytics). Some of these providers are based in the United States; transfers abroad are made under KVKK Article 9 on the basis of the providers' standard contractual clauses and, for statistics cookies, your explicit consent. Your data is never sold or shared for advertising.

How long do we keep it?

Correspondence about your request is kept for 2 (two) years after the conversation ends, and then deleted or anonymised.

Your rights

Under KVKK Article 11 you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties in Türkiye or abroad to whom it is transferred, to request rectification if it is incomplete or inaccurate, to request erasure or destruction under KVKK Article 7, to request that these actions be notified to the third parties to whom the data was transferred, to object to a result against you arising solely from automated analysis, and to claim compensation if you suffer damage due to unlawful processing.

You can send your requests to info@patientport.com.tr; a postal address for written requests is provided on request via this e-mail. Requests are answered free of charge within 30 days at the latest under the Communiqué on the Procedures and Principles of Applications to the Data Controller; we may ask for additional information to verify your identity. If your request is rejected, you find the answer insufficient or no answer is given in time, you may complain to the Turkish Personal Data Protection Authority (KVKK).

About clinic patient data

For the data of patients of clinics using the PatientPort platform, the relevant clinic is the data controller; PatientPort processes this data on the clinic's behalf (data processor). Notice for patients: Patient Privacy Notice and Explicit Consent. Details are in the Privacy Policy.

Effective and last updated: 13 October 2026