Privacy & KVKK Compliance Notice

1. Primary International & Statutory Accreditations

Under the provisions of Turkish Law No. 6698 on the Protection of Personal Data, the legal entity acting as Data Controller for all specialized diagnostic workflows, pre-admission dental evaluations, tele-dentistry assessments, and physical healthcare interventions conducted across hospital campuses is:

Ankara University Faculty of Dentistry (UNIANKADENT)

Institutional Registry: Ankara University Rectorate, T.C. Higher Education Council (YÖK)
Campus Address: Emniyet Mahallesi, İncitaş Sokak No: 8, 06560 Yenimahalle / Ankara, Türkiye
MERSIS / Corporate Identifier: 0070003504300016 · Central Health System Code: 06201

This notice applies to prospective, active, and past dental patients; accompanying legal guardians; international medical tourists requesting remote diagnostic estimations; and web users navigating our academic portal.

2. Categories of Personal & Clinical Health Data Processed

In order to deliver accredited surgical interventions, prosthodontics restorations, and orthodontic planning, our clinical faculty and digital information systems collect and process specific classes of information:

Identity & Civil Records: Full legal name, Turkish Identity Number (T.C. Kimlik No), Foreigner Identification Number (YKN), or Passport Number and Country of Origin for foreign nationals.
Contact & Logistical Data: Permanent residential address, mobile telephone contact, encrypted e-mail records, hotel or local temporary lodging addresses during international clinical stays.
Clinical & Radiological Special Category Data: High-resolution 2D Panoramic X-rays, 3D Cone Beam Computed Tomography (CBCT) DICOM files, intraoral 3D CAD/CAM optical scans, histological laboratory biopsy results, cephalometric tracings, systemic medical anamnesis (including anticoagulant regimens, diabetic markers, and bone density records), and longitudinal operative charts.
Financial & Billing Data: Official university cashier receipts, international wire confirmations, insurance pre-authorizations, and social security reimbursement classifications.
Cross-Border Medical Tourism Records: Flight itineraries, medical visa consultation notices, designated interpreter language preferences, and embassy referral documentation.

3. Legal Grounds & Purposes of Processing (KVKK Art. 5 & 6)

Pursuant to Articles 5 and 6 of Law No. 6698 and GDPR Articles 6 and 9, personal and special category data are processed under rigorous legal mandates without unnecessary infringement on individual liberties:

a) Preventive Medicine & Medical Diagnosis (Art. 6/3 KVKK)

Processing of sensitive health records is executed under statutory confidentiality by persons bound by professional medical secrecy (sworn faculty dental surgeons, licensed nurses, and clinical radiologists) for dental diagnostics, surgical care, and therapeutic management.

b) Statutory Mandates & Public Health Law

Compliance with the Basic Health Services Law No. 3359, Decree Law No. 663, and the electronic synchronization obligations of the Ministry of Health National Health Information System (SağlıkNET / e-Nabız).

c) Explicit Consent (Cross-Border Coordination & Tele-Consultation)

Obtained voluntarily when foreign patients request preliminary digital treatment estimations prior to traveling to Ankara, or when prospective patients request direct communication via encrypted instant messaging concierges.

This notice applies to prospective, active, and past dental patients; accompanying legal guardians; international medical tourists requesting remote diagnostic estimations; and web users navigating our academic portal.

4. Cross-Border Transfer of Medical Records for International Patients

As an internationally accredited teaching institution serving patients from the European Union, the United Kingdom, the Middle East, and North America, UNIANKADENT ensures strict compliance regarding the international transfer of records:

Personal data stored within UNIANKADENT on-premise PACS (Picture Archiving and Communication System) servers is hosted within the sovereign territory of the Republic of Türkiye. Medical files, implant batch certifications, and treatment summaries are transferred cross-border exclusively under the following verified frameworks:

Direct Subject Request: When an international patient explicitly instructs UNIANKADENT to dispatch digital radiography or histopathology records to their local general practitioner abroad.
Standard Contractual Clauses & Adequate Guarantees: Utilizing secure, encrypted point-to-point medical transmission protocols (TLS 1.3 / AES-256) adhering to KVKK Board Approved Undertakings and GDPR Chapter V stipulations.
Consular & Medical Evacuation Protocols: Coordination with foreign ministries or private health insurers with explicit, documented patient authorization.

5. Data Retention Periods & Security Measures

In accordance with Turkish Hospital Archive Regulations (Resmi Gazete No. 24547) and collegiate guidelines:

Primary Dental Patient Files: Retained for a mandatory statutory period of twenty (20) years from the date of the last active clinical procedure.
Radiological DICOM Archives: Preserved securely in digital format for twenty (20) years to facilitate longitudinal surgical audits and forensic reference.
Financial & Accounting Records: Retained for ten (10) years in compliance with the Turkish Tax Procedural Code (VUK).

Technical and administrative security protocols deployed at UNIANKADENT include network-isolated intranet dental imaging equipment, role-based granular permission matrices, ISO/IEC 27001 certified physical data centers, and multi-factor biometric authentication for all academic faculty staff accessing patient management suites.

6. Your Rights Under KVKK & GDPR (Access, Rectification, Erasure)

Every data subject whose information is recorded by UNIANKADENT is endowed with enforceable legal entitlements under Article 11 of the KVKK and Articles 15 through 22 of the GDPR:

Right to Learn

Inquire whether your personal and medical data is being actively processed.

Right to Access

Obtain certified copies of dental records, 3D scans, and clinical notes.

Right to Rectification

Request prompt correction of inaccurate, obsolete, or incomplete personal data.

Right to Restriction / Deletion

Request deletion or anonymization, subject to statutory healthcare retention laws.

*Note: Statutory healthcare retention rules take precedence over requests for total clinical erasure under Article 15/f of the Turkish Ministry of Health Personal Health Data Regulation.

Questions about this policy or wishing to exercise your data subject rights? Contact our Data Protection Compliance Desk at info@uniankadent.com or dpo@uniankadent.com.