Personal Data Protection Notice

This Notice has been prepared, within the scope of the Personal Data Protection Law No. 6698 (the “Law”), to inform individuals who visit the website www.ozgunemreyaylaci.com and/or who seek information, get in touch or request a reply through the contact channels about the processing of their personal data.

1. Data Controller

Your personal data is processed by the person whose details are given below, in their capacity as data controller:

Data Controller: Özgün Emre Yaylacı
Website: www.ozgunemreyaylaci.com
Email: psk.ozgunyaylaci@outlook.com
Telephone: +90 537 370 31 15
Address: Applications are received via the email address.

2. Scope of the Notice

This text applies to persons who visit the website, persons who fill in the contact form, persons who send emails and persons who request information by telephone.

The content on the website is for general information purposes. Applications made through the contact form or other contact channels are not intended as a direct psychological assessment, diagnosis, treatment or emergency intervention.

This Notice also applies to the appointment app offered to existing clients; the details are set out in the section “Appendix: Appointment App” at the end of this page.

3. Personal Data Processed

The following personal data may be processed through the website and the contact channels:

Identity data: Name, surname or identity information shared by the person themselves.

Contact data: Telephone number, email address and other information shared for communication purposes.

Request and transaction data: Message subject, message content, contact request, reply records and correspondence content.

Website usage and transaction security data: IP address, date and time of access, browser information, device information, pages visited, technical log records and cookie records.

Important note on special categories of personal data: The contact form on this website has not been created to collect special categories of personal data such as health information, psychological/psychiatric history, diagnosis, treatment history, medication use, reports, family history or similar data. For this reason, you are kindly requested not to share such information in the message field.

If, nevertheless, special categories of personal data are shared by you, such data may be evaluated only to the extent necessary for understanding your contact request and replying to you appropriately, and within the conditions set out in the Law.

4. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Receiving and evaluating contact requests,
• Replying to you,
• Providing information in line with your request,
• Carrying out the communication process,
• Ensuring that the website operates securely, properly and functionally,
• Carrying out information security processes,
• Preventing unauthorized access, misuse or unlawful acts,
• Fulfilling legal obligations,
• Establishing, exercising or protecting rights in the event of possible disputes.

5. Method of Collection and Legal Basis

Your personal data may be collected by electronic means, by automatic or partially automatic methods, through:

• The contact form on the website,
• Email,
• Telephone calls,
• Technical log records generated during your visit to the website,
• Cookies and similar technical tools.

Your personal data is processed on the basis of the following legal grounds set out in Article 5 of the Law:

• It being directly related to the establishment or performance of a contract,
• It being mandatory for the data controller to fulfill a legal obligation,
• Data processing being mandatory for the establishment, exercise or protection of a right,
• Data processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

With regard to special categories of personal data, the conditions set out in Article 6 of the Law and the necessary administrative and technical measures are taken into account.

6. Transfer of Personal Data

Your personal data may be shared, limited to the purposes stated above, with the following persons, institutions or service providers:

• Website hosting service providers,
• Email and communication infrastructure service providers,
• Website technical maintenance and support service providers,
• Information security and technical infrastructure service providers,
• Authorized public institutions and organizations in case of a legal obligation,
• Authorized professionals such as lawyers, financial advisors or consultants, where necessary.

Your personal data is not transferred to third parties for advertising, marketing or commercial sales purposes.

Within the scope of the website, email infrastructure or technical services used, the transfer of limited personal data abroad may arise due to the technical infrastructures of Microsoft Outlook, Google Analytics, Google reCAPTCHA and WhatsApp service providers. In such a case, the transfer is carried out within the conditions set out in Article 9 of the Law and solely so that the relevant service can be provided technically.

7. Retention Period of Personal Data

Your personal data is retained for the period necessary for the purpose for which it is processed.

Your personal data relating to contact requests may be retained for 6 months from the conclusion of the request.

Technical log records and records relating to website security may be retained for 6 months within the scope of the periods set out in the relevant legislation and information security requirements.

In the event of a legal dispute, personal data may be retained for the duration of the relevant limitation periods. When the retention period expires or the purpose of processing ceases to exist, personal data is deleted, destroyed or anonymized.

8. Cookies and Website Use

Mandatory cookies and technical records may be used on the website to ensure that it operates securely and properly.

9. Rights of the Data Subject

Under Article 11 of the Law, by applying to the data controller you have the right to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in accordance with that purpose,
• Know the third parties to whom it is transferred, domestically or abroad,
• Request correction if it is incomplete or inaccurately processed,
• Request deletion or destruction within the conditions set out in the Law,
• Request that the correction, deletion or destruction operations be notified to the third parties to whom the data has been transferred,
• Object to the occurrence of a result against you through analysis exclusively by automated systems,
• Request compensation for damages if you suffer harm due to unlawful processing.

You can submit your applications regarding these rights in writing by sending an email to psk.ozgunyaylaci@outlook.com.

In your application, you must clearly state your name, contact information and request. Applications are concluded as soon as possible depending on their nature, and at the latest within the statutory period.

10. Data Security

Appropriate administrative and technical measures are taken to prevent your personal data from being processed, accessed, transferred or lost unlawfully.

Within this scope, measures are applied such as website security, access restrictions, the use of strong passwords, the use of up-to-date software and plugins, the prevention of unauthorized access, and carrying out the necessary technical controls.

11. Updating of the Notice

This Notice may be updated in line with changes in legislation, changes in the technical tools used on the website, or changes in data processing procedures.

The current text is published at www.ozgunemreyaylaci.com.

Appendix: Appointment App (For Existing Clients)

This appendix applies to the appointment app used by persons who have previously met with the data controller and have been given a personal access code. The app is not offered publicly on the website; it is intended only for creating, changing and cancelling appointments and for receiving reminders. It is not intended for emergencies.

Data processed. The name or nickname given to you; your appointment dates and times and their status; the device key used to sign in to the app (a random value stored on your device; only its digest is kept on the server) and the time of last use; if you grant notification permission, your phone’s notification address; and the record that you accepted the consent text. The app has no field for therapy content, complaints, diagnosis or health information, and such information is not requested. Reminder notifications contain only the appointment time. To limit wrong code attempts, an irreversible digest of your IP address is kept for a short period (at most a few hours).

Purpose and legal basis. The data is processed solely to carry out the appointment service, to send appointment reminders and to keep the app secure. Because appointment information may indicate that psychological support is being received, this data is treated as special categories of personal data; the notice is shown the first time you sign in to the app and your consent is obtained. Notifications are sent only with your permission; you can turn the permission off at any time in your phone’s settings, and the app can also be used without notifications.

Transfer. Notifications are delivered through the notification service of your phone’s operating system or browser (Apple, Google, Mozilla or Microsoft). Because these services are located abroad, your notification address and the fact that a notification has been delivered may be processed by these service providers; the notification content is sent encrypted and cannot be read by them. By turning on notifications you give your explicit consent to this transfer; turning on notifications is not mandatory. App data is stored on the website’s hosting infrastructure and is not shared for advertising or marketing purposes.

Retention and deletion. Appointment records are deleted automatically 12 months after the appointment date. When your sessions come to an end, your record is archived and permanently deleted within 30 days. You can delete your data yourself at any time using the “Delete my data” option in the app.

Security and your rights. Access codes are single-use, time-limited and stored only as a digest; the connection is encrypted and the pages are closed to search engines. You can exercise the rights described in section 9 for this app data as well.