Version: 2.1 · Effective from: 24 September 2026
On the request form you can give three separate consents. None of them is pre-ticked, and none is a condition for making your appointment request. You can withdraw each consent at any time with effect for the future. How we process your data is explained in the Privacy Notice.
1. Consent to the processing of health data
In accordance with Art. 9(2)(a) GDPR (and the UK GDPR) and Art. 6 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK), I explicitly consent to the controller, Prof. Dr. Emin Ersoy, processing the following health data that I provide through the pre-assessment tool and the request form:
- my height, my weight and the body mass index calculated from them,
- related conditions I tell you about (for example type 2 diabetes, sleep apnoea, high blood pressure, joint pain),
- information about previous obesity surgery,
- health information I write in the free-text field,
- test results, endoscopy and imaging reports, discharge summaries, medication lists and documents about previous operations that I choose to send through the form, by WhatsApp or by email,
solely for the following purposes:
- to assess and handle my appointment request,
- to prepare for the examination,
- to reply to me through the contact channel I have chosen.
I also consent to these data being passed, if an examination takes place, to Kavacık Medikal Sağlık Hizmetleri ve Ürünleri Ticaret ve Sanayi A.Ş. (Medistate Kavacık Hastanesi), which will carry out the treatment, and to their being sent, without being stored on the website, via the web server in the Netherlands to the doctor's email service (Yahoo), the email service of the website's technical administration (Microsoft Outlook.com), the email system of the hospital's appointment office (Medistate, Turkey) and the request tracking sheet (Google Sheets), and being kept on their servers, including in the USA for the Yahoo, Microsoft and Google services (Art. 9(2)(a) and Art. 49(1)(a) GDPR). I have been informed that there is no adequacy decision of the European Commission (or of the UK Government) for Turkey; that neither the Netherlands nor the USA is among the countries for which the Turkish Personal Data Protection Board has issued an adequacy decision; and that in the USA access by public authorities may not be limited to the level of protection in the EU or Turkey and it may be harder for me to exercise my rights there (KVKK Art. 9(6)(a)).
I understand that these data will not be used for advertising, targeting or profiling, will not be passed to Meta, Google or any other advertising or analytics provider, and that my consent is not a condition for my appointment request.
I can withdraw this consent at any time by email to eminersoy@yahoo.com or through the "Withdraw consent" link on the website. Withdrawal does not affect the lawfulness of processing carried out before it; if treatment has begun, the hospital's statutory retention obligations remain unaffected.
2. Consent to advertising measurement with encrypted contact details
So that it can be measured which advertisement my request came from, and so that I am not shown irrelevant advertising, I consent to
my email address and phone number being irreversibly encrypted (hashed) using the SHA-256 method in my browser or on the server and, together with the information that I have made a request, the time of the request, the language and the campaign source, being sent to
- Google Ireland Ltd. / Google LLC (Google Ads, enhanced conversions) and
- Meta Platforms Ireland Ltd. / Meta Platforms Inc. (Conversions API)
and being processed by these companies, including in the USA (Art. 6(1)(a) GDPR; Art. 5(3) of the ePrivacy Directive as implemented in my country, in the UK the Privacy and Electronic Communications Regulations 2003; KVKK Art. 9(6)(a)).
I have been informed that:
- this transfer contains no information about height, weight, medical conditions or treatment;
- however, the fact that I have made a request on the website of a doctor specialising in general and obesity surgery may, when combined with other data held by these companies, allow conclusions to be drawn about my health;
- the transfer to the USA relies on the EU-US Data Privacy Framework (for the UK, its UK Extension); for visitors from outside the EU and the UK, the data may be processed in a country for which the Turkish Personal Data Protection Board has not found an equivalent level of protection; and these companies are subject to their own privacy policies.
My request will be handled in exactly the same way without this consent. After withdrawal, no further data will be sent; for data already sent, the companies' deletion procedures will be triggered.
3. Consent to information and promotional messages
I consent to Prof. Dr. Emin Ersoy sending me general health information, event notices, announcements and information about services by SMS, email, WhatsApp and telephone call to the phone number and email address I have given (Art. 6(1)(a) GDPR; Turkish Law No. 6563 on the Regulation of Electronic Commerce).
My consent will be recorded in the Turkish Message Management System (İleti Yönetim Sistemi, İYS). I can withdraw it at any time, free of charge and without giving reasons, through the unsubscribe link in each message, through İYS or by email to eminersoy@yahoo.com.
Appointment reminders and replies to my request are not covered by this consent; I will receive them even without it.