Draft notice: This is a draft document. Legal counsel review is recommended before publication. It is intended to comply with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK), but must be reviewed by a qualified data protection professional for your specific operations.
Privacy Policy
Last updated: June 2026
Venti Hair & Dental (“we”, “us”, “our”) operates the website https://ventihairdental.com and provides hair restoration, dental and related medical aesthetic services in Istanbul, Türkiye. We are committed to protecting the privacy and security of the personal data of our patients, prospective patients and website visitors. This Privacy Policy explains what personal data we collect, how we use it, the legal bases for processing, and the rights you have over your data.
1. Data Controller
The data controller responsible for your personal data is Venti Hair & Dental, Istanbul, Türkiye. For any questions regarding this policy or your personal data, please contact us using the details in the “Contact Us” section below.
2. Personal Data We Collect
- Identity and contact data: name, surname, email address, telephone/WhatsApp number, country of residence.
- Health data (special category): medical history, photographs of the treatment area, information about your hair or dental condition, and other clinical information you provide for the purpose of treatment planning and consultation.
- Appointment and treatment data: consultation requests, treatment records, before/after documentation.
- Technical and usage data: IP address, browser type, device information, pages visited, and analytics data collected through cookies (see our Cookie Policy).
3. How We Use Your Data and Legal Bases
- To respond to your consultation and information requests — on the basis of your explicit consent and to take steps at your request prior to entering into a contract.
- To plan, provide and follow up on medical and dental treatment — on the basis of your explicit consent for the processing of health data and for the purposes of providing healthcare.
- To communicate with you regarding appointments, travel arrangements and aftercare.
- To comply with legal, medical and accounting obligations.
- To improve our website and services using analytics — only where you have given consent through our cookie banner.
Health data is a special category of personal data under the GDPR (Article 9) and “sensitive data” (özel nitelikli kişisel veri) under the KVKK. We process such data only with your explicit consent or where otherwise permitted by law for the provision of healthcare.
4. Patient Confidentiality
All clinical information and photographs are treated as strictly confidential. Access is limited to medical staff and personnel directly involved in your care. We will never publish your photographs or share identifiable health information for marketing purposes without your separate, explicit, written consent.
5. Sharing and International Transfers
We may share your data with medical personnel, partner clinics, laboratories, and travel/accommodation providers strictly as necessary to deliver your treatment. As our clinic is located in Türkiye, personal data of visitors from the European Economic Area may be transferred outside the EEA. Such transfers are carried out with appropriate safeguards and, where required, on the basis of your explicit consent. We do not sell your personal data to third parties.
6. Data Retention
We retain personal and health data only for as long as necessary for the purposes described above and to comply with applicable medical record-keeping and legal obligations, after which it is securely deleted or anonymized.
7. Your Rights
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Under the KVKK you also have the right to learn whether your data is processed and to request correction or deletion. You may also lodge a complaint with the competent supervisory authority (your local Data Protection Authority in the EEA, or the Turkish Personal Data Protection Authority — KVKK Kurumu). To exercise any of these rights, contact us using the details below.
8. Cookies and Analytics
Our website uses cookies and analytics tools (such as Google Analytics) to understand how visitors use our site. Non-essential and analytics cookies are only set after you give consent. For full details, please see our Cookie Policy.
9. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via the contact details provided on our Contact page or via WhatsApp at the number shown on our website.
