Privacy policy

This Privacy Policy explains how your personal data is processed when you visit the HekimBis website, fill in the contact or demo form, contact us by email or phone, or apply for a subscription. It is prepared in line with Türkiye's Personal Data Protection Law No. 6698 (KVKK) and related legislation. The mandatory information on processing is set out separately in the KVKK Privacy Notice; the two texts should be read together.

This policy does not cover patient and health data that clinics manage through HekimBis. For that data the clinic is the data controller; HekimBis acts as a data processor on the clinic's behalf, and that relationship is governed by the Data Processing Agreement.

For the website and commercial relationships, the data controller is the organization that operates this site. Its details are below; empty fields are not shown.

• Legal name: MTY Teknoloji A.Ş.
• Brand: HekimBis
• Address: Mersin Üniversitesi Teknopark (TechnoScope), 33110 Çiftlikköy, Yenişehir, Mersin, Türkiye
• Phone: +903246060923
• Email: [email protected]
• KVKK application email: [email protected]

Information you give us. In the contact and demo form: name, organization name, email, phone number, optionally city and specialty, organization type, your need and your message. When applying for a subscription: account details and the business details needed for invoicing.

Information generated automatically. The pages you visit on the site, browser and device type, approximate access time and request records kept for security. If you arrived through a campaign link, the source information in that link (such as the campaign name) and the first landing page; this is kept only in the campaign-source cookie.

Important note on health data. Website forms are not designed to collect patient health data. Please do not write diagnoses, test results or patient identity details in the message field. If such information is shared, it is deleted to the extent it is not needed and is not used for other purposes.

• Responding to your contact, demo and quote requests
• Setting up your subscription, invoicing you and providing the service
• Sending service-related notices (security, version, payment and account notices)
• Keeping the website and contact form secure and preventing misuse
• Understanding which campaign or source you came from (only when you arrive via a campaign link)
• Meeting legal obligations and protecting our rights in possible disputes
• Sending commercial electronic messages if you have given permission

Permission for commercial electronic messages is not a mandatory part of your service or request record; it is offered as a separate, optional choice in the form, and you can withdraw it at any time.

Your personal data is processed on the legal bases in KVKK Article 5: that it is directly related to the establishment or performance of a contract, that the controller must meet a legal obligation, that it is necessary to establish, exercise or protect a right, legitimate interest provided that it does not harm your fundamental rights and freedoms, and, where needed, your explicit consent. Which purpose rests on which basis is shown in detail in the Privacy Notice.

Your data is not sold. It may be shared only for the stated purposes and to the extent needed with the following recipient groups:

• Service providers acting on our behalf to deliver the service (for example hosting, email and message delivery, payment)
• The payment service provider for payments; your card details are not kept by us and are processed in the payment provider's secure environment
• Professionals under a duty of confidentiality, such as accountants, legal and audit advisers
• Authorized public bodies where legislation requires

If a service that requires transfer abroad is used, the conditions of KVKK Article 9 are applied and this is stated in the Privacy Notice.

Your data is kept for as long as needed for the purpose for which it is processed and for the periods set by relevant legislation; after that it is deleted, destroyed or anonymized. Retention periods are set by data class. For example, a contact request that has not led to a result is deleted after a reasonable period linked to the request, while invoices and commercial records are kept for the periods in tax and commercial legislation. See the Privacy Notice for the current retention details.

To protect your data against unauthorized access, loss, alteration and disclosure we apply technical and administrative measures: role-based access, activity records, encryption of communications, confidentiality obligations for employees and incident management procedures. No transmission method can provide absolute security, so we strongly ask you not to write sensitive information into forms. If a data breach occurs, the notifications required by legislation are made.

This site does not set cookies by default. Only when you arrive through a campaign link is a single first-party cookie set, to understand the source of your request. See the Cookie Policy for details.

Under KVKK Article 11 you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction if it is incomplete or incorrect; to request deletion or destruction under the conditions in legislation; to request that these actions be notified to third parties to whom data was transferred; to object to a result against you arising from analysis solely by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

You can send your applications by the methods in the KVKK Privacy Notice. Applications are concluded within thirty days at the latest. Your right to complain to the Personal Data Protection Authority is reserved; you can find information about the Authority on the KVKK website(opens in a new tab).

Our services are aimed at health organizations and professionals, not at people under eighteen. We do not knowingly collect data from children. If you notice that a child's data has been sent to us, please tell us and we will delete it.

Our site may contain links to sites outside our control. We are not responsible for the privacy practices of those sites; we recommend that you read their policies before following a link.

This policy may be updated in line with changes in legislation or our services. The current version number, effective date and last-update date appear at the start of the page. For significant changes, where possible, a separate notice is sent to your registered contact details.

For questions about this policy you can use these channels:

• Email: [email protected]
• KVKK applications: [email protected]
• Phone: +903246060923
• Address: Mersin Üniversitesi Teknopark (TechnoScope), 33110 Çiftlikköy, Yenişehir, Mersin, Türkiye