Privacy Policy

This policy has been prepared to explain the framework within which your personal data is processed when you visit the website operated by Muhammet Sadıç or contact us.

Types of Data That May Be Processed

• ·Identity and contact information
• ·Request and message content
• ·Transaction-security data
• ·Cookie and usage data
• ·Limited information related to the service-planning process
• ·Initial assessment form data: city, district, patient age group, main need/concern, mobility, surgery/diagnosis notes, phone and contact preference
• ·Health information shared in these fields (a special category of personal data under Article 6 of the KVKK)

Processing Purposes

• ·Managing communication and enquiry processes
• ·Ensuring website security
• ·Improving user experience
• ·Organising service-planning processes
• ·Fulfilling legal obligations

Service Providers and International Transfers

The recipients, countries, transferred data and legal grounds are listed in the KVKK Disclosure Notice. Transfers to these providers are treated as transfers abroad under Article 9 of the KVKK. In summary:

• ·Server and database: Contabo GmbH (Germany); the server is in the European Union. Stored requests, accounts and comments are kept here.
• ·Backups: Cloudflare, Inc. (USA) R2 service, European Union jurisdiction. Backups are encrypted by us before upload.
• ·Site traffic: Cloudflare, Inc. (USA). Connection encryption ends at Cloudflare and has no regional limit; traffic, including form content, may be processed outside the European Union.
• ·Initial assessment form notification: The city, phone, contact preference and admin page link are sent through Plus Five Five, Inc. (Resend, USA) to a Microsoft Corporation (Outlook/Hotmail, USA) mailbox and through a Telegram Messenger Inc. (abroad) bot to the operator's private chat. Message copies may be stored permanently by these providers outside the European Union.
• ·Age group, district and health information: After the November 2026 change, the age group, main need/concern, mobility, district and surgery/diagnosis notes are not included in these messages and are not sent to Resend, Microsoft or Telegram. They are kept in the database and its encrypted backups; the operator reads them only on a sign-in protected admin page that only an authorised account can open. They pass through Cloudflare in transit and may be visible at Cloudflare during transmission.
• ·Old notifications and records: Notifications sent before the November 2026 change also contained the age group, main need, mobility, district and diagnosis note; these copies may remain with the providers until they are deleted. Form records, comments and account details created before the November 2026 server migration are kept for at most 30 days after the migration in Supabase's database in Sydney (Australia) for rollback, and are then deleted.
• ·WhatsApp: If you choose WhatsApp, your phone number and messages are processed through WhatsApp (Meta).
• ·Sign-in: Google LLC (USA) is used for sign-in with Google; for email sign-in, the sign-in link is sent through Resend.
• ·Measurement: Google Tag Manager and Google Analytics are provided by Google LLC (USA); see the Cookie Policy for details.

Browser Extension (Mola Hatırlatıcı – FizyoArt)

The following applies to the "Mola Hatırlatıcı – FizyoArt" extension, which runs in the Chrome and Microsoft Edge browsers:

• ·The extension does not collect or store personal data and does not share it with third parties.
• ·The extension does not send network requests to any server; it contains no analytics or tracking tools.
• ·Only two settings (whether reminders are on or off, and the reminder interval) are kept in your browser's local storage; these settings are not synced and are deleted when the extension is removed.
• ·Whether the computer is active, idle or locked is read momentarily, solely to decide when a reminder should be shown; it is not recorded.
• ·The links in the extension window and the button in the reminder notification open this website with the utm_source=browser_extension tag. When you visit the website this way, your visit is processed within the framework described in this policy and in the Cookie Policy; the tag only serves to distinguish that the visit came from the extension.

Data-Subject Rights

Under Article 11 of the KVKK, data subjects may exercise rights including access, rectification, erasure/destruction, learning about processing purposes and transfers, objecting to automated processing, and seeking compensation in the event of damage.

Contact

• ·Data controller: Muhammet Sadıç
• ·Address: Levazım Mah. Koru Sk. No:2 Floor 18, Zorlu Center, 34340 Beşiktaş/Istanbul, Türkiye
• ·Email: [email protected]
• ·Phone: +90 554 025 62 12