GDPR & Privacy Policy | Orthodontics Community

Privacy Sections

1. Data Controller 2. Categories of Data 3. Sensitive Health Data 4. Processing Purposes 5. Data Transfers 6. Data Subject Rights 7. Contact & Inquiries

Article 1

Data Controller Identity & Representation

In accordance with the General Data Protection Regulation ("GDPR") and applicable global privacy laws, Ortodonti TR ("Company", "Ortodonti TR", "we", "us") acts as the Data Controller regarding personal data processed across ortodonti.tr.

Data Controller: Ortodonti TR Inc.

Web Domain: ortodonti.tr

Data Protection Officer (DPO): kvkk@ortodonti.tr

Article 2

Categories of Processed Personal Data

Ortodonti TR processes the following categories of data strictly within legitimate legal boundaries:

Identity & Account Data: Username, optional public display name, year of birth, registration timestamp.
Contact Data: Verified email address (for account recovery, system alerts and optional notifications).
Professional Verification Data (Doctors & Clinics): Medical license/diploma registration, clinical specialty, institutional affiliation.
Technical & Security Logs: IP address timestamps, user-agent details, session security tokens for abuse prevention.

Article 3

Special Category Health Data & Anonymity

Explicit Consent and Community Pseudonyms:

Dental, aesthetic, surgical, or health inquiries published by users on our community forums constitute special category personal data under GDPR Article 9. These data points are processed exclusively on the basis of your explicit consent and voluntary public disclosure.

Ortodonti TR strongly recommends using a pseudonym instead of your real legal name. Members retain the right to edit, anonymize, or permanently redact their medical narratives at any point.

Article 4

Purposes and Legal Grounds of Processing

Facilitating member registration, user authentication, and profile management.
Publishing public health questions, doctor peer-reviews, and community replies.
Generating automated AI preliminary health assessments requested by the user.
Complying with statutory cybersecurity, server logging, and anti-fraud mandates.
Preventing medical spam, malicious astroturfing, and abusive impersonation.

Article 5

Data Sharing & International Transfers

We never sell, rent, or monetize your personal health data to third-party advertisers or insurance brokers. Data is only disclosed to judicial authorities or regulatory law enforcement agencies pursuant to valid, binding legal subpoenas or court orders.

Article 6

Your Privacy Rights (GDPR & Global Standards)

Under GDPR Chapter III, all Ortodonti TR users possess the following enforceable rights:

Right of Access: Request confirmation and copies of your processed data.

Right to Rectification: Correct inaccurate or outdated details.

Right to Erasure ("To be Forgotten"): Delete your account and personal logs.

Right to Restriction: Limit processing under contested circumstances.

Right to Data Portability: Receive your questions and replies in structured format.

Right to Withdraw Consent: Revoke processing authorization at any time.

Article 7

DPO Inquiries & Exercising Your Rights

To exercise any of your privacy rights or submit inquiries regarding your data, please contact our Data Protection Office directly at kvkk@ortodonti.tr. All verified requests will be addressed free of charge within 30 days.