Privacy policy
Last updated: October 2026
1. Controller
Dr. med. dent. Hasan Coşkun, LHC Clinic, Çobançeşme, Sanayi Cd. No:60 İç Kapı No:57, Bahçelievler / Istanbul, Türkiye · Phone/WhatsApp: +90 534 704 61 42
2. Enquiry form and X-rays
When you use the form, we process your details (name, phone, email, preferred contact channel, type of treatment) to answer your enquiry and prepare a possible treatment (Art. 6(1)(b) GDPR). X-rays and information about your dental situation are health data. We process them solely on the basis of your explicit consent (Art. 9(2)(a) GDPR, Art. 6(2) KVKK) for Dr. Coşkun’s initial dental assessment. Providing them is voluntary; without an X-ray we can start with a video call.
3. Storage, access and deletion
Enquiries and X-rays are stored encrypted with our processor Supabase Inc.; X-rays are kept in a non-public storage area and can only be accessed by Dr. Coşkun and his practice team via time-limited, password-protected access. X-rays are deleted automatically after 12 months, incomplete uploads after 24 hours. If treatment takes place, the statutory retention periods for patient records apply.
4. Transfers to Türkiye and other third countries
Dental assessment and treatment take place in Istanbul (Türkiye). There is no EU adequacy decision for Türkiye. Your enquiry and – with your consent – your health data are transferred to Dr. Coşkun because this is necessary for the assessment and treatment you request (Art. 49(1)(b) GDPR) and on the basis of your explicit consent (Art. 49(1)(a) GDPR). Possible risk: the level of data protection in Türkiye differs from the EU; processing there is subject to the Turkish data protection law KVKK. US-based providers (Vercel, Supabase, Anthropic) rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
5. Digital assistant (AI)
The optional chat assistant answers general questions. Your messages are sent to Anthropic PBC (USA) to generate replies and stored with Supabase for quality assurance. Please do not share health data in the chat. Contact details are only passed on if you explicitly confirm this in the chat (Art. 6(1)(a) and (b) GDPR). The assistant does not replace an examination.
6. WhatsApp
If you contact us via WhatsApp, WhatsApp (Meta Platforms Ireland Ltd.) processes your messages and metadata under its own terms; message contents are end-to-end encrypted. Using WhatsApp is voluntary – you can also reach us via the form or by phone. Please preferably send X-rays via the form.
7. Hosting
This website is hosted by Vercel Inc. (USA). When you visit, technically necessary data (incl. IP address, time, page requested, browser information) is processed in server log files to deliver the website securely (Art. 6(1)(f) GDPR).
8. Analytics
We use Vercel Web Analytics and Speed Insights without cookies and without cross-device profiles; visitors are counted using a daily-changing anonymised hash (Art. 6(1)(f) GDPR). Fonts are loaded locally; there is no connection to Google.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw any consent at any time with effect for the future. Please use the contact details above. You may also lodge a complaint with a data protection supervisory authority, in particular in your country of residence.