Privacy and data protection

Last updated: 9 August 2026

Who is responsible for your data

Santa Urology Andrology Clinic, Ihlamurdere Caddesi No. 84, Beşiktaş, 34353 Istanbul, Türkiye, acts as the data controller for the information described below. Questions, requests and complaints can be sent to consult@santaurology.com.

What we collect

• Identity and contact data — name, age, country of residence, email address, telephone or WhatsApp number, preferred language.
• Health data — the clinical history you submit, your medications, previous operative reports, imaging, device cards and laboratory results, and any clinical records generated by us during assessment, treatment and follow-up.
• Travel and logistical data — travel dates, passport details where a hospital admission or invitation letter requires them, hotel and transfer arrangements.
• Financial data — invoicing details. Card payments are processed by our bank and payment provider; we do not store full card numbers.
• Technical data — anonymous, aggregated page-view statistics. This site sets no advertising or tracking cookies and does not build a profile of you.

Why we process it, and on what legal basis

Health data is processed on the basis of your explicit consent, which you give when you submit the case review form and again when you sign a treatment agreement, and — once you are a patient — for the purposes of preventive medicine, medical diagnosis and the provision of healthcare, as permitted by article 6 of Turkish law no. 6698 (KVKK) and articles 6(1)(a) and 9(2)(a) and (h) of the GDPR.

Contact and logistical data is processed to perform the contract between us, and a limited set of records is retained to comply with legal obligations under Turkish health and tax law.

Who can see it

Your case review is read by the clinical team and by the coordinator assigned to you. Where you proceed to treatment, the necessary information is shared with the treating hospital, anaesthetist and laboratory, and — for prosthetic surgery — the device serial number is registered with the manufacturer in your name so that warranty and traceability follow you.

We do not sell your data, we do not share it with advertisers or lead-generation brokers, and we do not use it to build marketing audiences. We publish no testimonials, no case histories and no patient photography of any kind.

International transfers

Our systems are operated in Türkiye and in the European Economic Area. Where a transfer outside those jurisdictions is necessary — for example if you ask us to write to your own doctor abroad — it happens on the basis of your explicit consent or of appropriate safeguards.

How long we keep it

Enquiries that do not lead to treatment are deleted within twenty-four months. Patient records are retained for the period Turkish health legislation requires, currently twenty years from the end of treatment, because a prosthesis implanted today may need revision a decade from now and the operative record is what makes that revision safe.

Your rights

• To learn whether your data is processed, and to obtain a copy of it.
• To have inaccurate or incomplete data corrected.
• To request erasure, subject to the retention periods above where a legal obligation to keep clinical records applies.
• To withdraw consent at any time, without affecting processing carried out before you did.
• To object to processing, and to request restriction of it.
• To receive your data in a portable, machine-readable format.
• To complain to a supervisory authority — the Turkish Personal Data Protection Authority (KVKK), or your national data protection authority if you are in the EU or the UK.

Requests are answered within thirty days. Send them to consult@santaurology.com from the address you corresponded with, or by post to the address above.

Security

This site is served over HTTPS. Form submissions are transmitted encrypted and stored in access-controlled systems. Clinical records are held separately from marketing systems, with access limited to staff involved in your care. Correspondence uses a neutral sender name and subject line where you ask for it.

Cookies

We use no advertising, remarketing or cross-site tracking cookies. Only strictly necessary storage is used, plus anonymous aggregate page-view counting that cannot identify you. If that changes, this page will change with it and a consent banner will appear before any non-essential cookie is set.

Changes to this notice

Material changes are published here with a revised date. Where a change affects how we process health data you have already given us, we will contact you before it takes effect.