Data controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data are processed by Asel Tıp Medikal (Istanbul) acting as data controller, within the scope described below. Contact: info@prohifu.com.tr
Which data are processed?
- Identity and contact data: full name, phone number, e-mail address, preferred contact channel, language.
- Health data (special category): your answers in the eligibility assessment form — diagnosis status, imaging, fibroid size and number, symptoms, pregnancy plans.
- Security data: an irreversible hash of your IP address, submission time, and the version of the form and of the consent text.
- Visit source: the page you first landed on, campaign parameters (utm) and, if present, the Google ad click ID (gclid). Kept in a first-party cookie and stored with your request if you submit a form; contains no health information.
- Measurement data: see “Cookies and measurement” below.
For which purposes and on which legal basis?
- Your health data are processed on the basis of your EXPLICIT CONSENT (KVKK art. 6/2) for a preliminary physician review of your eligibility for HIFU and for communicating the outcome to you. The form does not produce an automated medical result.
- Your identity and contact data are processed on the basis of your explicit consent so that we can contact you through your preferred channel.
- Security data are processed under KVKK art. 5/2(ç) and 5/2(f) to prevent misuse and to evidence your consent.
How are they stored and shared?
- Your health answers are stored encrypted in the database and are viewed only by the authorised physician and patient intake staff.
- When a form is submitted, the centre receives a notification e-mail containing only your name and contact preference; your health answers are never written into e-mail.
- Your data are not sold or shared for marketing. They may be disclosed to competent public authorities where legally required.
- Servers may be located outside Türkiye (within the European Union); in that case the transfer is carried out under KVKK art. 9.
For how long?
After your request is concluded, your data are retained for as long as legal obligations require and are then deleted or anonymised. You may request deletion at any time; upon request your identity and health data are deleted and only a statistical trace that cannot be linked to you remains.
Your rights (KVKK art. 11)
- To learn whether your personal data are processed and to request information
- To learn the purpose of processing and whether data are used accordingly
- To know the third parties to whom data are transferred, in Türkiye or abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction
- To object to a result against you produced by automated analysis
- To claim compensation for damage caused by unlawful processing
To exercise your rights, send your request to info@prohifu.com.tr. Requests are answered within 30 days at the latest.
Explicit consent
The checkbox you tick when submitting the eligibility form constitutes your explicit consent to the processing of your health data for the purposes described here. You may withdraw consent at any time by writing to the same e-mail address; withdrawal does not affect the lawfulness of processing carried out before that date.
Cookies and measurement
- Ad source record: the first-party “pf_attr” cookie keeps for 90 days which source brought you to the site (e.g. a Google ad, social media, a campaign). It is read only by this site and is not sent to third parties as a cookie.
- Analytics and ad measurement: when you visit the site, Google Analytics (“_ga”, “_ga_<id>”, up to 2 years) sets cookies to measure visit statistics, and Google Ads (“_gcl_au”, “_gcl_aw”, 90 days) to measure whether an ad click led to a request, call or WhatsApp contact on the site.
- Personalised advertising is always off. Your form answers, contact details and health data are never sent to Google Analytics or Google Ads.
- Google Analytics and Google Ads data are processed on servers of Google LLC (USA).
- Session recording: on ad landing pages, Microsoft Clarity anonymously records how the page is used (scrolling, clicks, mouse movement) and sets the “_clck” and “_clsk” cookies (up to 1 year). What you type into form fields is not recorded. Clarity data is processed on servers of Microsoft Corporation (USA).
- If you do not want these cookies, you can block or delete them in your browser settings; for Google Analytics you can use Google’s official opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking measurement cookies does not affect your use of the site. You can write to the contact address above with any questions.
This notice was last updated on 21 October 2026.
