Last updated: 16 September 2026
Who handles your information?
Serinsey Sağlık ve Turizm Hizmetleri Ltd. Şti. is an intermediary that handles patient enquiries and arrangements. Özel Serin Ağız ve Diş Sağlığı Hizmetleri Ltd. Şti. provides dental treatment. Each organisation is responsible for the processing it determines. Enquiry and coordination records are distinct from the clinical records managed by the treating provider.
This notice covers personal information received through serinsey.com and the communication channels used to arrange dental care. You can contact the patient-coordination team about this notice at info@serinsey.com or +90 530 250 65 82 and ask for your request to be directed to the relevant organisation.
Treatment location: Bağlarbaşı, Feyzullah Cd. No:140, 34843 Maltepe/İstanbul, Türkiye.
Information received
The information involved depends on what you ask us to do:
- Enquiries: your name, phone number, email, country, preferred language, treatment interests and the messages you send.
- Assessment and care: dental photographs, X-rays, symptoms, relevant medical history, examination findings, treatment plans, consent records and aftercare correspondence.
- Appointments and payments: booking details, quotations, invoices, payer details and payment references.
- Travel coordination: the details necessary for accommodation or transfers you request, where these services are being arranged.
- Website use: technical information such as IP address, device/browser details, pages visited and interactions collected through website logs, cookies or similar technologies.
Information can come directly from you through web or advertising enquiry forms, telephone, email, WhatsApp or a clinic visit. It can also come from someone acting on your behalf or a referring healthcare professional where appropriately authorised. Records may be created electronically or in written patient and administrative files.
Please send only information relevant to your request. Do not send full payment-card numbers or card security codes by email or messaging.
Purposes and legal grounds
Turkish Personal Data Protection Law No. 6698 (KVKK) requires a legal basis for each processing activity. The basis depends on the information and purpose:
- Answering an enquiry and arranging requested services: necessary steps relating to establishing or performing a contract under Article 5(2)(c), where applicable.
- Clinical assessment, treatment and care: the applicable condition for special-category information under Article 6, including necessary healthcare processing by authorised persons or institutions subject to confidentiality. An intermediary cannot assume that every clinical-provider exemption applies to its own processing; separate explicit consent is required where no other applicable condition permits the activity.
- Billing and required records: applicable legal obligations under Article 5(2)(ç) and relevant statutory requirements.
- Legal claims and disputes: establishing, exercising or protecting a right under Article 5(2)(e), with the applicable Article 6 condition where health information is involved.
- Necessary technical security: legitimate interests under Article 5(2)(f), provided these do not override your fundamental rights and freedoms.
- Optional promotional messages, publicity photographs or non-essential tracking: separate consent where required, rather than consent inferred from a treatment enquiry or from reading this notice.
This notice is an explanation of processing, not blanket consent. It does not replace the informed consent needed for clinical treatment.
Dental photographs and other health information
Health information is especially sensitive. Clinical information is used for the assessment, care and associated administration for which it was provided, subject to the applicable legal basis.
Sending a photograph for assessment does not, by itself, authorise its publication on a website, in advertising or on social media. Proposed promotional use requires a separate appropriate legal basis and specific consent where required. Choosing not to take part in optional publicity must not prevent access to treatment.
Communication systems and automated assistance
WhatsApp Business through respond.io and Zoho CRM are used to receive enquiries, organise follow-up and allocate enquiries to team members. The communication workflow also uses Google Gemini-based automated assistance to process messages and may process submitted images or audio where those features are used.
Automated messages can support communication but do not, by themselves, establish a final clinical diagnosis, treatment plan or confirmed booking. You can ask to speak to a member of the team. Your treating dentist is responsible for the clinical assessment and treatment decision.
These technology providers have their own service and data-processing arrangements. Information about the providers involved in your interaction and the applicable processing arrangements can be requested from the contact above. This notice does not imply that contacting us is permission for unrelated AI training or marketing.
Recipients and international processing
Relevant information may be received by:
- authorised personnel of the intermediary and treating provider for the roles described above;
- dental professionals and laboratories involved in an assessment or authorised treatment;
- hosting, communications, customer-record, payment, accounting and other necessary support providers;
- accommodation or transfer providers, limited to the information necessary for services you request;
- competent authorities where disclosure is required by law, or relevant advisers where necessary to protect legal rights.
Only the information needed for the particular purpose should be shared. For example, arranging a transfer does not require sharing your full dental or medical history.
Some technology services involve processing outside Türkiye. Such processing is subject to Article 9 of KVKK and any other applicable data-protection rules. You may request details of the recipients, destination countries and the actual safeguards or legal mechanism used for the transfers relevant to you. Use of an overseas service does not remove either organisation’s data-protection responsibilities, and browsing this website is not blanket consent to international transfers.
Cookies and external services
The website uses Google analytics/tag-management and Meta advertising technology for site measurement and advertising-related activity. Cookies and similar identifiers may be involved. Necessary technical cookies can also support the website’s basic operation.
Non-essential tracking that requires consent must be covered by a separate, active choice. Merely continuing to browse is not explicit consent. Your browser can be used to manage or delete stored cookies, although browser settings do not replace consent controls required on the website.
If you follow a link to WhatsApp, Google Maps, a social network or another external service, that provider’s notice also applies to the information it processes through its service.
Retention and protection
Information is retained according to its purpose and applicable legal requirements. The relevant criteria include whether an enquiry remains active, whether treatment or aftercare is ongoing, required retention of clinical or accounting records, and whether the information is needed for a legal claim. Optional marketing records must also reflect withdrawal and suppression requests. You may ask the relevant organisation for the retention arrangements applicable to your records.
Information should be deleted, destroyed or anonymised when the lawful reasons for keeping it end. Withdrawal of optional consent does not require the deletion of a clinical or financial record that must still lawfully be retained.
Appropriate technical and organisational measures are required to protect information against unauthorised access, loss or misuse. Access should be limited to authorised people who need the information for their role; this notice does not promise absolute security of any website or messaging service.
Your rights and requests
Subject to KVKK’s conditions, you may ask whether personal information is processed and request information about the processing, purposes and recipients. You may seek correction and, where the legal conditions are met, deletion or destruction and notification of relevant corrections or deletions to recipients. You may object to an adverse result produced solely through automated analysis and seek compensation for damage caused by unlawful processing.
Send your request to the contact above and identify the relevant organisation and records where possible. We may need proportionate information to verify your identity and direct the request correctly. The responsible organisation must respond within the applicable legal period; under KVKK, this is generally no later than 30 days. Requests and complaints must follow the methods and procedures prescribed by applicable law. You may complain to the Turkish Personal Data Protection Authority where the relevant conditions are met.
Where EU or UK data-protection law applies to a particular activity, additional rights and requirements may apply, including restriction, portability, objection and complaint rights. Their application depends on the circumstances; this notice is not a statement that every activity is governed by the same regime.
Your choices and updates
Tell the team if you do not want optional marketing messages. Necessary appointment, billing and care communications are handled separately. Withdrawing consent does not affect processing lawfully carried out before withdrawal.
The current notice will be published on this page with its update date. A notice change alone cannot authorise a new purpose that requires your consent.