Last updated: 15 September 2026. This notice describes what this website actually does with personal data. It is written under the Turkish Law on the Protection of Personal Data (KVKK, Law No. 6698) and, for visitors from the European Union and the United Kingdom, with the General Data Protection Regulation (GDPR) in mind.
Who is responsible
The data controller is Prof. Dr. Günter Hafız, Dikilitaş Mahallesi Hakkı Yeten Caddesi Selenium Plaza No:10 I/11, Fulya Sk., 34349 Beşiktaş/İstanbul. Questions about this notice and requests about your data can be sent to info@gunterhafiz.com or by post to that address.
Hosting and server logs
The website is hosted by Netlify, Inc. (San Francisco, USA). When you open a page, Netlify’s servers receive the technical data that every web request carries: your IP address, the page requested, the time, your browser type and the referring page. Netlify uses these server logs to deliver the site and to protect it against abuse, and keeps them for a limited time under its own retention rules. The legal basis is the legitimate interest in running a secure website (KVKK article 5/2-f; GDPR article 6(1)(f)). Because Netlify’s servers are outside Türkiye, this involves a transfer of data abroad.
The contact form
When you send the form, the following are transmitted to the practice: your name, your phone or WhatsApp number, your e-mail address if you give it, your message, the language of the page you used, and your consent tick. They are used for one purpose: to answer your request and, if you wish, to arrange an appointment. The legal basis is your explicit consent, which you give by ticking the box before sending (KVKK article 5/1; GDPR article 6(1)(a) and, for health information, article 9(2)(a)).
Messages often contain information about your health. Health information is a special category of personal data. Please send only what is needed to answer your question and keep detailed reports for the consultation.
Submissions are received and stored through Netlify Forms, on Netlify’s servers outside Türkiye, from where the practice reads them. By sending the form you consent to this transfer. The practice deletes a submission once your request has been handled and the information is no longer needed for it. A hidden field in the form catches automated spam; it is never shown to people and collects nothing about you.
Google Analytics (only with your consent)
This website uses Google Analytics 4, a service of Google Ireland Limited (Dublin, Ireland) and Google LLC (USA), to count visits and see which pages are read. Nothing is loaded and nothing is sent to Google until you choose “Accept analytics” in the cookie banner. If you decline, or do not choose, Google Analytics stays off; the site works exactly the same either way.
If you accept, Google Analytics sets two cookies on this website: _ga, which stores a random visitor identifier for two years, and _ga_JK9J7J9YCK, which stores the state of the current visit, also for two years. Google receives the pages you view, the time, your browser type, an approximate location derived from your IP address (Google Analytics 4 does not store the IP address), and, for clicks on WhatsApp buttons, the event name, the page and the language. No form contents and nothing you type are ever sent. Google may transfer this data to servers in the USA. The legal basis is your consent (KVKK article 5/1; GDPR article 6(1)(a)).
You can withdraw your consent at any time by choosing “Cookie settings” in the footer of any page and clicking “Decline”: Google Analytics is switched off and the two cookies are deleted. Your choice itself is remembered in your browser’s local storage under the name gh-consent, so that the banner does not return on every page; it contains only the word “granted” or “denied”.
Google Maps
The home page and the contact page show a map from Google Maps. The map loads from Google as soon as the page opens, so Google (Google Ireland Limited / Google LLC) receives your IP address and the technical data of the request, and may set its own cookies under Google’s privacy policy (policies.google.com/privacy). The legal basis is the legitimate interest in showing you where the practice is (KVKK article 5/2-f; GDPR article 6(1)(f)). If you prefer not to load the map, use the written address on the contact page.
WhatsApp, telephone and e-mail
If you write on WhatsApp, call, or send an e-mail, your data is processed by WhatsApp (Meta Platforms Ireland Limited), by your telephone provider, or by the e-mail providers involved, under their own terms. The practice uses the messages only to answer you and to arrange your visit.
What this website does not do
Beyond what is described above, this website uses no other cookies and no advertising or social-media trackers, and it loads its fonts from its own server. The only third parties are the ones named above: Netlify, Google (Analytics with consent, Maps) and, if you choose to use them, WhatsApp and e-mail.
Your rights
Under article 11 of the KVKK you may ask whether your data is processed, request access to it, ask for it to be corrected or deleted, object to its processing, and ask that third parties to whom it was transferred be informed. Under the GDPR you additionally have the right to data portability and to withdraw consent at any time. Requests can be sent to info@gunterhafiz.com or by post to the address above and are answered within the legal period. You may also complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) or, in the EU, to your national supervisory authority.
Changes
This notice is updated when the website or the law changes. The date at the top shows the current version.