Privacy Policy

1. Controller

Özel Apollon Ağız ve Diş Sağlığı Polikliniği (Apollon Dental Clinic), Ilıca Mah. Cumhuriyet Bulvarı A Blok No: 18/6, Kumköy, 07600 Manavgat / Antalya, Türkiye

Email: info@apollonclinic.de · Phone: +90 242 756 00 50

2. Hosting and server logs

When you visit our website, the web server automatically processes technical data (IP address, date and time, page requested, browser type, referrer). This data is required to operate and secure the website (Art. 6(1)(f) GDPR) and is deleted after 14 days at the latest.

Fonts and all other resources are served from our own server; no Google Fonts or other third-party services are loaded when you open a page. The only exceptions are the Meta Pixel (section 6), the Google Ads tag (section 7) and Google Analytics (section 8), which are loaded solely after you have given consent.

This website is operated by DEHOST İnternet ve Bilişim Teknolojileri Sanayi Ticaret Limited Şirketi, Türkiye; the servers are located in Istanbul, Türkiye. When you open the website, your IP address and the technical access data are processed directly on that server: they reach the site you requested directly and are not held anywhere inside the EU.

There is no adequacy decision by the European Commission for Türkiye (Art. 45 GDPR). We selected the provider with regard to technical and organisational security measures; for its data protection practices see the provider's international privacy policy: https://dehost.com.tr/uluslararasi-gizlilik-politikasi

3. Contact and appointment requests

If you use our contact or appointment form, we process the data you provide (name, email, phone, requested service, preferred date, message) to answer your enquiry and arrange an appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

If your message contains health data (e.g. complaints, previous treatments), we process these special categories of personal data on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by submitting the form and may withdraw at any time with future effect.

Enquiries are stored in our clinic system and deleted once communication is complete, at the latest 12 months after the last contact, unless treatment takes place. In that case the statutory retention periods for patient records apply.

So that no enquiry goes unanswered, we send ourselves a notification through the messaging service Telegram (Telegram FZ-LLC, Dubai, UAE). This notification contains no personal data: it only reports that an enquiry has arrived and links to our internal, password-protected system. Your name, contact details, the treatment you asked about and the content of your message are not transmitted to Telegram.

If you write to us by e-mail instead, your message is processed in our mailbox, which we operate through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as a processor. Google may also process data in the USA, relying on the standard contractual clauses and the EU-US Data Privacy Framework.

4. WhatsApp contact

Our website offers links to contact us via WhatsApp. Clicking opens WhatsApp on your device; only then is data transmitted to WhatsApp (Meta Platforms Ireland Ltd.) under WhatsApp's privacy policy. Use is voluntary — you can always reach us by phone or email instead.

5. Cookies and local storage

Technically necessary storage: your browser's local storage holds your cookie banner decision and, if you reached us through an advertisement, the campaign parameters of the address you opened. The legal basis is Art. 6(1)(f) GDPR.

Services requiring consent: the Meta Pixel described in section 6, the Google Ads tag in section 7 and Google Analytics in section 8 are only loaded after you have explicitly agreed in the cookie banner. If you decline, no script from these providers is loaded, no cookie is set, and nothing is transmitted to Meta or Google. You can change your decision at any time via the “Cookie settings” link in the footer.

6. Meta Pixel (Facebook and Instagram)

With your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG) we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It lets us measure whether our ads on Facebook and Instagram lead to page views, contact requests or appointment requests, and lets us show ads again to previous visitors (remarketing).

This transmits your IP address, browser and device information, the pages you open and the events triggered (page view, contact request, appointment request, WhatsApp click). Your name, contact details, the content of your messages and any findings or treatment records are not transmitted to Meta; Automatic Advanced Matching is switched off.

Because some page addresses name a treatment (a page about dental implants, for example), the page you open can indicate which treatment you are interested in. Health data within the meaning of Art. 9 GDPR may therefore be involved. This processing takes place solely on the basis of your explicit consent (Art. 9(2)(a) GDPR); without consent the pixel is not loaded.

Meta may link this data to your Meta account if you are logged in and use it for its own purposes; in that respect we and Meta are joint controllers under Art. 26 GDPR.

Processing involves a transfer to the USA. Meta relies on the European Commission's standard contractual clauses and on the EU-US Data Privacy Framework. Despite these safeguards, a level of protection fully equivalent to the European one cannot be guaranteed in every case.

You may withdraw your consent at any time with future effect via “Cookie settings” in the footer. For more information see Meta's privacy policy: https://www.facebook.com/privacy/policy

7. Google Ads (conversion measurement)

With your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG) we use the Google Ads conversion tag provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us measure whether an ad shown through Google led to an enquiry.

Without your consent no Google script is loaded and no cookie is set: consent is set to “denied” by default and is only switched after you agree.

This transmits your IP address, browser and device information, the page you open, the Google click identifier (gclid) and the event triggered. Your name, contact details and the content of your messages are not transmitted to Google. As described in section 6, the page you open can indicate which treatment you are interested in; this too rests on your explicit consent (Art. 9(2)(a) GDPR).

Processing involves a transfer to the USA. Google relies on the European Commission's standard contractual clauses and on the EU-US Data Privacy Framework. Despite these safeguards, a level of protection fully equivalent to the European one cannot be guaranteed in every case.

You may withdraw your consent at any time with future effect via “Cookie settings” in the footer. For more information see Google's privacy policy: https://policies.google.com/privacy

8. Google Analytics 4 (audience measurement)

With your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG) we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are opened and how visitors find us. Without your consent no Google script is loaded and no cookie is set.

This processes your shortened IP address, browser, device and approximate location, the pages you open and whether you sent an enquiry. Google Analytics shortens IP addresses before storing them. Your name, contact details and the content of your messages are not transmitted. As described in section 6, the page you open can indicate which treatment you are interested in; this too rests on your explicit consent (Art. 9(2)(a) GDPR).

Processing involves a transfer to the USA. Google relies on the European Commission's standard contractual clauses and on the EU-US Data Privacy Framework. The data is deleted automatically after 14 months.

You may withdraw your consent at any time with future effect via “Cookie settings” in the footer. For more information see Google's privacy policy: https://policies.google.com/privacy

9. Transfer to a third country

Our clinic is located in Türkiye, so your enquiry is processed in Türkiye. The transfer is necessary to carry out the pre-contractual measures you requested (Art. 49(1)(b) GDPR). We apply appropriate technical and organisational measures to protect your data.

The web server for this website is also located in Türkiye (section 2); in addition we use Google Workspace for email (section 3) and – only with your consent – the Meta Pixel (section 6), the Google Ads tag (section 7) and Google Analytics (section 8).

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may withdraw consent at any time.

To exercise your rights, contact info@apollonclinic.de. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority responsible for your place of residence.

11. Data security

Transmission on our website is encrypted (TLS/HTTPS). Access to enquiry data is limited to authorised clinic staff.

12. Changes

We update this policy when the legal situation or our processing changes. The version published on this page applies.