Privacy policy

How we collect, use and protect your personal data when you use this website or contact us.

Last updated: 2 November 2026

This policy explains how we handle personal data when you visit dentx.international or contact us about dental treatment in Istanbul. It covers what we collect, why, who receives it, how long we keep it and what your rights are.

1. Who is responsible for your data

The data controller is Dentix Ağız ve Diş Sağlığı Hizmetleri A.Ş., which operates the DentX International brand and this website.

Our clinics are in Istanbul (5. Levent, Küçükköy, Korupark and Başakşehir). DentX International also has offices in Dortmund (Germany), Marseille (France) and Valencia (Spain). These offices are contact points for patients. They are not separate data controllers.

We are based in Türkiye. Because we offer our services to people in the European Union, the EU General Data Protection Regulation (GDPR) applies to us under Article 3(2). We also comply with the Turkish Personal Data Protection Law No. 6698 (KVKK).

2. What data we collect

Consultation form

When you send the form on our website, we receive:

  • your name, country and phone number;
  • your email address, if you choose to give it;
  • the treatment you are interested in and your preferred language;
  • any photos, X-rays or PDF files of your teeth that you choose to upload;
  • the page address and website language from which you sent the form, so we can pass your request to the right team.

The form also contains a hidden field that helps us block automated spam. It does not collect information about you.

Photos, X-rays and dental documents are health data. We only process them with your explicit consent, which you give by ticking the consent box on the form. You do not have to upload them to receive a reply.

Other ways to contact us

You can also reach us by WhatsApp, phone or email. When you do, we process the information you share with us in the same way as a form enquiry.

  • WhatsApp: our WhatsApp links open the WhatsApp app or website. From that point, WhatsApp (Meta) processes your data under its own terms and privacy policy.
  • Calendly: if you book a video consultation, the booking is handled by Calendly. Calendly's own privacy policy applies to the data you enter there.
  • Google Maps: links to our clinic locations open Google Maps. Google only receives data if you click such a link.

Technical data

When you visit the website, our hosting provider records standard server logs: IP address, date and time, the page requested and your browser's user agent. We use these logs only to keep the site secure and working. The site sets no cookies and uses no analytics, advertising or tracking tools. See our Cookie policy for details.

3. Why we use your data and on what legal basis

  • Answering your enquiry and preparing a treatment plan and quote. This is a step you ask us to take before any contract (GDPR Article 6(1)(b)).
  • Reviewing photos, X-rays and dental documents. We rely on your explicit consent (GDPR Article 9(2)(a)), together with Article 6(1)(b).
  • Security logs. We have a legitimate interest in protecting the website against misuse and attacks (GDPR Article 6(1)(f)).
  • Medical records, if you become a patient. We keep these to meet our obligations under Turkish health legislation.

Under KVKK, we rely on the corresponding grounds in Articles 5 and 6 of Law No. 6698, including your explicit consent for health data.

4. Who receives your data

Form submissions are sent by email to international@dentx.com.tr. Your data is then seen only by people who need it to help you:

  • DentX patient coordinators;
  • the DentX International local representative for your country, who may contact you by WhatsApp or phone to coordinate your visit;
  • the dentists who assess your case and treat you.

We also use service providers:

  • Vercel Inc. (USA) hosts the website and runs the function that sends the form.
  • Upstash provides a database that stores the dates of our consultation days. It holds no visitor or patient data.

We do not sell your data and we do not share it for advertising.

5. International transfers

Our company and clinics are in Türkiye. Türkiye is outside the EU/EEA and has no EU adequacy decision. When you send us your data from the EU, it is transferred to Türkiye on these grounds:

  • your explicit consent, after being informed of the possible risks of a transfer to a country without an adequacy decision (GDPR Article 49(1)(a));
  • the transfer is necessary to carry out the steps you asked for before a contract, such as assessing your case and preparing a quote (GDPR Article 49(1)(b)).

Our hosting provider Vercel processes data in the USA. This transfer is covered by the EU–US Data Privacy Framework and by Standard Contractual Clauses.

6. How long we keep your data

  • Enquiries that do not lead to treatment: deleted 2 years after our last contact with you.
  • Patient records: kept for the periods required by Turkish health legislation.
  • Server logs: kept for about 30 days.

7. Your rights

You have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we use your data;
  • receive your data in a portable format;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time. This does not affect processing that took place before you withdrew it.

To use any of these rights, email international@dentx.com.tr. We will reply within one month. We may ask you to confirm your identity first.

You can also complain to the data protection authority in the EU country where you live or work (list of EU authorities), or to the Turkish Personal Data Protection Authority (kvkk.gov.tr).

8. Automated decisions

We do not make decisions about you by automated means alone. Every enquiry is read and assessed by people.

9. Children

This website is not directed at children under 16. If you want to arrange treatment for a minor, the parent or legal guardian should contact us.

10. Security

The website uses an encrypted HTTPS connection. Access to enquiries and patient data is limited to the people who need it for your care.

11. Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last updated.