Skip to main content

Cookie preferences

Choose which cookies we may use. You can change your choice at any time from the Cookie preferences link at the bottom of every page.

Cookie policy

Klinikbook
Try it free

Main navigation

EN
Try it free
Sign inBook a demo
Glossary

Privacy notice

Definition

A privacy notice (aydınlatma metni) tells people, when their personal data is collected, who the data controller is, why and on what legal basis the data is processed, who it may be shared with and what their rights are.

On this page

What must a privacy notice contain?

Article 10 of KVKK requires the data controller to inform people when it obtains their personal data. Under the Communiqué on the Procedures and Principles for the Obligation to Inform, this does not depend on the person asking, must be done in clear and plain language, and the controller must be able to prove it was done. Purposes must be specific and explicit, without vague, catch-all wording.

The minimum content

  • The identity of the controller and of any representative
  • The purposes for which the personal data will be processed
  • To whom, and for what purpose, the data may be transferred
  • How the data is collected and the legal basis for collecting it
  • The person's rights under Article 11 of the law

Is a privacy notice a consent form?

In principle decision 2026/347 of 18 February 2026, the Personal Data Protection Board asked controllers to keep the privacy notice and the explicit-consent text as separate texts under separate headings.

Where processing does not rely on explicit consent, no consent text should be offered and people should not be asked to approve the notice; at most, they confirm that they have read it. Copying another organisation's text word for word is among the mistakes the Board warns against.

Compliance center: the privacy notice and consent texts published in Turkish and English, data requests with their due dates, the retention policy and support access.
The privacy notice in the compliance centre: the version published on the portal and the booking page, forms and portal it is linked from.Real product screen · fictional sample data

Sources

  1. Law No. 6698 on the Protection of Personal Data (Turkish text) — Mevzuat Bilgi Sistemi, Official Gazette, 7 April 2016
  2. Communiqué on the Procedures and Principles for the Obligation to Inform (Turkish text) — Official Gazette, 10 March 2018
  3. Announcement on principle decision 2026/347: consent and privacy notice texts kept separate (Turkish) — Personal Data Protection Authority (KVKK), 24 March 2026

Related reading

30-day free trial

Try Klinikbook with your own team

Every feature is open for 30 days, and no card is needed to start.

Start free 30-day trialBook a demo