Last updated: 29 September 2026
1. Who we are
Panorama Hair Turkey Transplantation Center ("Panorama Hair Turkey", "we", "us") is the data controller for personal data collected through panoramahairturkey.com. Address: Kartaltepe, Sefaköy Torkam, Süvari Cd., 34295 Küçükçekmece / İstanbul, Türkiye. E-mail: [email protected] · Phone: +90 533 763 49 01.
We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors from the European Economic Area, the United Kingdom and Switzerland, the EU General Data Protection Regulation (GDPR).
2. What data we collect
- Contact and enquiry data – name, e-mail address, phone / WhatsApp number, country and your message when you fill in a consultation form or contact us.
- Online hair analysis data – the photos of your scalp and the answers you provide (e.g. hair loss history). This may qualify as health data and is processed only with your explicit consent.
- Treatment and travel data – appointment dates, travel and accommodation details and treatment information if you become our patient.
- Technical and usage data – IP address, browser and device information, pages visited, referral source and advertising click identifiers, collected through cookies and similar technologies (see section 6).
3. Why we use your data and legal basis
- To answer your enquiry, prepare a personalised treatment plan and price offer, and organise your appointment – steps taken at your request before entering into a contract / performance of a contract.
- To evaluate your hair analysis photos and health-related information – your explicit consent.
- To comply with legal obligations such as medical record keeping and tax rules – legal obligation.
- To measure website performance and improve our services (analytics) – your consent.
- To show relevant advertising and measure the results of our ad campaigns – your consent.
4. Who we share data with
We do not sell your personal data. We share data only where necessary with: our medical team and staff; service providers who host our website, e-mail and messaging systems; transfer, hotel and interpreter partners involved in your treatment journey; analytics and advertising partners (Google, Meta) when you have given consent; and public authorities where required by law.
5. International transfers
Some of our service providers (for example Google and Meta) may process data outside Türkiye or your country. Such transfers are made on the basis of your explicit consent and/or appropriate safeguards such as standard contractual clauses.
6. Cookies and similar technologies
We use the following categories of cookies:
- Strictly necessary – required for the website to work and to remember your cookie choices. These cannot be switched off.
- Analytics – Google Analytics 4 helps us understand how visitors use the site (pages viewed, time on site, traffic sources). Loaded only with your consent.
- Marketing – Google Ads, Google Tag Manager and, where used, Meta (Facebook/Instagram) Pixel, TikTok and Microsoft Advertising tags measure ad conversions and allow us to show you relevant ads. Loaded only with your consent.
We use Google Consent Mode v2. If you decline analytics or marketing cookies, Google tags do not store cookies on your device; they may send cookieless, anonymous signals that Google uses for aggregated modelling. You can change or withdraw your consent at any time via the cookie settings link at the bottom of the website or by clearing your browser cookies. More information: How Google uses data from sites that use its services.
7. How long we keep data
Enquiry data of people who do not become patients is kept for up to 2 years after our last contact. Patient and treatment records are kept for the periods required by health legislation. Analytics data is retained for up to 14 months.
8. Your rights
Under KVKK Article 11 and GDPR you have the right to: learn whether your data is processed and request information; access and receive a copy of your data; request correction or deletion; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); and lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.
To exercise your rights, e-mail [email protected]. We will respond within 30 days at the latest.
9. Security
We use appropriate technical and organisational measures, including encrypted (HTTPS) connections and restricted access, to protect your data.
10. Changes
We may update this policy from time to time. The current version is always published on this page with its update date.