KVKK Privacy Notice

1. Data controller

Your personal data is processed by fiztherapy, whose contact details appear on the contact page of our website, acting as data controller.

2. Personal data processed

• Identity data: first and last name.
• Contact data: phone number, email address.
• Appointment and service data: chosen service and practitioner, date and time, notes you share.
• Health data (special category): processed only with your explicit consent and to the extent the service requires, within assessment and session records.
• Transaction security data: IP address, session information.

3. Purposes of processing

• Managing appointment processes and communication.
• Planning and delivering physiotherapy and exercise services.
• Carrying out finance and accounting work and fulfilling legal obligations.
• Running information security processes.
• Information and marketing activities, where you have given explicit consent.

4. Legal grounds

Your personal data is processed on the grounds in Article 5 of the KVKK — being directly related to the establishment or performance of a contract, fulfilment of the data controller's legal obligations and legitimate interest; your health data is processed on the basis of your explicit consent under Article 6.

5. Transfers

Your personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK, to infrastructure and software suppliers necessary to deliver the service (hosting, database, email service) and to legally authorised institutions.

6. Method of collection

Your data is collected electronically or physically through the booking and contact forms on our website, by phone, WhatsApp and in face-to-face meetings at the studio.

7. Your rights (KVKK Art. 11)

• To learn whether your personal data is processed and to request information.
• To learn the purpose of processing and whether data is used in line with it.
• To know the third parties to whom data is transferred.
• To request correction of incomplete or inaccurate data.
• To request erasure or destruction under the conditions in Article 7.
• To object to an outcome against you produced by automated analysis.
• To claim compensation for damage caused by unlawful processing.

8. Applications

You may submit requests concerning your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to the email address on our contact page or in writing to our studio address. Applications are concluded free of charge within 30 days at the latest.