Privacy Policy
Last Updated: July 2, 2026
This privacy policy has been prepared to inform users about the security, privacy, and full compliance of the data collected, processed, and stored via the official website managed by hrsankara.com, Özel HRS Ankara Hastanesi corporate systems, and the Özel HRS Hastanesi – Randevu (com.hrsankara.app) mobile application (collectively referred to as "Digital Infrastructure and Services") with the Personal Data Protection Law (KVKK) No. 6698, T.C. Ministry of Health regulations, and Google Play & Apple App Store developer policies.
1. Data Categories and Limitation Principle
Through our digital services, data is processed at a minimal level solely to manage the appointment processes (booking, viewing, canceling, updating) of our patients and to complete the statutory notifications of the T.C. Ministry of Health:
- Identity & Contact: T.R. Identity Number, Name-Surname, Date of Birth, Phone, E-mail.
- Medical Data: Requested branch, physician, and appointment history information.
- Technical Data: Device model, operating system version, and unique device identifiers for application optimization (not used for advertising or tracking purposes).
2. Server Infrastructure and Security
Your data is not stored in cloud or uncontrolled third-party servers, but in areas compliant with regulations:
- USS and e-Nabız Integration: Medical data is directly transferred to the T.C. Ministry of Health central servers (USS) with encrypted integration as required by law.
- Corporate Local Servers (On-Premise): Data is stored on our institution's local servers, closed to external networks and physically secured.
- End-to-End Cryptography: All data flow between mobile and web services is encrypted with HTTPS and at least TLS 1.3 protocols.
- Access Authorization (2FA): System administrator and personnel access are restricted by Two-Factor Authentication mechanisms.
3. Third-Party Ban and Data Trading
Our clear commitments under Apple App Store Data Use (Rule 5.1.3) and Google Play User Data policies:
No health, appointment, or personal data obtained through the application and website can be transferred to advertising companies, used in data-mining processes, or sold or transferred to third parties for user profiling purposes. There are no third-party ad trackers in our systems.
4. Account Closure and Permanent Data Deletion
In accordance with Google Play and Apple App Store account deletion directives, our users are also granted the right to close their application accounts and delete their data via the web:
Users can permanently delete their membership accounts and the digital data linked to the application from the relevant menu within the mobile application or by directly filling out the contact form at hrsankara.com/iletisim (specifying the account deletion request in the message content).
*Note: Official medical archives and patient record files, which are mandatory to be kept in accordance with T.C. Ministry of Health regulations, are exempt from this deletion request and will continue to be retained for the legal period.
