Nis · Clinic

Legal

KVKK Data Protection Notice

Information on how we process personal data submitted through our contact and appointment forms.

Last updated: 24 June 2026

1. Purpose and Scope

This notice has been prepared by Nis Clinic, acting as data controller, in accordance with the TRNC Personal Data Protection Law (No. 89/2007). It explains how we handle personal data collected through the contact and appointment forms on our website.

By completing and submitting a form, you confirm that you have read this notice and consent to your data being processed in accordance with the principles set out below.

For more detailed information, please visit our Privacy Policy page.

2. Data Controller

  • Name: Nis Clinic
  • Address: Ulus Sokak No:9, Gönyeli, Nicosia, Northern Cyprus (TRNC)
  • E-mail: [email protected]
  • Phone: +90 548 899 0808

3. Categories of Personal Data Processed

Data submitted through our forms is processed in the following categories:

  • Identity Data: First name, surname.
  • Contact Data: E-mail address, telephone number.
  • Request Data: Selected service or speciality, preferred appointment date and time, message content, notes.
  • Special Category Data (where applicable): Health information you may share within the form message or notes (e.g. previous procedures, chronic conditions, allergies). Such information is classified as special category data under the TRNC Personal Data Protection Law and is processed only with your explicit consent.

4. Purposes and Legal Basis for Processing

Your personal data is processed for the following purposes:

  1. Forwarding your enquiry to our clinical team and providing a response,
  2. Creating, confirming, and sending reminders for your appointment,
  3. Assessing which services may be suitable for you,
  4. Maintaining communication between you and the clinic,
  5. Fulfilling our legal obligations.

Legal bases (under the TRNC Personal Data Protection Law):

  • Processing is directly related to the establishment or performance of a contract (appointment and service agreement),
  • The legitimate interest of the data controller (maintaining communication, service quality),
  • For special category health data: your explicit consent, or processing under the applicable legislation for the purposes of medical diagnosis, treatment, and care.

5. Recipients and Purposes of Data Transfers

Your form data may be shared with the following parties only to the extent necessary:

  • Clinical doctors and staff: To review your request and manage your appointment.
  • Cloud e-mail and SMS providers: For appointment confirmations and reminders.
  • Authorised official bodies: Where required by law (e.g. court orders, prosecutor requests, health regulatory authority requests).

Your data will not be used for marketing communications, cross-border transfers, or sharing with commercial third parties without your explicit consent.

6. Method of Data Collection

Your personal data is collected in a fully automated manner through the contact and appointment forms on the nisclinic.com website, when you fill in the form fields and click the "submit" button.

7. Retention Period

Your form data is retained for up to 2 years to respond to your request and to cover any resulting service agreement. If an appointment or treatment relationship commences, a 10-year retention period applies as part of the medical record. At the end of the applicable period, data is deleted or anonymised in accordance with the requirements of the applicable legislation.

8. Your Rights

Under the TRNC Personal Data Protection Law, in relation to your personal data you have the right to:

  • Learn whether your data is being processed,
  • Request information if it is being processed,
  • Understand the purpose of processing and whether it is being used in accordance with that purpose,
  • Know the third parties to whom your data has been transferred, whether domestically or abroad,
  • Request correction if your data is incomplete or inaccurate,
  • Request deletion or destruction of your data within the conditions prescribed by law,
  • Request that third parties who have received your data are notified of any correction, deletion, or destruction,
  • Object to conclusions drawn solely by automated processing,
  • Request compensation if you suffer loss due to unlawful processing.

To exercise these rights, please send a request verifying your identity to [email protected]. We will respond to all requests within 30 days.

9. Consent

By completing and submitting our form, you declare that:

  • You have read and understood this data protection notice,
  • You consent to your personal data being processed for the purposes, by the methods, and on the legal bases set out above,
  • You give your explicit consent to the processing of any special category health data you may share within your form message.

You may withdraw your consent at any time by contacting us through the channels listed above.


Last updated: 24 June 2026.

This document is for informational purposes only and does not constitute legal advice. Please consult a legal advisor for your specific situation. Current legislation is binding.

For any questions, you can reach us via our contact page.

CallBook Now