Privacy and data protection notice

Who is responsible

The data controller for this website and its medical review enquiries is Dr. Mehmet Hakan Pıçak, an interventional radiologist in İzmir, Türkiye. Contact: info@drpicak.com or +90 532 660 20 35.

What we collect

If you send a request through the medical review panel, we collect your name, phone number, email address, the condition you ask about, your symptoms or diagnosis and, if you give them, your age, sex, city, country, preferred travel time, contact preference, previous procedures, blood-thinner use, other conditions, a short note and any imaging or reports you upload. Later replies you write to the doctor and further files you add through your private panel link are kept with the same request. We also record the submission time, the version of this notice and your consent, and the connection IP address for security and record keeping. Ordinary server logs record technical requests. Requests sent through the earlier website form remain in a separate read-only archive.

Why and on what basis

We use these details to receive your request, carry out the preliminary review you ask for, respond to you, and, if you choose to proceed, discuss a treatment plan. Contact details are processed to take steps you request before a possible healthcare arrangement and to communicate with you. Health information is processed for the specific review you request on the basis of your separate explicit consent in the panel (Article 9(2)(a) GDPR for patients in the EU/EEA or the UK; Article 6 of Turkish Law No. 6698); where medical diagnosis, treatment or care is provided by a professional under a duty of confidentiality, the applicable healthcare ground in Article 6(3)(e) of Law No. 6698 may also apply. Technical records are used to protect the service and meet legal obligations. We do not use your request for advertising, and no automated decision is made about you.

Who receives it

Only Dr. Pıçak and authorised practice personnel can open requests, in the restricted WordPress area. Imaging and report files are encrypted and stored outside the public website; they are never placed in the media library and download links expire after 30 minutes. Email notifications contain only a private link to your panel — never the review, your symptoms or your files. Anyone who has that link can open your request, so please keep it private. If you decide to seek treatment, relevant records may be shared with the treating hospital as needed for your care and with your knowledge. Hosting and technical support providers may process data needed to run their services.

Other contact channels

If you choose email or WhatsApp instead of the website form, those providers process your message under their own terms and may use infrastructure outside Türkiye. For imaging and medical reports, use the secure website upload where possible. Do not send urgent medical requests through this website; contact local emergency services.

How long and how secure

Medical review requests and their files are deleted automatically 48 months after submission; enquiries from the earlier website form are deleted after 730 days. Earlier deletion requests are assessed against any applicable legal duty to retain information. The site uses HTTPS; uploaded files are encrypted and stored outside the public web root, and access to requests is restricted. No security measure can guarantee absolute protection.

Your rights

Under Article 11 of Law No. 6698, you may ask whether we process your data, request information and correction, request deletion when the legal conditions are met, learn about recipients, object to certain automated outcomes and seek compensation where the law provides it. If you are in the EU/EEA or the UK, you also have rights of access, rectification, erasure, restriction, data portability and objection under the GDPR, and you may complain to your local data protection authority. You can withdraw your consent at any time; this does not affect processing before the withdrawal. Send a request to info@drpicak.com. We may need to verify your identity before acting on it.

Last updated: 31 October 2026.