1. Data Controller
Controller (clinic): Prof. Dr. Vahit Onur Gül — Authorized Dripfy Corner, Çukurambar ATM Plaza, Çankaya, Ankara, Türkiye. Contact: info@dr-vog.com.
Trademark and longevity infrastructure provider: Dripfy GmbH, Neue Mainzer Straße 66, 60311 Frankfurt am Main, Germany. The clinic operates as an authorized "Dripfy Corner" under license from Dripfy GmbH.
2. Categories of Personal Data Collected
Identity data: name, date of birth.
Contact data: phone, e-mail, address.
Health data (special category): medical history, examination findings, lab/imaging results, treatment plans, surgical and post-operative records.
Financial data: invoicing only (no card data stored on our servers; payment via PCI-DSS-compliant providers).
Marketing preferences: newsletter/SMS/WhatsApp consents, longevity quiz results (consent-based only).
Technical data: IP address, browser type, anonymized usage analytics.
3. Purposes and Legal Bases (GDPR Art. 6 & 9)
Provision of medical services and patient file management — Art. 6(1)(b) contract performance, Art. 9(2)(h) provision of healthcare under professional secrecy.
Appointment management and patient communication — Art. 6(1)(b).
Compliance with health regulations and tax law — Art. 6(1)(c) legal obligation.
Marketing and longevity content — Art. 6(1)(a) explicit consent only.
Anonymized website analytics — Art. 6(1)(f) legitimate interest.
4. Data Sharing with Dripfy GmbH
With your explicit consent only, your marketing-related contact data (name, email, phone, longevity preferences) may be shared with Dripfy GmbH for the purposes of longevity program updates, IV protocol education and global patient communications.
Your medical (health) data is never shared for marketing purposes.
Cross-border transfers from Türkiye to Germany (EU) are protected under Türkiye–EU adequacy frameworks and Standard Contractual Clauses (SCCs).
You may withdraw consent at any time via 'unsubscribe' in our e-mails or by contacting privacy@dr-vog.com.
5. International Transfers
We use EU-based hosting (IONOS, Frankfurt). Limited service providers may process data outside the EU under SCCs:
Vercel (USA): edge analytics — anonymized.
Resend (USA): transactional e-mail delivery (under SCCs).
Google Analytics & Meta Pixel: anonymized, consent-based only.
6. Retention Periods
Health records: 20 years (per Turkish Ministry of Health regulations).
Contact and appointment records: duration of relationship + 5 years.
Marketing data: until withdrawal of consent.
Anonymized analytics: 26 months.
7. Your Rights (GDPR Art. 15–22)
Right of access — request a copy of your personal data.
Right to rectification — correction of inaccurate data.
Right to erasure ('right to be forgotten') — subject to legal retention obligations.
Right to restrict processing.
Right to data portability.
Right to object to processing (including direct marketing).
Right to withdraw consent at any time.
Right to lodge a complaint with a supervisory authority (e.g., the Turkish KVKK Authority or your local EU DPA).
8. Cookies
Essential cookies are used to operate the site (language preference, theme).
Analytics and marketing cookies are loaded only with your explicit consent via our cookie banner.
You can change your preferences at any time via the cookie settings link in the footer.
9. Contact
For data-protection inquiries: info@dr-vog.com (clinic) or privacy@dripfy.de (Dripfy GmbH).
Response within 30 days as per GDPR Art. 12.