Last updated: 1 September 2026
This text does not constitute an explicit consent statement. Your preferences regarding cookies and similar technologies that require explicit consent are obtained through the Cookie Settings panel, which is presented separately from this text. Non-essential cookies will not be activated unless you enable them.
1. Purpose and scope
This Cookie Policy and Cookie Privacy Notice has been prepared to provide information about the personal data processing activities carried out through cookies, pixels, tags, local storage and similar technologies used on the https://drberkayakmaz.com website operated by Assoc. Prof. Dr. Berkay Akmaz.
This text has been drawn up with due regard to Article 10 of the Personal Data Protection Law No. 6698, the Communiqué on the Procedures and Principles to Be Followed in Fulfilment of the Obligation to Inform, the Personal Data Protection Authority's Guide on Cookie Practices and the relevant legislation.
Information entered in appointment or contact sections of the website and data submitted via WhatsApp, telephone or email are processed within the scope of the Privacy Notice, which is published separately from this text.
2. Identity and contact details of the data controller
The data controller under Law No. 6698 is the natural person specified below:
- Data controller: Assoc. Prof. Dr. Berkay Akmaz
- Trading name: Assoc. Prof. Dr. Berkay Akmaz Medical Practice
- Address: Kültür Mahallesi, Talatpaşa Bulvarı No:4/A, Alsancak, Konak/İzmir
- Telephone: +90 547 917 11 37
- Email: [email protected]
- Website: https://drberkayakmaz.com
In this text, the term "Practice" refers to the data controller, Assoc. Prof. Dr. Berkay Akmaz, and the medical practice activities conducted under his supervision.
3. What are cookies and similar technologies?
Cookies are small text files that may be stored on a browser or device when a website is visited. In addition to cookies, technologies such as pixels, tags, browser local storage and performance beacons may also collect technical information about use of the website.
Cookies may be classified as first-party or third-party cookies according to the party that places them, and as session or persistent cookies according to their duration of use:
- First-party cookies are placed directly by the drberkayakmaz.com domain.
- Third-party cookies are placed by an external service provider used on the website.
- Session cookies are deleted when the browser session ends.
- Persistent cookies remain on the device for a specified period or until deleted by the user.
4. Data that may be processed through cookies
Depending on the technology used and your preferences, all or some of the following data may be processed by automated means:
- IP address and the date and time of the visit,
- device type, operating system, browser type and screen specifications,
- page visited, referring page and traffic source,
- language preference and cookie preferences,
- session or browser identifiers,
- page views, link clicks and technical performance information,
- campaign source and, where the user has given explicit consent, conversion measurement information.
Visits to pages concerning eye diseases, symptoms or treatments may allow inferences to be drawn about a person's health status or interest in health-related matters. For this reason, the Practice:
- does not write detailed health information, diagnoses, test results or appointment form content into cookies,
- does not send form fields, WhatsApp message content or direct identifiers such as telephone numbers to analytics or advertising providers,
- does not use visits to health-related pages for personalised advertising, retargeting, creating lookalike audiences or health profiling,
- does not transmit fields that could enable health-related inferences, such as treatment page names, page paths and query parameters, in events sent to advertising and measurement providers.
5. Cookie categories and legal grounds
| Category | Purpose of use | Legal ground | Default status |
|---|---|---|---|
| Strictly necessary cookies | Ensuring that the website operates securely, preventing misuse, recording cookie preferences and providing essential functions expressly requested by the user | Depending on the purpose of processing, Article 5(2)(c), Article 5(2)(ç) or Article 5(2)(f) of the Law | Always active |
| Preference and functionality cookies | Remembering website preferences selected by the user, such as language | Article 5(2)(c) of the Law for a function expressly requested by the user. For uses outside this scope, explicit consent under Article 5(1) of the Law | Active only to the extent necessary or permitted by the user |
| Analytics and performance cookies | Producing statistics about visitor numbers, traffic sources, page usage and technical performance | Explicit consent under Article 5(1) of the Law | Disabled by default |
| Advertising and campaign measurement cookies | Measuring conversions limited to advertising clicks where the user has given consent | Separate explicit consent under Article 5(1) of the Law | Disabled by default |
| External content technologies | Running embedded videos, maps or similar third-party content | Explicit consent under Article 5(1) of the Law to the extent required for the relevant service | Disabled by default |
Boxes for cookies that are not strictly necessary are not pre-selected. Options to give consent, refuse consent and subsequently change a preference are presented to the user in an easy and balanced manner.
6. Technologies used or planned to be configured on the website
The table below has been prepared on the basis of the technical components identified on the website as at 1 September 2026 and the cookies envisaged for compliant preference management. The actual name, purpose, provider and duration of cookies must match the current inventory in the Cookie Settings panel.
| Cookie or technology | Provider and party | Purpose | Category | Duration | Condition for activation |
|---|---|---|---|---|---|
ba_cookie_consent | drberkayakmaz.com, first party | Remembering the user's category-based cookie preferences and the date of the preference | Strictly necessary | Up to 6 months or until the preference is withdrawn | Always active. If a different name is used in the technical implementation, this row must be updated with the actual name |
pll_language | drberkayakmaz.com, first party | Remembering the website language expressly selected by the user | Preference and functionality | 1 year | Active only when a language is selected or the user permits functionality cookies |
_ga | Google Analytics, first-party identifier | Statistically distinguishing visitors | Analytics and performance | Depending on the configuration, up to 2 years | Active only when analytics cookies are permitted |
_ga_97XZY02BCH | Google Analytics, first-party identifier | Maintaining session status for measurement ID G-97XZY02BCH | Analytics and performance | Depending on the configuration, up to 2 years | Active only when analytics cookies are permitted |
_gcl_au, _gcl_aw, _gcl_gs and _gcl_* | Google Ads or Google Tag Manager, first-party identifier | Associating an advertising click with a permitted conversion event | Advertising and campaign measurement | Depending on the configuration, generally up to 90 days | Active only when advertising and campaign measurement cookies are permitted |
_gcl_ls | Google Ads or Google Tag Manager, browser local storage | Storing advertising click information for conversion measurement | Advertising and campaign measurement | Depending on the configuration, generally up to 90 days | Active only when advertising and campaign measurement technologies are permitted |
_fbp and, where the visit originates from a Meta advertising click, _fbc | Meta Pixel, first-party identifier | Distinguishing the browser and measuring the advertising click and permitted conversion event | Advertising and campaign measurement | Depending on the configuration, generally up to 90 days | Active only when advertising and campaign measurement cookies are permitted. Visits to health pages are not used for retargeting or personalised advertising |
| Google Tag Manager, GTM-KBJBHDVZ | Google, tag management technology | Managing permitted analytics and measurement tags | Category of the relevant tag | Does not have a cookie duration of its own | No non-essential tag within the container is activated unless consent has been given for the relevant category |
| Cloudflare Web Analytics performance beacon | Cloudflare, cookie-free performance technology | Producing aggregated technical performance measurements, such as page loading and Core Web Vitals | Analytics and performance | Does not create a client-side cookie or local storage record | Active only when analytics and performance technologies are permitted |
__cf_bm, cf_clearance, _cfuvid and similar Cloudflare security cookies | Cloudflare, third-party infrastructure provider | Managing bot traffic, misuse, security verification and rate limiting | Strictly necessary | Varies according to the security service used. __cf_bm expires after 30 minutes of inactivity | May be used only when the relevant security feature is activated |
Google Analytics, Google Ads and Meta Pixel tags are not activated at all unless explicit consent has been given. Even where consent has been given, health-related page paths, page titles, form fields, email addresses, telephone numbers and free text entered by the user are not sent to these providers. Google ad personalisation, remarketing, audience creation, Google Signals, enhanced conversions and Meta custom or lookalike audience features are not used in relation to visits to this website.
If a new cookie or provider is to be used due to a technical change, this table, the Cookie Settings panel and the data processing inventory are updated before the relevant technology is activated. A new preference is obtained from the user for new purposes that require explicit consent.
7. External links and embedded content
The website may contain external links to Google Maps, YouTube, WhatsApp or social media platforms. Merely displaying a link does not mean that cookies belonging to the relevant third-party service are placed on your device. If you open the link, the privacy and cookie rules of the relevant platform apply.
If a YouTube video, Google map or similar third-party content is embedded on a web page, the content is not loaded until the required user preference has been obtained. Where possible, a privacy-enhanced embedding method and a click-to-activate approach are used.
8. How can cookie preferences be managed?
On your first visit to the website, cookies that are not strictly necessary are disabled by default. Through the panel displayed, you can:
- continue with necessary cookies only,
- enable or disable cookie categories individually,
- allow all optional cookies,
- subsequently withdraw consent that you have previously given.
You can change your preferences through the Cookie Settings link, which is permanently accessible in the footer of the website. Withdrawal of explicit consent takes effect for the future. It does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You may also view, block or delete cookies through your browser settings. However, browser settings do not replace the category-based preference panel provided on the website. Blocking strictly necessary cookies may prevent certain functions, such as language selection or security verification, from working properly.
9. Transfer of personal data
Data processed through cookies may be shared, to the extent required by the purpose of use, with information technology, hosting, cybersecurity, analytics and campaign measurement service providers. Each transfer is carried out in accordance with the conditions set out in Articles 8 and 9 of Law No. 6698 and with due regard to the principle of data minimisation.
The use of service providers such as Google, Meta or Cloudflare that are established abroad or provide access from abroad may result in the transfer of personal data abroad. The tiered system under Article 9 of the Law is applied to regular transfers abroad. Accordingly, in addition to the existence of a relevant data processing condition, an adequacy decision or one of the appropriate safeguards, including a standard contract, must be in place. If the required transfer mechanism cannot be provided, the relevant optional service is not activated.
Explicit consent given for the use of cookies is not, on its own, regarded as general permission for regular transfers abroad. Exceptions for incidental transfers are not relied upon as a basis for analytics or advertising technologies that operate continuously.
10. Retention and deletion
Cookies are not retained for longer than the maximum periods specified in the table. When the user withdraws consent, no new cookies or identifiers relating to the relevant category are created. Existing identifiers under the control of the Practice are deleted or invalidated to the extent technically possible.
Records relating to cookie preferences may be retained with restricted access for the period necessary to demonstrate compliance with legal obligations and the management of explicit consent. When the purpose of processing ceases to exist and no other legal ground remains, personal data are erased, destroyed or anonymised in accordance with Article 7 of Law No. 6698 and the relevant destruction legislation.
11. Rights of the data subject
Under Article 11 of Law No. 6698, you have the right to apply to the data controller and:
- Learn whether your personal data are processed,
- Request information if your personal data have been processed,
- Learn the purpose of processing and whether the data are used in accordance with that purpose,
- Know the third parties to whom your personal data are transferred in Türkiye or abroad,
- Request rectification if your personal data have been processed incompletely or inaccurately,
- Request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,
- Request that rectification, erasure or destruction operations be notified to third parties to whom the data have been transferred,
- Object to a result arising against you through the analysis of your personal data exclusively by automated systems,
- Claim compensation for damage suffered as a result of unlawful processing.
12. Application to the data controller
You may submit applications concerning your rights by one of the following methods in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- You may submit your written and signed application, together with information enabling identity verification, in person or through a notary public to Kültür Mahallesi, Talatpaşa Bulvarı No:4/A, Alsancak, Konak/İzmir.
- You may send your application signed with a secure electronic signature or mobile signature to [email protected].
- You may apply to [email protected] using the email address that you previously notified to the Practice and that is registered in the Practice's system.
- You may use one of the methods described in the KVKK Data Subject Application Form on the website.
Applications are concluded as soon as possible and no later than thirty days, depending on the nature of the request, and are in principle processed free of charge. If the procedure requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board may be charged.
13. Updates to this text
This text may be updated when legislation, decisions of the Personal Data Protection Board, technologies used on the website or data processing activities change. The current text is published on the website. If there is a material change affecting user preferences, the necessary information is provided and explicit consent is obtained again where required.
