Privacy Notice
Last updated: 11 October 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to people who visit the veterinex.com website (the "Site"), sign up, or use it on behalf of a clinic. It explains why and on what legal basis we process personal data, how we collect it, who we share it with and what your rights are.
1. Data controller
The data controller is Murat Ertürk ("Veterinex"), who operates the Site. Contact: kvkk@veterinex.com.
2. What we process, why and on what legal basis
| Data subject | Data category and data | Purpose | Legal basis (KVKK) |
|---|---|---|---|
Visitor | Transaction security: IP address, browser and device information, access time (server logs) | Site security, fixing errors, keeping records required by law | Art. 5/2-ç legal obligation (Law No. 5651), art. 5/2-f legitimate interest |
Visitor | Usage preferences: province, district and service searched; language and cookie choices | Showing search results, remembering preferences | Art. 5/2-f legitimate interest; art. 5/1 explicit consent for optional cookies |
Visitor | Consent record: cookie choice, anonymous browser ID, policy version, time, browser information, hashed (irreversible) IP address | Proving cookie consent | Art. 5/2-ç legal obligation, art. 5/2-e establishing and protecting a right |
Visitor | Identity and contact: name, email or phone; request: contact message or "Something wrong?" report | Answering requests and reports, correcting clinic information | Art. 5/2-f legitimate interest |
Member (pet owner) | Identity: full name. Contact: mobile phone, email (optional). Transaction security: password (in irreversible form), session and login records | Opening and managing the account, login security | Art. 5/2-c performance of a contract, art. 5/2-f legitimate interest |
Member (pet owner) | Customer transactions: pet details (name, type, breed, date of birth), booking requests, booking notes, appointment history | Sending booking requests to the chosen clinic, updating you on their status | Art. 5/2-c performance of a contract |
Member (pet owner) | Customer transactions: the pet's health record (vaccine, parasite treatment and check-up records, dates, clinic name, notes), visit summaries entered by clinics; reminder preference and language | Keeping the health record, reminding you of the next date by text message (service notice), sharing it with the clinic you book when you choose to | Art. 5/2-c establishing and performing a contract, art. 5/2-f legitimate interest |
Member (pet owner) | Marketing: commercial message consent and its date | Sending campaigns and news | Art. 5/1 explicit consent (Law No. 6563) |
Member (pet owner) | Legal transactions: dates you accepted this notice and the Terms of Use | Proving the acceptances | Art. 5/2-ç legal obligation, art. 5/2-e establishing and protecting a right |
Clinic representative | Identity: full name. Contact: mobile phone, email (optional). Transaction security: password, session and login records | Opening and managing the clinic account | Art. 5/2-c performance of a contract |
Clinic representative | Clinic details: clinic name, address and location, phone, WhatsApp, email, website, opening hours, services, logo, contact person | Listing the clinic on the Site, managing booking requests | Art. 5/2-c performance of a contract; for clinics added by Veterinex, art. 5/2-d made public by the data subject and art. 5/2-f legitimate interest |
Clinic representative | Legal transactions: ownership claim note and document showing authority to represent the clinic | Linking the clinic to its real owner, preventing false claims | Art. 5/2-e establishing and protecting a right, art. 5/2-f legitimate interest |
Veterinex does not ask for Turkish ID numbers, bank or card details, or special categories of personal data (such as your own health information). Please only write information about your pet in booking notes. Clinic details are not personal data when they belong to a legal entity; for practices operating under a veterinarian's own name they are personal data and covered by this notice.
3. How we collect personal data
- From you, through forms on the Site: sign-up, booking, pets, clinic application, ownership claim, contact and error report forms.
- Automatically: through server logs and cookies while you use the Site.
- From public sources: details of clinics added to the directory by Veterinex are compiled from sources published by the clinic itself (website, map listings, directories).
4. Who we share it with and why
Your personal data may be transferred to the following recipient groups in Türkiye or abroad, in line with Articles 8 and 9 of the KVKK and only as far as needed for the purposes below:
| Recipient group | Data that may be shared | Purpose | Legal basis (KVKK) |
|---|---|---|---|
The veterinary clinic you send a booking request to | Full name; phone only while the appointment is pending or confirmed (hidden from the clinic once it is settled); pet details, chosen service, appointment date and note. Your email address is not shown to the clinic | Planning, confirming and carrying out the appointment | Art. 8/2-a and art. 5/2-c performance of a contract |
Site visitors (public listing) | Clinic name, address and location, phone, WhatsApp, website, opening hours, services, logo | Listing the clinic in the directory | Art. 8/2-a; art. 5/2-c, art. 5/2-d made public, art. 5/2-f legitimate interest |
Infrastructure and hosting providers (servers, database, file storage, backups, content delivery network and cyber security services) | All categories of personal data processed on the Site | Running the Site, storing and backing up data securely, protecting against attacks | Art. 8/2-a; art. 5/2-c, art. 5/2-f |
The veterinary clinic you book with when you tick "share the health record" (for that appointment only) | The pet's health record | Examining the animal with its history known | Art. 8/2-a and art. 5/2-c establishing and performing a contract |
Communication service providers (email and SMS delivery) | Full name, email, phone, message content | Appointment and account notices, vaccine/care reminder texts, password resets, campaigns and news if you allowed them | Art. 8/2-a; art. 5/2-c; art. 5/1 explicit consent for commercial messages |
Map service provider (Google Maps) | Information sent by your browser when the map on a clinic page loads (IP address, browser information) | Showing the clinic's location on a map on the clinic page | Art. 8/2-a; art. 5/2-f legitimate interest |
People and companies providing software development, maintenance and technical support | Account and transaction records as far as needed for support | Fixing errors, developing and maintaining the Site | Art. 8/2-a; art. 5/2-f |
İleti Yönetim Sistemi A.Ş. (İYS, the Message Management System) | Full name, phone, email, commercial message consent and opt-out records | Recording commercial message permissions as required by law | Art. 8/2-a; art. 5/2-a provided by law, art. 5/2-ç legal obligation (Law No. 6563) |
Lawyers, accountants and other advisers | Data related to the dispute or audit concerned | Handling legal disputes, checking legal compliance | Art. 8/2-a; art. 5/2-e establishing, exercising or protecting a right, art. 5/2-ç |
Competent public authorities (Personal Data Protection Authority, Information and Communication Technologies Authority, Ministry of Trade, law enforcement, etc.), courts and enforcement offices | Data related to the request | Fulfilling legal obligations, responding to official requests, conducting legal proceedings | Art. 8/2-a; art. 5/2-a, art. 5/2-ç, art. 5/2-e |
Transfers abroad: some of the recipients above may have servers or service centres outside Türkiye. Your personal data is transferred abroad in line with Article 9 of the KVKK:
- where the Board has issued an adequacy decision for the country, a sector within it or the international organisation concerned,
- where there is no adequacy decision, provided that one of the appropriate safeguards is in place, such as the standard contract announced by the Board signed and notified to the Authority within five business days, binding corporate rules approved by the Board, or a written undertaking,
- where neither exists, only occasionally and in the exceptional cases listed in the Law (for example your explicit consent after being informed of the possible risks, or where the transfer is necessary for the performance of a contract).
The map on clinic pages is loaded by your browser directly from Google when the page is shown; Google may process information sent by your browser on its servers abroad under its own privacy policy. Your personal data is never sold or rented to third parties for advertising.
5. How long we keep it
Personal data is kept for as long as needed for the purposes above and for the retention periods required by law, and is then deleted, destroyed or anonymised. Details and cookie lifetimes are on the "Cookies and Privacy" page. If you represent a clinic added by Veterinex, you can claim the clinic to manage its details or ask for it to be removed from the directory.
6. Your rights under the KVKK
Under Article 11 of the KVKK you may apply to the data controller to:
- find out whether your personal data is processed and, if so, request information about it,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Türkiye or abroad to whom it is transferred,
- ask for incomplete or inaccurate data to be corrected,
- ask for it to be deleted or destroyed under the conditions of Article 7 of the KVKK,
- ask for corrections, deletions or destructions to be notified to the third parties it was transferred to,
- object to a result against you arising solely from automated analysis,
- claim compensation if you suffer damage due to unlawful processing.
7. How to apply
Send your request in Turkish, stating your full name, Turkish ID number (nationality and passport number for foreign nationals), an email address or phone number where we can reach you, and the subject of your request: to kvkk@veterinex.com from the email address registered on the Site, or (including members without a registered email) through the contact form by choosing the "Data protection / my personal data" topic. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, requests are answered free of charge as soon as possible and within 30 days at the latest; if the action involves an additional cost, the fee set by the Personal Data Protection Board may be charged.