1. Data Controller
Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Arem Terapi.
Contact: info@aremterapi.com · Web: www.aremterapi.com
2. Personal Data Processed
The following personal data may be processed through our platform:
- Identity information (first name, last name)
- Contact information (email, phone)
- Account and authentication data (password hash, OTP records)
- Appointment and session information (date, time, session type, therapist)
- Payment information (transaction amount, status; card details stored with payment provider)
- Messaging content (secure therapist-client communication)
- Voluntary health/therapy-related disclosures (concern area, mood notes, session notes)
- Technical data (IP, browser, session logs, cookies)
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Creating client accounts and identity verification
- Therapist matching and appointment management
- Organizing online/in-person sessions
- Processing payments and billing
- Secure messaging between therapist and client
- Post-session feedback and service quality monitoring
- Fulfilling legal obligations under KVKK and GDPR
- Platform security, fraud prevention, and technical support
4. Legal Basis and Collection Method
Your data is collected based on contract formation and performance, your explicit consent, the legitimate interests of the data controller, and legal obligations.
Data is collected electronically through registration forms, appointment requests, the client portal, messaging module, payment infrastructure, and automated logging systems.
5. Transfer of Personal Data
Your data is transferred only to the extent necessary for service delivery and in compliance with KVKK:
- Assigned therapist and platform moderation team (within scope of service)
- Payment service providers (Stripe, iyzico, etc.)
- Email/SMS infrastructure providers (verification codes)
- Hosting and infrastructure providers (servers, databases)
- Authorized public authorities (when legally required)
Your personal data is not sold or transferred to third parties for marketing purposes without your explicit consent.
6. Retention Period
Your personal data is retained for as long as required by the processing purpose and applicable statutory limitation periods.
If you close your account or request deletion, data not subject to legal retention obligations will be deleted, destroyed, or anonymized.
7. Data Subject Rights (KVKK Art. 11)
Under Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used accordingly
- To know third parties to whom data is transferred domestically or abroad
- To request correction if data is incomplete or inaccurate
- To request deletion or destruction under KVKK Art. 7
- To request notification of correction/deletion to third parties
- To object to adverse results from automated analysis
- To claim compensation for damages due to unlawful processing
You may submit requests to info@aremterapi.com. Requests are resolved within 30 days at the latest.
8. Data Security
Arem Terapi protects your personal data with encrypted communication (TLS/SSL), access control, role-based authorization, and regular security measures.
Therapist-client confidentiality is maintained in accordance with professional ethical principles.
Related documents